Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File:                     Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier:          B/nq+Db3W6jiKbHBmaw/tGU0a2MMf0LDS3P4wXxIRto=
Subject key identifier:   DC:1F:C7:C9:11:F2:C7:01:B1:9D:A4:8F:F3:A0:3F:5E:6C:53:F7:E5
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer:       /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial:       018F42681837E578FE058DE9F00740E726E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number:          07CF
Signing time:             Sat 04 May 2024 07:01:09 +0000
Manifest this update:     Sat 04 May 2024 07:01:09 +0000
Manifest next update:     Sun 05 May 2024 07:01:09 +0000
Files and hashes:         1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: oFDym3a71GEt+TkBkCVjDULLTDRwPToBQ8eD+S5ybOI=)
                          2: R_W93tbqvf0KFA7JwqifdVTDZp8.roa (hash: LpjNyNmfS0pbUz63KYoqPoL+uBsO1mtyIbpp9xR2WIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:18:37:e5:78:fe:05:8d:e9:f0:07:40:e7:26:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
        Validity
            Not Before: May  4 07:01:09 2024 GMT
            Not After : May  5 07:01:09 2024 GMT
        Subject: CN=dc1fc7c911f2c701b19da48ff3a03f5e6c53f7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:a0:25:1f:e3:6a:f5:e9:d6:75:71:45:a5:
                    eb:57:dd:22:3e:6e:3f:69:86:4b:8c:a5:af:87:d7:
                    4c:1e:9f:0c:9a:44:09:ee:c1:d3:6a:b9:17:b3:b6:
                    49:95:50:e0:25:ff:af:4d:4a:aa:1c:c5:85:59:2d:
                    10:72:dc:73:99:49:16:6b:85:b2:38:2d:29:6c:4f:
                    72:e0:7f:71:60:c2:34:13:2e:52:62:8e:c0:a5:fb:
                    82:76:60:14:81:ca:bd:ef:42:1e:91:46:d7:4d:6f:
                    05:65:98:24:8f:1f:16:33:2b:f8:23:a4:80:a2:25:
                    7e:30:b3:f4:05:da:b3:62:cf:fb:df:60:21:0c:a3:
                    22:1a:9c:4b:33:2b:03:80:aa:b6:93:8b:7c:e7:fa:
                    54:40:8e:60:6a:82:a9:05:41:f2:ef:93:7d:3b:a2:
                    7d:7e:87:dc:bd:95:09:f8:ad:84:5f:e8:6b:63:c2:
                    cf:09:de:7c:7d:63:3e:9b:24:b9:ce:a1:b3:42:ca:
                    83:6b:ed:29:2f:76:24:a4:c7:fd:50:23:68:08:d5:
                    08:3f:bc:68:79:81:73:26:93:21:a1:31:85:a3:a4:
                    51:a7:86:d4:2d:98:9c:4d:bd:33:c6:9e:6b:3f:08:
                    ef:22:27:6b:86:ee:29:6e:9e:bd:1e:41:b8:9a:3a:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1F:C7:C9:11:F2:C7:01:B1:9D:A4:8F:F3:A0:3F:5E:6C:53:F7:E5
            X509v3 Authority Key Identifier:
                keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e0:c0:27:18:c6:f3:d6:be:d6:8b:b4:6a:2e:13:63:b0:40:
         86:c9:db:37:da:52:c2:84:a5:a6:19:b1:09:93:fb:be:d8:dc:
         07:9c:70:35:0f:fc:78:a6:0e:5a:d0:c6:c2:e9:bf:9e:f5:03:
         97:fd:6a:30:23:a7:fb:2f:44:11:46:f7:e8:11:76:6a:e3:64:
         11:e4:12:cd:26:03:2e:65:ed:92:8e:15:66:e1:40:56:4f:be:
         c4:4a:4b:b5:00:01:3c:7e:b7:11:ad:5d:06:17:ec:12:33:eb:
         2c:21:3c:9a:b1:e4:37:55:4b:93:b6:d6:38:d5:77:ca:fa:70:
         d6:44:e0:46:65:e3:55:60:64:81:54:7d:3c:4f:bd:54:d4:a8:
         8a:71:b6:5e:82:c9:b7:56:bd:4e:2e:c6:a9:72:5c:e8:98:ae:
         0f:65:ab:1f:cd:c9:26:e3:7a:c3:26:bd:21:f6:73:c3:3e:90:
         a2:08:0e:35:f3:57:e4:7a:c8:36:77:50:b9:d4:9d:89:bb:17:
         29:6a:99:26:68:70:df:b2:91:fa:b4:bf:ca:a0:c0:59:b4:17:
         8b:d6:6c:a1:1c:3c:8c:e6:b6:40:21:5a:46:c9:94:93:44:c9:
         cb:32:a6:bb:6b:42:f1:59:0f:58:07:3a:7c:72:e1:83:c6:8a:
         a3:57:2a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:47:13 2024 by rpki-client on console-ams.rpki-client.org