Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File:                     CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier:          O29jvYdQy3M6KJZD5Ap6ALVMzzvHpHCn384l3SqpG04=
Subject key identifier:   82:E7:3D:05:2E:DB:33:27:51:F5:DC:38:E5:57:C2:9A:FE:CF:A5:93
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer:       /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial:       018F441FCD279CCE08FAEBC5B175AFBE4926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number:          0E96
Signing time:             Sat 04 May 2024 15:01:25 +0000
Manifest this update:     Sat 04 May 2024 15:01:25 +0000
Manifest next update:     Sun 05 May 2024 15:01:25 +0000
Files and hashes:         1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: ZCTiQIcl57YdQbhVgshChdhUN0SF5TjbH+wHAU0MaOo=)
                          2: g24F8Llst1sNUigDfQWGFU0I9IQ.roa (hash: c83GucemRIepkpNjRZ45/8/pFwlicGwynHf5Pkz88xI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:cd:27:9c:ce:08:fa:eb:c5:b1:75:af:be:49:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
        Validity
            Not Before: May  4 15:01:25 2024 GMT
            Not After : May  5 15:01:25 2024 GMT
        Subject: CN=82e73d052edb332751f5dc38e557c29afecfa593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:4b:3e:ce:cd:50:ea:95:f3:f0:03:a9:c6:
                    2f:6e:8b:e2:b5:da:a8:c6:79:bc:5c:b2:af:17:57:
                    66:9a:b0:e5:45:c8:9e:d7:bd:5d:67:8e:79:7e:9f:
                    78:0e:5d:d2:29:27:e8:53:8b:62:ba:f7:89:17:5b:
                    39:cc:87:00:1e:12:a1:65:2e:42:a2:5b:4e:64:bb:
                    cf:de:fe:74:82:32:7e:39:cb:f4:7b:ec:ac:52:35:
                    28:1e:42:37:4c:4e:f0:69:aa:aa:0a:d9:dc:9f:60:
                    cc:ea:a9:64:33:7b:2c:af:8e:17:f8:0f:85:60:3c:
                    5d:d9:e7:47:a9:6a:76:62:aa:8f:bf:14:ed:3d:f7:
                    80:31:9c:78:c6:30:7c:90:8e:38:02:8f:a9:83:87:
                    c4:34:ad:a5:e9:0f:2b:94:89:3d:0f:f5:b4:5e:64:
                    b8:53:5a:ba:a9:00:c1:1a:d7:52:9c:7b:2b:f5:aa:
                    d6:56:79:94:a5:d4:06:01:36:32:7a:33:35:08:0f:
                    7b:58:f8:62:d6:76:4f:6e:ea:5f:11:ac:9e:74:8a:
                    6d:f8:f2:23:1c:90:ca:01:ba:92:d6:98:c1:6a:3e:
                    dd:96:65:1e:ee:4f:cf:73:42:7a:93:e2:3a:0d:ca:
                    74:70:f2:16:54:2b:3a:82:01:c7:a6:c4:ad:30:57:
                    c4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E7:3D:05:2E:DB:33:27:51:F5:DC:38:E5:57:C2:9A:FE:CF:A5:93
            X509v3 Authority Key Identifier:
                keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1f:22:97:1f:0c:0d:20:69:13:95:15:9c:34:e0:2a:86:d9:
         cf:9a:5d:99:87:0a:41:04:99:02:6c:99:52:8a:6b:b5:50:25:
         51:49:28:a1:ab:09:80:d1:9f:4e:3f:56:cf:9f:f3:60:20:0f:
         74:6e:00:c8:f1:6a:45:54:ca:60:fe:68:77:f7:d6:d6:a5:fe:
         48:24:84:94:6f:8f:cf:48:97:99:a4:a7:33:5c:c7:fa:41:5e:
         7e:4d:a8:a1:a0:27:6c:a5:27:3a:d8:44:eb:e6:5f:e0:e9:98:
         6d:61:7f:3b:aa:ab:a9:95:05:77:c4:79:60:cf:c4:ee:4a:9b:
         51:f1:0f:b3:67:d9:e1:e1:bc:e8:58:0d:eb:88:06:32:a9:5e:
         54:f3:e2:ab:b5:7a:c5:89:0a:96:61:44:e1:38:07:4c:9e:85:
         b1:cd:70:45:9d:cb:f0:0a:8a:61:2c:26:df:e4:5d:29:73:e8:
         16:8c:ee:da:5a:63:11:a8:4f:1a:b2:e3:a4:e0:a2:22:5c:b2:
         b8:32:6e:8d:7b:28:91:b8:07:09:28:25:7e:8d:73:c7:8f:6e:
         98:da:45:e5:7d:39:93:33:aa:c8:a6:b1:97:d4:73:25:80:30:
         68:e9:63:49:89:35:bf:a2:ba:1b:ff:00:c4:6c:8b:34:e1:67:
         93:f6:b5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:52:33 2024 by rpki-client on console-fra.rpki-client.org