Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.mft
File:                     1Age7jsu4zJbU-f01tibZAHiUiE.mft (raw, json)
Hash identifier:          ulaN5Z8kqWLvZOsSF79ZzQcn3QxSPlE7O6rki9c9CkE=
Subject key identifier:   B0:B7:BE:2E:47:13:3B:E8:32:66:D1:6F:CA:CF:76:FC:2B:E1:BA:E5
Authority key identifier: D4:08:1E:EE:3B:2E:E3:32:5B:53:E7:F4:D6:D8:9B:64:01:E2:52:21
Certificate issuer:       /CN=d4081eee3b2ee3325b53e7f4d6d89b6401e25221
Certificate serial:       018F46E9AC811D946A2D33552DC5DFC2A8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Age7jsu4zJbU-f01tibZAHiUiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.mft
Manifest number:          080D
Signing time:             Sun 05 May 2024 04:01:10 +0000
Manifest this update:     Sun 05 May 2024 04:01:10 +0000
Manifest next update:     Mon 06 May 2024 04:01:10 +0000
Files and hashes:         1: 1Age7jsu4zJbU-f01tibZAHiUiE.crl (hash: KsRsWnEgvM2FVgoasutq2nC0icAdtBj6OZz4aDt0KDs=)
                          2: GsrPfv5N-UiBRH9RR--TBVcqYRE.roa (hash: vv9qzP/SWJG1f2bz8IRZ5ulLWijDut+vyBKn1yuj3JM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Age7jsu4zJbU-f01tibZAHiUiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:e9:ac:81:1d:94:6a:2d:33:55:2d:c5:df:c2:a8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4081eee3b2ee3325b53e7f4d6d89b6401e25221
        Validity
            Not Before: May  5 04:01:10 2024 GMT
            Not After : May  6 04:01:10 2024 GMT
        Subject: CN=b0b7be2e47133be83266d16fcacf76fc2be1bae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:40:68:77:52:da:3c:27:df:ff:74:d0:c4:
                    21:1a:5b:96:e0:57:9c:ef:da:18:18:dd:39:a0:69:
                    a7:37:cf:c5:76:70:54:2b:8c:40:f5:ad:63:4e:76:
                    52:36:04:8a:a7:4a:8e:48:73:cf:2f:18:d4:70:73:
                    b3:33:94:d5:dd:fe:a8:7a:21:ef:fd:0d:a4:48:9e:
                    a2:ec:80:f0:5a:be:66:c8:7b:a1:4c:a5:c7:b0:38:
                    13:a2:59:f4:4a:57:02:af:62:4f:db:e8:30:82:a5:
                    03:40:51:1a:39:2d:0e:2c:5d:22:97:f3:c9:0c:a9:
                    af:0e:a1:2a:19:07:f6:cb:6d:77:50:14:15:f6:5a:
                    10:91:c3:33:d1:f4:56:c0:8a:8b:fc:a8:4a:35:82:
                    f2:88:f1:08:7a:0e:55:95:18:b0:5d:f1:63:0f:52:
                    b3:98:3f:35:08:3d:78:51:22:53:6e:8a:97:fc:47:
                    93:7a:54:1f:51:68:81:ac:f1:e9:c4:ea:f1:34:16:
                    ce:fa:74:24:2e:50:b8:d5:e9:f7:74:00:cb:0d:73:
                    d5:90:2e:f0:2b:5b:4d:20:a0:40:30:da:dd:c9:fe:
                    63:cb:7d:36:d3:fa:cf:66:c0:f5:4c:2e:08:d7:1b:
                    3b:74:af:ac:32:97:b0:1f:4a:20:30:3d:45:ce:d5:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B7:BE:2E:47:13:3B:E8:32:66:D1:6F:CA:CF:76:FC:2B:E1:BA:E5
            X509v3 Authority Key Identifier:
                keyid:D4:08:1E:EE:3B:2E:E3:32:5B:53:E7:F4:D6:D8:9B:64:01:E2:52:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Age7jsu4zJbU-f01tibZAHiUiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9e:d0:f8:c5:31:3e:8c:36:93:34:92:f7:5a:2c:e7:81:42:
         61:0c:0d:7c:c6:7b:1a:fd:5e:82:ab:14:98:b9:df:ed:6b:00:
         3f:1e:5b:4a:19:7b:28:e1:88:49:35:eb:81:46:e5:10:5d:57:
         31:a7:3c:be:0f:ed:d5:a4:20:1e:29:49:39:55:87:dd:96:60:
         59:ac:ae:ca:23:f5:ee:9c:c9:7b:8a:08:df:20:7e:e0:db:fe:
         a6:44:4e:80:c6:cb:10:62:05:c0:fb:fd:6f:f0:b9:bb:cc:58:
         5d:f9:1b:d9:47:8f:5f:04:b2:77:7d:34:58:78:96:7d:c4:23:
         a4:f2:8e:28:5a:76:0b:a4:e8:e2:f9:a7:75:cc:46:aa:9a:02:
         5f:6a:5c:ee:91:45:88:70:6b:c0:da:69:f1:d2:29:9e:e0:0a:
         10:42:c7:87:63:24:f6:3d:4d:1c:b9:0f:53:41:d4:0c:68:9b:
         32:21:ef:15:56:57:82:ca:ac:ff:f8:fc:02:02:14:4c:3c:ab:
         fe:9a:bc:a8:ce:92:b4:6a:18:12:fe:2d:ee:40:22:02:3b:64:
         bd:cf:2a:26:1d:fe:38:92:b7:6c:8a:8a:23:c2:98:9d:c6:6d:
         9e:97:d6:97:c4:86:8e:14:60:d3:7f:19:86:68:9f:35:fb:00:
         94:a8:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:18:40 2024 by rpki-client on console-fra.rpki-client.org