Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File:                     II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier:          NNVp48TZLhygjkXkf4jkX0xN71yp2NEWTjClpT684Gk=
Subject key identifier:   E9:8E:78:7F:FB:3E:37:F1:0D:68:12:9D:1E:76:B8:E4:C2:29:B2:E5
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer:       /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial:       018F3BFA142A2397AF8D8064EF4D45B3E6AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number:          0E81
Signing time:             Fri 03 May 2024 01:03:15 +0000
Manifest this update:     Fri 03 May 2024 01:03:15 +0000
Manifest next update:     Sat 04 May 2024 01:03:15 +0000
Files and hashes:         1: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: J1Y5rxtdaqxr80whJDErbZ2T8xGEizzo3AEUYi/sueI=)
                          2: MTsNchiM1bA0Fht2i5Rb-FntfEI.roa (hash: MzTX+hzvXqKtWqu2LN24NqLLe+MkIAUKCiOLqju98QY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:14:2a:23:97:af:8d:80:64:ef:4d:45:b3:e6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
        Validity
            Not Before: May  3 01:03:15 2024 GMT
            Not After : May  4 01:03:15 2024 GMT
        Subject: CN=e98e787ffb3e37f10d68129d1e76b8e4c229b2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:c4:d3:0b:c7:77:69:aa:0d:89:a2:b1:d2:
                    92:aa:44:c4:00:f9:da:f2:34:48:69:d0:43:82:50:
                    54:9d:0b:7c:57:be:66:c9:51:d8:79:56:a1:ea:5d:
                    2b:34:cb:91:e4:62:55:d9:51:e0:2c:cf:af:2b:db:
                    79:70:b8:49:ae:72:14:e3:3f:5f:0a:a6:b6:59:fa:
                    63:21:0d:b4:ca:1c:6d:00:a9:68:0a:90:c3:0d:99:
                    d9:e3:b8:b9:0e:cb:1d:32:1b:04:be:df:f9:b4:9b:
                    c1:26:92:93:85:03:d0:1e:25:32:d2:f3:28:d7:bb:
                    05:ef:3f:59:b6:fa:2b:97:e9:63:45:bd:99:2c:29:
                    3a:1f:a3:bf:92:42:1d:c5:77:7d:40:93:d5:81:40:
                    64:98:51:ae:5d:27:44:7b:76:81:ba:b1:72:46:ef:
                    b1:cc:d7:d3:b2:a5:05:f5:2a:88:1a:d2:d9:fb:be:
                    08:6f:b8:06:bf:d7:72:2e:76:eb:57:b1:53:0f:5c:
                    7d:2d:7e:83:91:2e:b8:48:cb:0a:fc:e7:68:e5:66:
                    d7:c8:28:a1:5c:9d:fc:f2:29:ee:e5:4e:29:24:b1:
                    50:0f:78:47:3b:82:19:3d:fe:c3:fd:73:9e:6c:3c:
                    3c:9e:6a:de:99:08:3f:69:a9:7d:4a:49:ee:6c:d7:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8E:78:7F:FB:3E:37:F1:0D:68:12:9D:1E:76:B8:E4:C2:29:B2:E5
            X509v3 Authority Key Identifier:
                keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:55:da:24:33:00:28:3b:fa:aa:80:2f:49:f6:a8:46:88:
         ee:08:d9:26:83:06:1c:06:21:54:57:b6:5a:db:e8:75:b9:90:
         7a:a0:97:d5:14:26:9a:f6:a9:1b:cf:0b:c3:19:60:e1:af:cc:
         0c:6a:47:7c:66:80:5c:f3:64:d1:d7:34:7a:65:39:8f:69:f8:
         dd:da:9a:04:03:56:77:4f:90:f3:51:d2:d1:3a:a8:5b:78:82:
         e4:ba:9a:90:db:1e:8e:54:3c:2f:e2:fc:6c:0d:c3:77:0a:a8:
         e4:cd:b2:fb:85:7b:14:e2:6d:93:f1:d3:db:8b:94:68:44:93:
         7b:1e:9c:7f:94:a3:51:49:d2:c0:78:d0:23:4b:99:0b:ef:fb:
         75:5e:ed:08:6d:20:19:50:c0:c1:22:91:74:fa:e8:89:ef:9c:
         29:f0:89:a7:4a:c3:b6:11:37:a3:fd:99:0b:71:19:7e:ac:31:
         02:0f:2e:7d:6f:2c:b9:96:05:5a:fc:b7:f6:e0:e1:df:ab:fe:
         e3:3d:a3:d1:71:a3:b1:4a:28:dd:2c:e5:77:b6:ba:b5:25:fa:
         c8:92:53:9e:60:07:e4:c3:ea:fb:8d:0c:1b:e2:e4:3c:65:2b:
         d8:6d:dd:8e:9c:4b:8f:05:1d:53:98:26:5a:0e:43:2c:a6:19:
         ea:7c:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:37:24 2024 by rpki-client on console-fra.rpki-client.org