Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File:                     CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier:          88XB1SWCBUYrj5kKm1WHzD4qHtOPLnaB8rCMFPDXAPE=
Subject key identifier:   63:63:A5:99:6F:B7:C4:DE:D2:16:C8:20:6E:BF:43:74:83:F0:43:CC
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer:       /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial:       018F220104B7A1A31738542DBAE1F86609B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number:          0A2D
Signing time:             Sun 28 Apr 2024 00:00:43 +0000
Manifest this update:     Sun 28 Apr 2024 00:00:43 +0000
Manifest next update:     Mon 29 Apr 2024 00:00:43 +0000
Files and hashes:         1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: JZzfiVpGSNxzT3f2FmNcbkPHU1gMLI2LWzQ9ICQYotM=)
                          2: e93hEgftjhNc4IxOt_YPJKYVLm4.roa (hash: D+tmOnkMi/fC0hisvMihZ+UtGVW/sAUJPjAU8lSk4G8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:01:04:b7:a1:a3:17:38:54:2d:ba:e1:f8:66:09:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
        Validity
            Not Before: Apr 28 00:00:43 2024 GMT
            Not After : Apr 29 00:00:43 2024 GMT
        Subject: CN=6363a5996fb7c4ded216c8206ebf437483f043cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:18:ce:e8:b3:7b:34:a9:28:95:2c:fc:fa:
                    d6:4b:55:9a:10:b1:c8:e4:09:49:1a:2a:b6:40:dd:
                    18:b5:84:fd:b0:6d:28:af:cd:ed:e4:2b:02:9f:4c:
                    05:94:8a:0b:b9:a9:72:08:a1:9a:8b:a1:00:6a:c0:
                    ca:a6:f9:97:73:0c:81:89:a1:e7:55:0e:b1:cd:f2:
                    fc:3a:7b:66:bc:72:97:de:1d:e9:d2:00:a7:52:23:
                    ea:f3:0c:e1:01:bc:85:6d:e7:05:b7:c8:26:96:78:
                    84:3a:14:2a:bc:ab:10:c3:95:49:e1:53:b0:ed:70:
                    8f:a8:ae:0d:9f:82:24:2b:0f:ce:64:93:f7:34:17:
                    e5:55:56:95:6c:93:07:3d:57:74:e5:da:cd:60:f0:
                    b7:45:a2:ea:cf:bd:0c:a3:35:f7:fd:a3:fb:78:cf:
                    c5:76:68:72:20:70:a1:8e:db:7d:f4:28:88:e2:df:
                    5e:1e:12:bf:02:ac:39:b0:22:48:6d:33:dd:46:0b:
                    15:44:20:00:db:78:ab:ef:55:51:d5:9e:87:fe:82:
                    6c:9c:7c:39:5b:92:84:dd:b2:61:9f:0b:93:d8:13:
                    6b:bf:0f:17:06:ab:22:4f:64:97:ec:7b:47:93:e1:
                    87:a9:73:cb:09:93:f3:3f:5f:c0:4d:0e:a9:f7:4d:
                    fd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:63:A5:99:6F:B7:C4:DE:D2:16:C8:20:6E:BF:43:74:83:F0:43:CC
            X509v3 Authority Key Identifier:
                keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:61:48:a8:f0:ac:37:32:05:36:9c:65:b9:a2:4d:d3:b7:dc:
         fc:f2:d3:0d:fa:ee:db:c8:f1:c8:b3:e1:25:32:a7:e6:4a:75:
         cd:36:a0:fc:b6:b3:05:78:46:20:e1:21:e1:cf:f9:78:2a:79:
         b6:e2:3d:c2:08:78:ee:b9:ed:61:bc:8f:f7:ee:93:a0:65:a7:
         2e:32:e7:bd:1d:18:cf:e6:0b:e3:38:04:a9:bc:c0:41:5b:a8:
         b1:60:29:96:f9:07:51:4d:a6:ed:e6:13:8a:8c:ac:14:40:90:
         f1:b6:87:aa:81:a7:6f:91:c2:06:78:5d:fe:e4:4a:f4:f7:c2:
         b2:71:c9:98:41:77:06:e4:1f:79:da:b6:dd:4c:da:40:a9:a4:
         63:4f:74:1f:05:80:c2:39:82:6c:82:4e:66:73:62:2c:5d:dc:
         93:ec:57:57:2d:0c:91:fe:e5:c6:7c:61:5a:c8:1a:ca:a6:4b:
         ba:0a:cc:3b:40:b0:11:9d:e5:fe:a2:c8:ff:5f:c3:50:68:2e:
         3c:06:a8:81:f6:97:5c:cd:a5:40:67:1a:af:48:55:18:44:f3:
         55:0a:86:93:82:2e:ab:43:70:e0:42:16:0d:88:7a:69:d5:6a:
         57:dd:8a:c0:00:b0:d0:0d:97:2a:e0:d5:28:1c:54:7d:9a:38:
         24:bd:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:17:13 2024 by rpki-client on console-ams.rpki-client.org