Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File:                     1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier:          icEf2SXy1ZRmkFZuCwiPrDxwJkMmNK/q4d1EdIHb6Ho=
Subject key identifier:   30:87:1A:EF:10:55:36:7F:68:9A:7D:3C:82:A4:5D:E2:6E:BD:3A:49
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer:       /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial:       018F528058AF4D779C0CD4D2B32FA94DAEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number:          0EF3
Signing time:             Tue 07 May 2024 10:01:34 +0000
Manifest this update:     Tue 07 May 2024 10:01:34 +0000
Manifest next update:     Wed 08 May 2024 10:01:34 +0000
Files and hashes:         1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: Lpr8rUOSTs94Ma7WaQd5xWplbe5wcUmA5AtIMErTdyc=)
                          2: yDuyzpz8V6tUO4ypI5JTC6olznI.roa (hash: sU3cGzXohhd2L4NE5eSM/HxBFPvYLSbJIsZgY+b3IeU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:52:80:58:af:4d:77:9c:0c:d4:d2:b3:2f:a9:4d:ae:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
        Validity
            Not Before: May  7 10:01:34 2024 GMT
            Not After : May  8 10:01:34 2024 GMT
        Subject: CN=30871aef1055367f689a7d3c82a45de26ebd3a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:ea:90:66:1e:98:50:f8:cf:06:19:f4:03:
                    12:36:2f:fb:bf:5f:02:b5:18:b0:cf:ee:e8:df:57:
                    97:b6:8c:60:2e:be:7c:c8:18:15:d0:4d:d6:2e:f7:
                    10:a0:00:ef:92:6c:d6:8a:b7:d0:21:a3:c6:c3:23:
                    e6:8d:50:93:76:46:a8:2e:eb:4a:0c:e5:e5:1e:fa:
                    b6:56:be:63:8e:4b:7a:3c:ef:ee:81:3b:d9:e7:4d:
                    4a:3e:c8:b3:4b:bb:55:3b:e0:b3:1d:b4:b5:66:3a:
                    63:fb:6a:11:ab:fc:8e:df:09:7b:ea:81:6e:a7:20:
                    0f:2b:d7:65:53:29:67:90:e7:2b:9b:e4:17:4a:ba:
                    08:04:9f:4c:28:a5:ed:9e:ca:e4:3a:8f:9d:ea:d7:
                    fb:7a:17:f0:e5:df:c7:25:26:f7:13:a0:81:1b:2d:
                    62:4b:3e:14:c8:99:7f:df:f1:45:dd:72:a4:a3:06:
                    4c:f3:9b:3f:c0:67:86:57:ea:02:ea:f8:35:84:4b:
                    27:fb:7a:24:39:73:cb:6b:97:1f:4b:35:5c:76:28:
                    2e:0e:ee:9a:d3:5e:41:06:fe:67:a9:64:ac:8f:1d:
                    33:a3:89:21:ee:68:92:f3:d0:e8:e2:a5:e8:d1:25:
                    28:1b:9b:f1:3d:b6:fa:21:65:09:2c:13:8c:97:1a:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:87:1A:EF:10:55:36:7F:68:9A:7D:3C:82:A4:5D:E2:6E:BD:3A:49
            X509v3 Authority Key Identifier:
                keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:73:97:f7:8a:98:69:3b:64:1d:f4:d1:2f:c8:3e:7f:80:72:
         da:53:fb:68:9f:bc:d0:aa:8a:b1:83:22:32:af:0c:cb:bc:12:
         b3:13:a9:9a:f2:8d:77:d1:04:66:de:cb:30:bd:dc:75:e8:a7:
         d6:39:55:bd:d9:65:94:40:3f:e7:d4:78:29:ca:60:c4:e3:63:
         c8:a5:6e:e5:9b:92:44:91:10:a8:fd:b9:db:ab:6d:41:1f:bd:
         4b:e8:6f:e0:22:8a:09:57:d4:fe:53:cc:12:8c:8e:58:ea:33:
         62:fb:cc:bd:80:17:a5:06:91:f4:00:94:5e:05:ff:4d:82:7e:
         8e:33:5f:d6:74:67:09:4b:2c:db:43:b2:26:43:97:0c:ac:47:
         fb:87:0d:60:21:54:8d:32:13:03:71:a2:4b:5d:7d:54:60:5b:
         a8:35:49:d7:40:e3:1a:69:c2:76:33:64:8b:67:f9:34:d6:cc:
         bd:c5:e3:82:c5:96:35:dc:c5:2a:66:65:9f:0c:63:6e:a8:fb:
         48:3f:fd:c2:c9:93:2c:f9:15:ec:b7:0a:29:73:c6:53:ee:54:
         5f:de:78:b3:2e:c6:99:ed:9b:9c:78:2d:a5:6b:5b:77:17:3c:
         e8:e9:e7:d9:85:6c:83:5c:e2:cd:ba:05:b7:6d:57:76:ea:99:
         9c:20:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:28:29 2024 by rpki-client on console-fra.rpki-client.org