Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File:                     1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier:          nsp9dnelrgs/ZUVYxO2BsdsTxDR1ilVBjhho/zxaxeQ=
Subject key identifier:   2E:84:EA:C6:BB:8D:B3:81:33:B3:A2:DE:07:41:0D:66:51:BE:11:0C
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer:       /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial:       018F5136359EAA122B1DB743D65FAE7F2701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number:          0C83
Signing time:             Tue 07 May 2024 04:00:58 +0000
Manifest this update:     Tue 07 May 2024 04:00:58 +0000
Manifest next update:     Wed 08 May 2024 04:00:58 +0000
Files and hashes:         1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: D24o3zzLKohmEY8Hwa+vvMFWbLHO7mm72lPnJndg+sQ=)
                          2: AYrvL5VLvZfDYQDOZxuCZf9U2PU.roa (hash: rJIT9IKJ0A7A5MAq7rRoqCYIDdsWjzqvjdUwbAQ7ZmU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:36:35:9e:aa:12:2b:1d:b7:43:d6:5f:ae:7f:27:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
        Validity
            Not Before: May  7 04:00:58 2024 GMT
            Not After : May  8 04:00:58 2024 GMT
        Subject: CN=2e84eac6bb8db38133b3a2de07410d6651be110c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:e8:14:a6:c4:62:2a:d8:73:44:88:7d:ca:
                    b0:f0:6f:d6:8a:f8:be:54:3f:02:47:4e:9a:bf:45:
                    34:16:fa:8f:be:b7:ca:ec:37:3b:e1:f7:b7:39:84:
                    f3:e9:b5:7e:d0:57:d1:72:2d:ef:22:76:34:45:a2:
                    a5:4c:47:3e:18:02:c9:45:51:ce:c8:81:9a:ed:24:
                    5a:46:a3:b8:1c:73:60:a9:b0:61:af:35:93:3b:d7:
                    ac:d2:78:f3:55:d1:af:5e:22:9a:8a:a4:b1:f1:01:
                    f7:74:5e:fb:b6:c9:ac:33:bf:29:e4:14:54:c7:b7:
                    5e:4a:b2:d0:0e:81:8f:2d:05:d5:91:e9:a9:d3:ba:
                    20:29:a1:e8:26:7f:d8:0e:43:4d:56:15:84:d2:80:
                    19:17:b2:09:45:a3:62:be:be:98:f3:96:b2:d9:07:
                    19:c4:64:f8:f2:22:67:8c:8d:10:87:ad:83:af:38:
                    24:1f:32:99:1d:13:48:49:31:ba:b1:7a:54:cb:95:
                    af:7a:b1:c3:95:63:37:a0:13:5b:63:0d:23:36:5f:
                    a3:8d:76:f0:56:13:c6:3f:ee:60:76:fe:ab:5b:bd:
                    e6:f2:96:ca:1a:43:98:86:ad:2d:64:74:0e:ff:14:
                    bf:0c:5a:43:c8:d4:d8:86:1c:c3:da:d0:dc:92:73:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:84:EA:C6:BB:8D:B3:81:33:B3:A2:DE:07:41:0D:66:51:BE:11:0C
            X509v3 Authority Key Identifier:
                keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:7c:45:37:43:e2:3d:66:75:d2:df:b6:b4:12:39:30:e8:
         cf:e1:69:2d:1d:ee:c3:8b:67:4d:50:63:40:8e:4a:ba:ac:69:
         65:0b:c8:09:5c:bd:81:10:12:80:cb:ed:31:d6:47:cc:97:de:
         2d:80:e6:ef:34:0c:36:c2:9c:ea:9d:de:e7:97:1b:08:f5:db:
         f3:02:0e:8f:45:96:38:e7:67:9e:32:28:86:e5:a9:74:ab:00:
         d1:ff:d7:ff:94:d0:6b:21:4a:ec:cd:43:6a:89:3a:c1:af:0f:
         39:01:86:d4:d5:66:de:f5:71:b7:84:3c:4a:cc:da:f2:ec:66:
         c9:62:18:22:f4:b6:63:91:4e:a8:3b:03:22:5d:82:d4:91:9f:
         de:8b:12:59:1a:32:18:26:2d:ae:55:68:68:57:ac:28:33:2a:
         08:01:32:d3:6e:84:c2:41:68:58:09:3e:0d:9f:47:fc:65:b8:
         00:c6:86:63:d0:9b:62:10:7a:38:77:3e:74:fb:a8:3d:28:7a:
         26:84:a8:31:4b:2e:12:d6:1e:88:e7:e5:03:12:f0:53:e8:f7:
         41:4b:0d:d0:35:bc:ab:cf:1b:2a:fa:76:bb:ab:49:12:2f:0d:
         01:6f:fa:12:a3:1f:8e:c1:6a:b2:ac:12:85:c8:b7:a8:b6:83:
         03:88:4f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:40:30 2024 by rpki-client on console-ams.rpki-client.org