Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File:                     1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier:          +MrppRPy0Jl73kvUWTiI+7ceMwIz/c2An6a/CFSgjNk=
Subject key identifier:   DC:23:96:23:AE:5B:15:FC:5C:BC:45:DA:6B:27:61:F1:CB:DF:D7:01
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer:       /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial:       018F55151C45E8CFBBB6D3100B1BF5AB18B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number:          09EF
Signing time:             Tue 07 May 2024 22:03:17 +0000
Manifest this update:     Tue 07 May 2024 22:03:17 +0000
Manifest next update:     Wed 08 May 2024 22:03:17 +0000
Files and hashes:         1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: 8oDXS0RcSuagvmdoFmvqVDnP3Jq1vlHOefl/QVh2yAs=)
                          2: 4xjMbsicSaeFnY-4hyLre2YynJ0.roa (hash: NM4K2HcrJFPy5krUZKyIGIyawZ2ITgHMa3MIBCUE+Hc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:15:1c:45:e8:cf:bb:b6:d3:10:0b:1b:f5:ab:18:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
        Validity
            Not Before: May  7 22:03:17 2024 GMT
            Not After : May  8 22:03:17 2024 GMT
        Subject: CN=dc239623ae5b15fc5cbc45da6b2761f1cbdfd701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1b:aa:7c:29:59:bd:ec:f8:2b:35:8a:02:05:
                    5e:09:38:6c:01:ef:a0:c4:25:1b:83:b6:50:20:5f:
                    db:6c:c3:c7:ba:64:00:99:1d:9e:b7:63:bc:2e:e5:
                    55:df:d9:85:96:c5:0d:56:b0:81:13:38:e3:b0:ab:
                    42:e0:19:75:5c:9d:df:55:e6:96:3e:fd:44:5b:31:
                    99:09:02:64:3a:d0:fc:9e:71:23:5e:f4:32:cc:db:
                    73:09:4e:e3:78:e2:1b:b3:e6:e5:ef:22:a7:b4:45:
                    aa:70:fb:93:99:b7:99:a2:e0:17:64:fe:8e:72:ec:
                    c3:a8:28:ef:3f:d9:2e:70:c3:18:bb:1b:71:68:fd:
                    8e:a1:68:a0:9d:20:86:9a:e8:5c:4b:15:6c:c1:95:
                    df:b1:ff:60:8c:22:16:dc:2c:91:cf:82:59:38:b9:
                    79:58:63:47:66:6f:3d:4d:57:d6:f4:2a:b1:e6:42:
                    66:06:d5:ac:6b:c7:39:a4:9f:67:94:31:b9:dc:20:
                    37:e4:87:ef:85:e1:cc:43:45:cc:4f:8d:4a:7d:5c:
                    6b:ec:a0:f1:9e:ec:ed:8d:a9:62:00:77:74:f0:00:
                    0e:f5:1e:48:f3:62:cb:d0:0c:52:8a:0f:79:ff:4a:
                    67:ee:75:3a:20:5b:be:54:fe:7d:c7:21:e2:a9:35:
                    a0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:23:96:23:AE:5B:15:FC:5C:BC:45:DA:6B:27:61:F1:CB:DF:D7:01
            X509v3 Authority Key Identifier:
                keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:58:d6:b1:2c:a7:f0:ac:ab:77:2c:50:d0:20:86:ff:2f:26:
         80:64:46:10:1c:21:3c:d9:b4:1e:9f:2f:f9:f1:02:1c:5d:99:
         36:04:2f:4d:7b:ec:d2:a3:09:e0:a1:3f:8f:a6:a7:4e:ac:b6:
         59:31:65:6a:22:3c:ae:14:e5:a3:d4:a8:3b:a4:29:85:41:a5:
         aa:aa:8e:8e:79:26:f1:dc:c0:0b:30:c2:af:2b:79:1a:c2:63:
         e6:45:4d:79:7e:cf:50:b7:ae:f9:20:88:21:52:ea:03:be:32:
         01:99:fc:56:46:06:f3:6e:96:0d:55:4b:de:4e:f9:cc:af:b8:
         fa:02:93:08:af:f8:9a:bd:cf:19:37:ef:17:ae:d5:26:bc:13:
         44:8e:54:bc:dd:78:09:99:57:53:c5:3a:45:f7:9e:2e:c9:15:
         cc:59:3f:b4:68:87:b4:77:d3:51:e1:a8:60:ff:63:16:2e:43:
         08:a4:35:77:0f:74:6a:da:95:a8:da:05:ac:94:26:43:ee:44:
         9b:93:58:17:68:12:79:74:ac:90:87:5e:1b:73:cf:1a:48:ad:
         d8:a4:85:b7:44:7e:a8:b4:36:c6:aa:56:b6:61:7f:d5:34:57:
         1a:b9:5d:45:c4:dc:4b:19:3d:77:ac:ca:2f:8c:d6:6f:d9:2d:
         41:38:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:50:47 2024 by rpki-client on console-ams.rpki-client.org