Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File:                     IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier:          8dyMPPeaZGvespb0S/+EYPExTGWzoiDgPKcht5tgqL0=
Subject key identifier:   B9:C5:96:FE:89:A0:98:52:51:DD:52:57:86:34:5A:16:48:44:4E:37
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer:       /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial:       018F3BF961721E3540ED9C8BF31119398F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number:          0A80
Signing time:             Fri 03 May 2024 01:02:30 +0000
Manifest this update:     Fri 03 May 2024 01:02:30 +0000
Manifest next update:     Sat 04 May 2024 01:02:30 +0000
Files and hashes:         1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: s7wnzsnw54MXocNdHWe4rMS3high07dtXxp4D09Qpd4=)
                          2: J2MOazVcZPG5l6NXxF6iZZjSphg.roa (hash: fhhfCkmreRjRgYzavTKQbMUu6Q+H28ESMNCtq9iUdyc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f9:61:72:1e:35:40:ed:9c:8b:f3:11:19:39:8f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
        Validity
            Not Before: May  3 01:02:30 2024 GMT
            Not After : May  4 01:02:30 2024 GMT
        Subject: CN=b9c596fe89a0985251dd525786345a1648444e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:d3:fe:e4:8c:2d:46:16:da:92:41:97:1a:
                    5d:9b:90:fc:69:1e:3a:f2:31:f4:40:a3:ab:65:4f:
                    7c:fc:f6:53:d3:82:02:2b:89:10:62:ec:1e:ba:ce:
                    ea:f2:c5:6a:9f:4b:48:de:d1:1a:37:83:e9:f9:a0:
                    44:12:b8:30:2b:ad:cb:19:18:9c:f9:b5:8e:c8:b0:
                    8f:7e:72:16:67:11:71:c4:64:20:ff:ad:14:cd:6f:
                    8e:0d:a5:b6:7c:5b:69:1e:86:24:ee:39:c8:89:df:
                    c2:c4:13:5d:c9:08:cc:d3:ec:68:3c:55:64:c3:a6:
                    fe:f8:ac:03:e8:10:4c:b6:62:29:af:c2:06:f1:3f:
                    13:35:dc:95:1b:49:ff:21:2d:1e:db:bb:bd:84:20:
                    4a:f5:e5:e0:21:61:07:60:06:cd:f8:a9:a4:e0:45:
                    b5:74:b0:5e:23:16:65:49:b3:80:84:7f:51:95:38:
                    0c:fb:18:67:7a:c2:72:23:1a:38:11:07:c9:6b:64:
                    fd:6c:d5:f8:84:c6:9c:50:6d:6e:46:43:11:19:78:
                    f5:f4:3b:71:25:c5:f5:85:75:39:e4:76:e3:e0:f9:
                    fb:13:cf:db:e2:34:5a:f2:71:0c:1b:2e:d8:7b:12:
                    71:e2:7d:e3:86:38:67:c5:8a:ca:eb:f8:60:13:04:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C5:96:FE:89:A0:98:52:51:DD:52:57:86:34:5A:16:48:44:4E:37
            X509v3 Authority Key Identifier:
                keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8e:17:e5:05:1b:70:8c:1c:2b:ac:1b:0d:80:88:ad:ee:ad:
         80:9d:9d:8b:c9:db:20:fc:19:f3:98:70:33:44:5e:fd:35:92:
         da:77:19:ae:1e:84:36:d1:8a:b0:52:bc:82:5f:ba:76:44:c8:
         fd:2f:84:2b:4a:06:3d:72:b6:4b:73:46:51:6e:4b:f6:76:cf:
         0b:c7:7c:ef:c8:54:da:92:bd:aa:d8:c0:6c:61:c1:52:e8:da:
         83:d7:35:ef:00:07:3c:96:1b:e9:aa:34:a6:28:61:0e:f7:33:
         56:3f:79:6c:0a:7b:a2:b4:8a:0c:05:c9:98:44:4b:86:95:d9:
         67:dc:62:46:9e:fe:e0:b3:db:f5:5b:5d:68:c9:3a:36:3b:56:
         33:8c:36:a4:5d:6e:77:ba:29:68:65:61:f0:a5:7b:b9:f0:2f:
         34:26:be:04:14:e8:86:9d:95:18:81:aa:a6:74:96:7a:de:35:
         85:d5:e4:5a:7f:bb:2d:7c:89:cc:b9:5a:50:52:9b:9a:53:18:
         11:19:38:b7:9a:22:06:4a:3d:64:fa:8a:2b:8c:96:59:8c:44:
         b1:69:d6:e0:1b:ce:8c:5f:4f:7a:9c:d0:d0:f2:19:e9:29:b1:
         89:d9:6a:e4:e4:34:33:9e:9f:ca:53:5b:d9:e6:5b:98:19:75:
         76:88:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:41:56 2024 by rpki-client on console-fra.rpki-client.org