Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          VL6OWqIqknicuHcgSLZOUCLhBvQ/74k51X951F4qJsM=
Subject key identifier:   B1:FE:F8:C1:61:9E:17:B3:85:18:F5:F8:09:6C:07:0A:50:48:62:F0
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       018FC8F23FD5A27EBA77769984C5B2510A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          0FA3
Signing time:             Thu 30 May 2024 10:01:10 +0000
Manifest this update:     Thu 30 May 2024 10:01:10 +0000
Manifest next update:     Fri 31 May 2024 10:01:10 +0000
Files and hashes:         1: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: C5g8S3QGsYe268iLvOVXuinFeVNFDxvsuz0vnXh4jFU=)
                          2: DlOXCOU6u6PZeyteLZp4ExTBfRk.roa (hash: qf8UQeQhMup+ZnEw0nGaL6VDCc6G3K3vCBFokWj5S4E=)
                          3: KfJG6UDlNmdfbd4cgrrjUEgUEhE.roa (hash: QRIC7/ZIvUD/C27X6h7f5+sNHrFCE5tZfvVqKBYQ0c8=)
                          4: LmihitQQrdtCcAgMkqmYopIVVbs.roa (hash: tPdIiakJ1IDzwEGz7b3/5N2fG6aZ3NU/wXWE5jHxWF8=)
                          5: O6ZneyXcmBuSuDgqQSLcpApbdws.roa (hash: Ru9PCjwBGm8J5hNGI/77sp6es8NuLMunNCAea2pDdsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 May 2024 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c8:f2:3f:d5:a2:7e:ba:77:76:99:84:c5:b2:51:0a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: May 30 10:01:10 2024 GMT
            Not After : May 31 10:01:10 2024 GMT
        Subject: CN=b1fef8c1619e17b38518f5f8096c070a504862f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:4e:79:75:df:10:44:d0:9e:06:ed:d4:21:
                    83:8d:96:f2:0c:73:27:f7:de:ae:24:4d:da:78:d1:
                    87:30:25:ad:02:cf:14:3d:ee:10:0d:0f:49:23:e8:
                    c9:ff:45:99:99:8f:05:ae:c0:7f:a8:bd:74:24:be:
                    f5:c3:9d:85:5c:75:76:aa:f3:50:b1:ee:bd:16:c1:
                    c4:1d:1d:3e:26:fb:7c:96:30:6d:07:ff:1d:96:19:
                    c1:75:e3:73:cb:70:0d:c9:ee:4e:e9:19:2d:9e:5c:
                    9d:ab:e0:47:ce:31:3a:61:5c:a0:51:e0:ff:62:46:
                    16:b4:de:23:9a:ac:0b:ce:b5:9f:f2:56:5d:ed:a1:
                    09:fc:96:ec:55:38:3d:01:35:7d:80:3e:a4:52:9f:
                    68:b2:84:27:5f:44:0b:e2:5b:63:bd:1b:e7:26:61:
                    45:a3:fe:50:9c:55:d2:e1:13:55:57:94:9f:fd:c9:
                    e6:8c:3a:8f:27:6a:21:25:6d:9d:d7:fa:7d:26:ba:
                    bf:14:5a:56:60:ad:51:8d:ec:39:e7:d0:22:dd:66:
                    5b:ba:0f:4a:2b:c2:59:71:ea:6a:9a:ed:e4:43:41:
                    a6:22:53:1c:67:b4:79:71:c7:40:d3:39:d2:bb:32:
                    d0:89:61:cc:d0:09:51:74:59:15:c9:da:c9:2a:2b:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FE:F8:C1:61:9E:17:B3:85:18:F5:F8:09:6C:07:0A:50:48:62:F0
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e1:a5:24:b5:e9:32:44:8c:87:ba:1c:d2:57:f2:b9:6d:50:
         70:d7:1c:f8:7f:6a:20:31:2f:bd:a0:22:0c:5a:39:c0:4f:6d:
         ad:21:c4:73:ac:18:c9:15:bc:81:16:1c:b1:54:53:be:19:75:
         9e:8e:56:ec:22:23:28:e2:c7:ce:82:71:86:55:98:85:79:7f:
         99:6a:5f:65:4f:13:d4:db:ca:a3:7d:05:b7:98:c4:65:a8:22:
         15:0f:7b:e3:65:d9:fa:3b:01:e4:b9:fd:d5:38:e8:9d:77:df:
         6c:18:48:20:cd:ad:0c:2c:f5:7a:63:3a:32:94:d0:30:01:75:
         0c:dc:ba:f0:96:6d:16:96:8d:ad:39:4b:40:95:40:d9:09:87:
         c8:8a:0d:23:cf:14:3d:ce:35:16:93:2b:17:96:94:01:19:ab:
         8f:ff:aa:de:56:7e:c1:f7:b3:47:bc:f2:f3:db:2a:cd:cf:02:
         49:47:a2:5a:3c:6b:1f:70:ad:ff:4b:27:c4:32:c0:fa:60:95:
         1b:89:95:63:80:11:7a:03:7b:9e:73:79:31:ad:19:93:05:19:
         a9:c4:92:18:ca:f6:15:1f:8e:a5:1c:96:d4:9b:6a:35:81:d1:
         cd:a4:65:44:57:b8:de:cc:42:da:4d:6d:05:b3:b7:87:21:4f:
         9d:e4:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 17:10:25 2024 by rpki-client on console-ams.rpki-client.org