Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
File:                     1V05IYUKX_8H7KJgo275IQHy2Fw.mft (raw, json)
Hash identifier:          rjSwZKssaRABpE4wvKl+QHesDJuTS7YBlKLmSPucMmA=
Subject key identifier:   FA:19:46:83:0C:9F:E1:00:A9:E4:06:09:09:85:E7:87:98:E2:81:F8
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Certificate issuer:       /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial:       018F2E75B50B08AB2E0B6291E3FF6832ED34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
Manifest number:          0B44
Signing time:             Tue 30 Apr 2024 10:03:36 +0000
Manifest this update:     Tue 30 Apr 2024 10:03:36 +0000
Manifest next update:     Wed 01 May 2024 10:03:36 +0000
Files and hashes:         1: 1V05IYUKX_8H7KJgo275IQHy2Fw.crl (hash: cEfNpVOWmZOFxfsubuE42PKTgsfThFFSySKCzKHxQgk=)
                          2: hGi216auyYf-auMlg1pdWmCyocI.roa (hash: mE/1SOhxa6skcLf/vmSUJorMpJgp+U5ItD0lryNWhq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 10:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:75:b5:0b:08:ab:2e:0b:62:91:e3:ff:68:32:ed:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
        Validity
            Not Before: Apr 30 10:03:36 2024 GMT
            Not After : May  1 10:03:36 2024 GMT
        Subject: CN=fa1946830c9fe100a9e406090985e78798e281f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:d0:6f:7a:0a:04:94:5f:f3:f0:82:c7:61:
                    0b:02:b6:59:07:d4:8e:03:1b:17:5f:bb:cd:ab:90:
                    d2:b3:9d:fd:47:86:e0:b1:e4:f0:a4:6b:9a:93:77:
                    cb:5f:1a:09:a1:21:dc:d5:92:d9:05:5e:05:b2:f9:
                    da:18:fd:99:5f:1a:83:d7:d9:4e:50:7c:21:ad:47:
                    bd:ca:07:cb:e7:a9:b2:8e:35:ad:b5:7f:e9:e2:e3:
                    68:d2:97:74:b6:a0:fc:8a:bf:58:75:71:ac:47:45:
                    2f:f2:dc:63:cc:18:3f:f3:bd:08:8d:ef:75:11:c6:
                    cd:b2:66:d9:83:29:53:85:12:4e:8d:8d:ee:ee:ff:
                    0b:8d:41:9b:40:5f:53:01:63:44:53:e4:e4:73:4c:
                    7a:c7:52:3e:c7:f2:87:5a:53:7b:ab:d8:75:c4:45:
                    99:8b:54:08:64:b9:7e:75:87:69:37:51:3e:37:eb:
                    3e:f9:f6:cc:78:5a:86:cf:ca:4b:05:e3:8b:7c:d8:
                    cd:c6:b9:d4:e9:94:64:6a:bd:af:50:7c:18:c0:41:
                    53:16:5b:79:4a:05:f4:25:6c:d6:55:84:ce:23:cb:
                    3c:3f:af:17:6a:21:4e:e6:82:91:1b:30:b5:e2:f0:
                    ae:59:4f:99:77:83:04:ef:6b:06:d7:85:db:13:9b:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:19:46:83:0C:9F:E1:00:A9:E4:06:09:09:85:E7:87:98:E2:81:F8
            X509v3 Authority Key Identifier:
                keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:df:e6:34:66:43:86:bd:7d:ea:4b:c5:d7:be:ff:10:76:68:
         d8:69:ec:78:46:77:7e:23:47:29:78:1c:26:12:1f:a8:9e:44:
         aa:75:87:62:da:54:63:bd:95:d3:64:e1:5e:61:ee:90:d6:84:
         5e:54:67:b6:c5:10:55:80:fd:d3:8d:32:9c:67:cb:26:3b:cd:
         86:49:2e:9e:89:dc:ff:2c:7d:bd:d5:e5:46:b1:6a:55:d6:6b:
         dd:13:5d:9b:e5:82:3c:06:ff:84:2e:a8:e7:f7:e2:1d:bb:2d:
         bb:72:51:2d:22:d6:e7:d6:c7:92:56:79:02:f6:ce:bf:05:00:
         d3:24:90:9e:03:d2:0d:c8:36:6c:15:5d:16:d0:4c:c1:c0:f5:
         56:e6:1d:01:3d:ab:93:84:e0:da:18:e9:06:70:8a:2a:15:ef:
         23:a8:f2:35:2b:67:b2:23:4e:50:75:28:ab:1e:9b:0c:64:44:
         9e:0f:38:e2:14:20:36:93:ce:20:de:44:ca:99:b2:45:b3:a3:
         59:d8:d2:e2:c5:e0:2b:03:34:00:8b:d3:f9:f7:fb:4d:74:76:
         65:72:01:53:f9:16:9f:07:48:80:e5:e7:91:2d:94:9a:98:c7:
         96:fa:10:72:c7:81:34:18:4e:ec:c9:4a:19:a3:98:10:0f:56:
         c2:db:b2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 20:43:31 2024 by rpki-client on console-ams.rpki-client.org