Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File:                     1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier:          I4lpEs4y5sqk1RrfL1Ry9S4ULK5OMq3cn2abDg8B5Hw=
Subject key identifier:   83:14:AE:0C:52:04:DB:96:6A:6C:A4:EC:49:EB:AA:2E:54:B2:D9:7B
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer:       /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial:       018F8824A47F86BC491BBF4317C407D3315D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number:          01D8
Signing time:             Fri 17 May 2024 20:00:53 +0000
Manifest this update:     Fri 17 May 2024 20:00:53 +0000
Manifest next update:     Sat 18 May 2024 20:00:53 +0000
Files and hashes:         1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: O0rcVeDAxZb3uKp8GuStO8aKyxWHUi3PrARgdjCTH8Y=)
                          2: 27tYF5r4dTVHYcXhbqBaRMF6Ra0.roa (hash: TJUeuVhPe8a01nefxZi6HIUDn459oYAJrW7kX9fXKsM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:a4:7f:86:bc:49:1b:bf:43:17:c4:07:d3:31:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
        Validity
            Not Before: May 17 20:00:53 2024 GMT
            Not After : May 18 20:00:53 2024 GMT
        Subject: CN=8314ae0c5204db966a6ca4ec49ebaa2e54b2d97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:d6:6b:29:3f:53:98:c4:bd:44:9e:af:ae:
                    ff:7f:95:26:f3:3e:42:cd:b9:56:1e:c8:e9:75:50:
                    4e:dc:57:18:99:1e:fa:f3:0a:14:f6:3e:6f:14:e1:
                    69:8a:77:73:e1:b4:7f:fc:46:97:50:55:0d:d6:17:
                    0d:de:22:3b:18:19:4a:8c:33:5e:75:3a:25:1d:da:
                    53:2e:f4:f4:c9:26:41:1f:92:c1:c3:66:eb:ea:eb:
                    f8:ba:42:5d:6d:79:5e:9e:2b:ea:00:ec:16:cc:b0:
                    ed:fb:2c:74:c2:2a:51:59:5a:e1:73:ad:dd:33:48:
                    90:bf:09:db:b8:5a:fa:86:52:7b:a8:d5:60:66:28:
                    5d:5a:58:f0:88:7a:bb:3d:8c:4b:f3:1d:74:de:8b:
                    ca:5e:ce:cf:fa:16:7f:cc:a7:75:f2:21:cb:21:91:
                    8e:eb:71:ae:f3:b9:16:4a:8e:3d:85:3e:33:1c:fd:
                    13:cc:df:1b:15:a0:ba:ea:11:53:59:cb:64:c2:a4:
                    4b:29:df:5d:61:7c:14:80:e9:ea:36:fb:f3:7b:9e:
                    fc:cd:de:b0:e9:e9:61:ec:c9:fe:7e:ff:ea:c8:a8:
                    53:63:ad:0b:ca:5e:a5:2b:87:db:7a:c7:1f:0a:c0:
                    b4:cc:51:7a:f3:6a:c1:e8:a9:4e:c0:72:47:68:ec:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:14:AE:0C:52:04:DB:96:6A:6C:A4:EC:49:EB:AA:2E:54:B2:D9:7B
            X509v3 Authority Key Identifier:
                keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ed:c1:72:d7:89:fe:40:62:b3:a2:f7:64:ac:57:ea:b5:9a:
         fa:8f:f9:49:d7:b3:49:02:74:e5:35:dc:1e:be:a5:6f:ab:fd:
         90:da:61:ef:82:f4:6c:5b:ed:65:6b:78:fb:4f:41:85:43:b3:
         e3:eb:42:c7:6c:4d:94:32:29:39:43:a9:4f:43:02:45:13:6e:
         d9:49:dd:b8:4e:5f:1d:81:b5:9e:7e:0c:d1:a7:2a:9e:3a:6a:
         c8:55:49:fe:59:84:ac:59:1d:92:51:6f:f3:8f:e2:a0:c8:b7:
         ba:18:33:b6:f2:24:92:8d:91:ba:f1:d5:47:1d:c0:6b:a8:90:
         3b:3a:04:c4:f6:cd:a9:b5:b5:30:77:8f:97:00:d5:59:ab:fd:
         af:5f:82:f9:12:7d:83:8c:e8:7e:83:cd:46:4d:28:aa:f9:f1:
         b4:7e:2d:aa:42:d5:6f:09:20:6d:6a:2e:a0:cf:24:74:0d:fb:
         a3:63:52:54:9c:59:aa:1b:f2:99:04:f9:83:3b:76:0b:37:ce:
         11:ab:b0:b1:8e:77:d3:b5:20:2b:c5:b8:d5:8f:e2:f6:1e:9f:
         e3:8d:d1:e6:65:e6:af:ce:2e:2d:1c:d3:d2:2a:dd:92:ea:b9:
         6c:58:a1:f9:d3:57:cb:78:d2:31:70:38:59:81:7c:b7:22:fc:
         79:e7:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:15 2024 by rpki-client on console-fra.rpki-client.org