Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File:                     D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier:          61cRX4ldVOPAf5PIgvLLvGhGESpdwEK6WtzaIAKBdC0=
Subject key identifier:   EC:CB:83:73:54:E3:D4:67:BA:8C:58:1A:36:70:E6:60:27:4A:18:79
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer:       /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial:       018F478F6B593AC9E963EFEBE71C42872508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number:          0E95
Signing time:             Sun 05 May 2024 07:02:12 +0000
Manifest this update:     Sun 05 May 2024 07:02:12 +0000
Manifest next update:     Mon 06 May 2024 07:02:12 +0000
Files and hashes:         1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: 3/a6xkXRzpyGy6KMj7T1vtwWh6cqux9HgtGGvy1lC0A=)
                          2: MdcLcF598us8et6609oKHBzow9Y.roa (hash: lG7/IJa6qfh9JZ5f09IrmDhulgP6dGUr1CbSjJLuNMQ=)
                          3: NWgnh4MQbp6aydoBNY4vS1HQjIU.roa (hash: stpmFs/N4+m+eWxWnkRi6SraLNplD5P6ljDYELycT+4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8f:6b:59:3a:c9:e9:63:ef:eb:e7:1c:42:87:25:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
        Validity
            Not Before: May  5 07:02:12 2024 GMT
            Not After : May  6 07:02:12 2024 GMT
        Subject: CN=eccb837354e3d467ba8c581a3670e660274a1879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:5d:d1:cf:61:a5:1c:68:cd:ca:8e:b9:39:
                    8c:7c:54:5c:49:30:12:14:61:f0:7e:8f:04:da:93:
                    9c:15:f2:cf:7f:e0:75:ec:e6:9c:64:c1:70:02:3f:
                    99:de:4a:87:cb:32:36:e4:42:58:ae:5b:dc:f0:2f:
                    5d:49:ab:aa:c7:52:1d:7a:29:a1:9b:43:fb:be:51:
                    1a:ec:32:75:10:b5:45:be:38:05:d8:92:a2:68:4f:
                    90:25:7e:e5:4b:f1:72:94:91:22:fb:cc:5c:be:4a:
                    85:3a:30:b0:01:da:75:8a:a9:e2:0a:ed:15:ea:58:
                    f2:5f:08:37:2a:43:6b:e6:ac:92:6f:41:61:50:ff:
                    d9:04:24:00:13:f0:f4:b2:a2:25:20:1e:be:f4:f1:
                    3b:3f:85:77:fa:f2:8a:7f:a4:15:f3:9d:c8:7f:f0:
                    63:1d:4c:71:94:00:7a:c4:8e:8b:c9:a7:7e:2b:8b:
                    20:71:34:65:9e:df:59:c6:f4:3e:53:fe:de:f0:9b:
                    8e:3b:7c:4e:3e:c8:58:28:dc:f8:a0:fd:ab:bc:98:
                    28:64:a8:ce:fb:5d:32:1b:59:b3:16:c3:b0:00:bc:
                    48:4c:79:c4:f7:b7:83:fe:2d:d7:66:47:d2:bb:4e:
                    93:7b:68:86:b0:99:8a:3e:9e:d5:b7:0c:f2:34:87:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CB:83:73:54:E3:D4:67:BA:8C:58:1A:36:70:E6:60:27:4A:18:79
            X509v3 Authority Key Identifier:
                keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:64:86:98:e5:db:dd:cd:14:0a:48:ee:85:c6:cf:aa:dd:76:
         98:30:9c:65:5d:38:06:cd:5a:c8:a8:29:f5:11:fc:5c:00:46:
         eb:6c:34:ae:d4:cf:3a:e9:f7:48:a4:83:35:b5:40:ea:e0:bc:
         7f:19:cc:d5:7c:e3:e8:7d:0f:ce:0c:62:4f:09:5a:ad:63:f9:
         52:2b:0a:08:08:af:43:ce:9f:8e:e6:5f:b0:0f:d1:ce:03:79:
         85:46:cd:95:21:95:2d:88:9a:0d:83:62:1f:7f:af:e0:33:1c:
         b6:0e:b9:eb:0f:7b:2a:27:63:9f:59:7d:29:de:a3:bf:1e:94:
         42:bf:02:e4:36:4e:6b:22:27:10:29:f2:68:41:44:09:42:08:
         1d:95:ad:58:de:19:14:49:65:93:2b:06:8e:54:b5:b4:4d:4b:
         ab:61:6b:3a:5f:a1:7c:8b:a6:0b:9a:8b:5a:29:6a:19:1b:b1:
         71:00:9c:af:25:04:70:b9:3e:4c:31:df:5d:91:5f:23:ad:31:
         60:35:9d:3e:43:65:68:a1:44:4b:dd:0c:88:3e:26:16:0d:71:
         80:57:00:f1:89:90:5e:cc:2f:10:b3:a9:61:03:ca:07:f8:13:
         4c:be:46:1f:de:2a:42:9c:0f:f3:4b:84:e3:0d:6b:f1:65:66:
         24:e0:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:40:56 2024 by rpki-client on console-ams.rpki-client.org