Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File:                     0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier:          eL2gCtF+flRd9kFBbPPiAM3ZlIo9Ds5edEBYRqyqRro=
Subject key identifier:   0B:B3:5A:E3:42:A0:54:A6:E0:C3:6E:8E:1E:BB:E0:59:E4:47:91:C7
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer:       /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial:       018F3FD4DBDDC8B8E201F2AB012B51882E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number:          0865
Signing time:             Fri 03 May 2024 19:01:05 +0000
Manifest this update:     Fri 03 May 2024 19:01:05 +0000
Manifest next update:     Sat 04 May 2024 19:01:05 +0000
Files and hashes:         1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: sgM1xpTayHmUzXjn3wmzEmdpjbkeEN1ATBLhygzqJAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d4:db:dd:c8:b8:e2:01:f2:ab:01:2b:51:88:2e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
        Validity
            Not Before: May  3 19:01:05 2024 GMT
            Not After : May  4 19:01:05 2024 GMT
        Subject: CN=0bb35ae342a054a6e0c36e8e1ebbe059e44791c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:73:92:2c:a0:4e:b1:75:38:db:58:6e:d8:
                    a1:ac:ea:75:8d:5e:62:81:62:ee:fe:27:2f:e9:14:
                    4a:e9:1f:67:b5:90:98:c6:c5:f2:96:46:87:22:30:
                    24:5c:45:6c:17:eb:ae:e2:72:01:aa:08:5b:88:fd:
                    a6:04:99:03:ec:cc:e3:ca:27:32:3c:4b:4f:a2:23:
                    92:c5:bb:0c:a1:89:ac:57:87:a3:c4:9f:3d:6b:11:
                    e1:6b:1e:88:8c:ac:eb:fa:b5:fd:cc:a0:b3:aa:90:
                    ae:75:d6:ef:43:49:5f:1e:bb:9c:17:07:fa:eb:ce:
                    5e:ad:00:da:b7:25:ee:d8:23:61:ba:55:67:fa:28:
                    d4:9b:5f:a2:cf:9f:ef:27:6e:49:7d:8a:8c:66:4d:
                    3b:93:25:ab:60:fb:89:82:97:ea:2c:0f:51:13:16:
                    97:a8:95:a7:52:f1:46:62:7b:6b:0c:36:77:ac:e1:
                    bf:7a:77:46:cc:19:1c:1c:83:bb:2a:50:69:71:ba:
                    b7:72:97:90:6a:c2:a5:82:c4:c4:d6:ce:79:0f:0d:
                    6c:0b:c0:32:f8:34:aa:38:e0:f3:4d:ed:28:e0:60:
                    10:85:17:33:f8:c6:b5:ce:f0:db:ec:39:84:a0:b6:
                    98:0b:a1:6f:b1:2c:fc:7c:94:3d:90:b9:86:86:19:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B3:5A:E3:42:A0:54:A6:E0:C3:6E:8E:1E:BB:E0:59:E4:47:91:C7
            X509v3 Authority Key Identifier:
                keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9e:00:5b:86:5c:b8:73:4b:07:2a:75:80:7e:da:0f:82:5d:
         78:f1:5f:dc:62:54:5e:11:d8:ae:ee:eb:3d:2a:24:59:27:74:
         fd:0f:21:b4:91:9b:e3:23:80:c8:49:1d:2a:8e:54:a0:61:78:
         92:34:6d:70:ed:cd:af:5b:d4:f2:73:af:6b:cc:6c:33:c2:2e:
         0b:85:86:c8:2d:aa:b5:eb:1f:58:f0:5e:9d:45:8d:d8:25:1c:
         9f:74:66:cc:e2:81:ae:54:e0:e0:ae:ea:0e:d2:bf:7c:6f:a4:
         4c:fe:87:f0:e6:fc:f0:ee:ae:09:fe:7d:7c:3b:eb:58:61:f1:
         f1:cd:ec:3b:5d:8d:93:7b:84:77:df:df:4a:a9:56:a1:87:b7:
         eb:7e:90:14:37:e2:8c:dc:37:32:3f:95:6d:c8:32:9c:d2:fd:
         b5:9e:c4:11:44:c6:cd:f0:93:7f:75:ed:3d:0f:eb:7c:b7:94:
         a6:1e:14:99:58:4c:52:62:57:fb:96:3d:89:48:42:34:3e:fd:
         a1:08:c8:2f:f1:20:1b:39:a7:d6:de:c2:93:9f:38:7a:f8:64:
         cb:f9:bb:66:17:90:c0:8f:45:63:ab:9f:bb:1d:bf:e4:3b:c7:
         37:d3:b0:c3:6e:e0:e0:55:4b:86:78:42:b1:4b:28:00:47:70:
         87:2a:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:45:49 2024 by rpki-client on console-ams.rpki-client.org