Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File:                     H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier:          i1EFosP0U7COxktB7uXzs3+ZlG2eyzYhTYUGAlvTMk0=
Subject key identifier:   F0:8E:B6:E1:12:DE:A0:2D:40:65:45:9B:3B:56:EC:BB:1D:94:B1:55
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer:       /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial:       018F5513AF0481F19CC94AB7021708B0D122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number:          10B4
Signing time:             Tue 07 May 2024 22:01:44 +0000
Manifest this update:     Tue 07 May 2024 22:01:44 +0000
Manifest next update:     Wed 08 May 2024 22:01:44 +0000
Files and hashes:         1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: XAJFERqYXt+J5+sk/tzoeNEYSpxYVGd++aLgNDZySaA=)
                          2: asG9LOEQ9a_qM7TR1c0zxytPaKU.roa (hash: JKWvYwMg0EwxnlqCZRiPYBWRVe3dH1jUdws6l+ECsWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 22:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:13:af:04:81:f1:9c:c9:4a:b7:02:17:08:b0:d1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
        Validity
            Not Before: May  7 22:01:44 2024 GMT
            Not After : May  8 22:01:44 2024 GMT
        Subject: CN=f08eb6e112dea02d4065459b3b56ecbb1d94b155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:05:13:71:77:2a:1a:f4:98:2c:a9:08:75:
                    5b:4b:f7:47:61:bc:b7:90:68:f3:03:27:06:67:bc:
                    75:b9:72:44:4c:16:7d:c8:8b:12:4d:02:46:2f:0b:
                    d1:0a:2f:ca:3c:c2:40:42:50:4f:99:19:23:c6:4b:
                    5b:2a:0e:fc:97:d0:70:7e:99:87:a3:65:7e:8b:90:
                    ed:71:6f:5c:33:5e:09:e1:ed:71:2f:0f:ed:3d:c0:
                    a2:ba:1c:42:82:ba:e7:9e:13:71:03:ef:b8:4e:70:
                    10:38:a7:bb:71:31:b1:f6:f9:79:68:61:c1:87:62:
                    c8:5e:a4:79:74:ab:96:3d:79:b9:37:c3:67:35:76:
                    70:7f:c6:89:81:54:56:f5:71:3a:97:61:19:35:9c:
                    ca:4d:d5:77:9f:e2:3d:43:1d:7c:2b:ed:a7:22:64:
                    31:fa:eb:ec:87:dd:be:dc:94:f5:c5:ae:1f:3b:8f:
                    25:37:8f:84:38:6a:8a:bb:c1:29:01:e6:c3:3d:ba:
                    b5:b8:ca:46:6f:26:85:b3:91:b6:46:cd:e6:09:59:
                    9f:ad:6d:23:25:67:4f:0d:bc:c5:33:af:68:c0:58:
                    14:37:18:35:b0:24:e6:2c:d7:fd:5c:02:aa:66:49:
                    9f:cd:dd:d3:ec:5d:93:c3:07:e5:47:0c:87:1c:f7:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:B6:E1:12:DE:A0:2D:40:65:45:9B:3B:56:EC:BB:1D:94:B1:55
            X509v3 Authority Key Identifier:
                keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:cc:45:47:60:d4:26:af:89:f1:98:bd:8c:2a:b0:3f:f9:8b:
         15:5b:4c:a8:04:60:04:79:62:8c:8e:cd:c4:03:f2:1c:d0:41:
         17:f1:de:d7:fa:36:87:94:c0:00:ba:de:c6:98:7c:b4:b0:96:
         3f:cf:1b:ef:17:04:9b:a4:a7:c2:c9:69:62:07:f1:71:4b:95:
         1f:b4:a6:db:86:69:42:12:95:5c:77:1e:88:d2:f3:b4:1f:d1:
         c4:55:b8:24:2c:13:aa:f8:0c:93:b1:47:82:98:4b:be:1d:40:
         09:7e:63:b0:22:ff:ba:80:01:ff:a6:02:77:0f:c8:e2:02:61:
         44:19:89:73:88:a7:f6:ba:28:33:be:46:8c:f5:0e:82:fa:b9:
         fa:3d:ae:b7:8b:15:c3:2b:40:3d:46:c7:d8:a5:5d:9a:67:92:
         95:f0:25:e8:23:4f:15:65:09:33:1b:54:b4:62:89:72:63:94:
         65:07:67:ae:f8:35:b5:a8:eb:0e:bf:79:f0:07:8d:43:3d:f5:
         28:79:af:4d:ab:83:54:20:e6:49:30:f9:14:fb:42:2c:09:4c:
         6e:6a:c2:66:81:0c:25:de:5e:11:33:99:d2:6a:76:7a:3f:39:
         1a:ce:f3:16:b6:14:da:da:e3:e2:9d:60:f6:26:08:f5:04:a0:
         8f:c3:cd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:32:23 2024 by rpki-client on console-fra.rpki-client.org