Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File:                     kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier:          oL2oOxs1x7Nbx6PPf3HiHe24+M8J18QFf0IGwK83umc=
Subject key identifier:   FC:61:62:9E:4F:19:46:59:26:4D:3F:94:E5:0B:99:96:88:3C:21:F6
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer:       /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial:       018F8936E7A57DC876B1F4BC0B1F79D4D028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number:          1013
Signing time:             Sat 18 May 2024 01:00:27 +0000
Manifest this update:     Sat 18 May 2024 01:00:27 +0000
Manifest next update:     Sun 19 May 2024 01:00:27 +0000
Files and hashes:         1: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: 0h+K6MBffyd6OuCxG89mJe2ijSQC6hsbuViyzsQeP7M=)
                          2: qSJHbp_iF2HpGkhbO8vvCFMLbuA.roa (hash: PPJnq04JWUT4XKzbit6YVNU0oiGnuS6WXMRzZN2NHfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:36:e7:a5:7d:c8:76:b1:f4:bc:0b:1f:79:d4:d0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
        Validity
            Not Before: May 18 01:00:27 2024 GMT
            Not After : May 19 01:00:27 2024 GMT
        Subject: CN=fc61629e4f194659264d3f94e50b9996883c21f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:ab:a2:d1:a6:c6:ff:76:3a:a9:fd:b1:e7:
                    ac:8a:04:6a:b8:38:6f:80:bd:c8:1a:42:34:f4:96:
                    0e:72:e6:4b:af:f2:f4:5d:58:ac:22:d2:cc:33:dd:
                    8d:96:a3:c9:57:ba:47:14:76:ec:79:59:b3:33:2a:
                    dd:47:f3:c7:ff:e8:7a:b7:00:83:a4:7e:c0:50:28:
                    cb:38:43:05:6d:3e:fc:8d:ad:44:2e:31:d6:5e:eb:
                    8f:16:bd:e6:1a:7e:65:c1:21:4f:7e:ce:ec:d8:e8:
                    ab:04:9e:5b:5b:93:ed:24:bb:b6:1c:3f:b7:08:de:
                    01:df:61:48:6f:12:55:7d:87:f0:11:67:21:6a:5d:
                    28:5a:20:92:40:00:6a:4f:97:bf:7f:eb:fe:c2:d7:
                    65:75:07:e8:be:10:10:34:de:62:40:02:50:a6:d7:
                    2c:4d:7e:a6:cc:b3:5b:37:39:d8:79:74:a5:68:5c:
                    4f:71:5b:d7:60:95:6d:88:6e:5c:9b:98:ad:44:d9:
                    71:78:67:ee:47:63:4c:2b:f0:3f:1b:15:60:4e:c8:
                    4a:9b:4f:dd:ff:37:72:ab:07:af:42:0e:72:cb:c9:
                    f1:09:96:c1:b4:22:95:0d:4c:5c:34:93:3a:b0:2f:
                    61:d6:10:4e:f1:cb:07:d7:1b:7e:13:ef:80:24:fe:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:61:62:9E:4F:19:46:59:26:4D:3F:94:E5:0B:99:96:88:3C:21:F6
            X509v3 Authority Key Identifier:
                keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:22:8a:ce:9a:32:32:1a:36:dd:1d:2f:cf:90:38:84:76:5e:
         24:cd:18:92:88:f1:46:88:f4:55:89:13:96:85:af:85:8c:8d:
         9d:7c:4b:9b:09:a1:e2:ce:be:b3:24:2a:7f:8a:bb:f2:dc:a7:
         44:cc:e7:1a:0e:23:82:45:f2:6a:27:00:04:52:06:7d:f3:92:
         30:d1:bc:af:4c:0b:a8:f0:b5:20:a3:23:99:46:1f:c6:c7:2b:
         eb:2e:58:c0:28:32:fa:9a:75:7b:9a:4e:a3:2b:f3:4c:eb:54:
         6c:41:83:4b:c5:87:e3:ad:ad:2a:c0:de:39:9f:a5:51:e4:d9:
         b7:6d:1e:4e:e8:f7:1a:5d:fd:20:27:24:a8:02:a4:5f:c0:0f:
         0e:5e:42:c7:66:7e:b3:91:eb:c0:cf:f2:b3:f1:0a:78:6b:2a:
         b9:fa:7b:81:00:e4:3e:08:0b:27:79:29:bb:c4:b0:2e:d7:a6:
         94:4a:5e:2e:a2:1d:6c:4b:7c:d8:c3:5e:c9:be:52:a0:9a:c8:
         1d:5b:e0:31:7e:de:14:f7:21:66:71:09:29:b7:cb:32:cd:2f:
         13:7e:75:14:6a:ea:d4:3b:80:23:51:b6:06:8d:c2:4f:09:94:
         1a:9d:68:1b:5b:2f:f8:09:59:86:f0:d1:ab:23:2d:fe:68:5e:
         cf:cb:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:41:47 2024 by rpki-client on console-fra.rpki-client.org