Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File:                     mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier:          rm4EYHKFD+JPn8y/g8KVACJSB5aVseRXdBVhs6AyIt0=
Subject key identifier:   81:C2:57:4F:6A:9E:78:A6:20:5A:08:74:4A:5F:4D:4A:14:C7:20:1D
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer:       /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial:       018F8749EABDB764898B0C239601CDD28193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number:          08D8
Signing time:             Fri 17 May 2024 16:01:59 +0000
Manifest this update:     Fri 17 May 2024 16:01:59 +0000
Manifest next update:     Sat 18 May 2024 16:01:59 +0000
Files and hashes:         1: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: VG/+wVxx7O+lTDuTGSBqlY7wTvAuQ8dhPb0XJGHhHLw=)
                          2: sud9Nej-UPHJ40kxlT8t88Fb8ko.roa (hash: 2Gc+TLEakCehx6lyDZM0RrxnvonEYC3tf21M3ggDTgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ea:bd:b7:64:89:8b:0c:23:96:01:cd:d2:81:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
        Validity
            Not Before: May 17 16:01:59 2024 GMT
            Not After : May 18 16:01:59 2024 GMT
        Subject: CN=81c2574f6a9e78a6205a08744a5f4d4a14c7201d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:e3:b7:fb:7a:06:fa:79:39:94:bf:2d:96:
                    38:fa:de:29:5b:7b:b5:6f:c5:e7:46:a9:a2:0c:ad:
                    e4:13:36:8e:01:58:e6:b8:f6:75:cb:2d:05:f7:2a:
                    40:20:b4:a6:2b:6d:bf:fd:62:c6:aa:e0:c9:0e:8e:
                    1b:61:35:94:4f:a6:3e:aa:01:f3:64:01:2c:98:d1:
                    d3:32:67:ce:1c:c0:0a:c6:d8:e7:c9:4a:27:53:cc:
                    3f:21:51:a9:8b:2f:d1:e5:e8:15:41:98:47:2e:8d:
                    de:d1:70:e4:b8:7c:89:c7:9b:31:b7:e1:84:d0:f9:
                    db:a6:8a:9c:9c:06:11:fa:42:bb:c7:c7:98:87:1a:
                    bd:24:00:50:1a:c4:8f:a5:a0:45:4c:ff:b0:9e:d5:
                    6f:48:31:37:9f:c1:aa:40:4e:f7:22:e6:ad:35:4a:
                    8f:7f:a0:0c:56:48:c4:49:c4:84:2d:0e:d3:55:81:
                    a2:78:29:f1:24:70:78:2a:ec:60:49:19:9e:76:3d:
                    31:d7:f6:2d:b7:12:a6:73:23:56:14:ab:1d:43:58:
                    f4:ab:50:e5:09:0a:b6:34:57:59:7c:e9:6d:8b:05:
                    05:4a:53:93:0f:d0:08:91:f9:15:81:58:0e:ba:a7:
                    e3:99:a3:18:06:05:0b:54:97:30:4d:89:09:45:f0:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C2:57:4F:6A:9E:78:A6:20:5A:08:74:4A:5F:4D:4A:14:C7:20:1D
            X509v3 Authority Key Identifier:
                keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:d4:2e:f6:40:6c:35:4f:f3:73:91:14:c6:b7:65:52:3e:
         80:31:63:20:e7:d5:42:23:3e:18:37:ba:08:24:d0:0f:d9:d9:
         9b:72:bb:a9:0b:5b:05:db:cb:33:f7:7c:79:64:4a:0a:e8:41:
         63:75:e2:3f:e5:c6:9e:4c:e3:ab:3d:eb:b5:69:e5:71:58:dd:
         e4:d2:94:3f:55:35:32:fa:ea:1e:81:97:45:35:0f:2c:e8:65:
         61:c8:56:18:d8:51:f8:d5:71:be:16:f7:ef:10:d3:b5:90:70:
         83:b7:e1:a7:d9:33:3e:ac:5e:cc:1d:f4:e2:7e:43:0f:84:3e:
         86:5c:a6:4f:4c:a6:25:2a:c2:bc:1b:03:5a:cb:5b:31:5b:33:
         84:f4:4c:7b:b7:82:bb:bc:b4:16:52:b5:50:f6:6d:84:ff:05:
         21:18:9f:f8:8d:d7:81:2b:89:32:b3:81:01:c4:e8:16:fd:82:
         a5:50:9a:b2:3e:95:2d:f9:a3:63:1f:49:6b:52:b2:ee:8d:6e:
         59:a2:75:a7:63:18:e9:73:fd:dc:62:75:99:85:43:f0:af:0f:
         ef:0d:11:7b:bf:06:a8:7f:4c:f7:65:39:63:3d:9b:3a:0f:c2:
         7f:b3:fe:51:74:0d:7d:c4:71:28:8f:40:5d:21:cf:e6:32:04:
         c1:88:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:20 2024 by rpki-client on console-fra.rpki-client.org