Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
File:                     8lszZFa0ffwPOdyRpriCpKq76rM.mft (raw, json)
Hash identifier:          wTs6rUV4CVetWx5w0O7enxumW1tERRoNj2SS1dFqEa8=
Subject key identifier:   13:58:DB:C1:75:09:8A:2E:88:2C:42:64:F1:11:4F:12:67:21:02:03
Authority key identifier: F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3
Certificate issuer:       /CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
Certificate serial:       018FE20E954D0142D9D75997FB3244CC11A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
Manifest number:          0C66
Signing time:             Tue 04 Jun 2024 07:02:37 +0000
Manifest this update:     Tue 04 Jun 2024 07:02:37 +0000
Manifest next update:     Wed 05 Jun 2024 07:02:37 +0000
Files and hashes:         1: 8lszZFa0ffwPOdyRpriCpKq76rM.crl (hash: dDgWrKu6/96ny9cvuJ/it2+ictImxWQzU/GuMkpoxLI=)
                          2: K9n3HPsbfXX8xXc_vuaxRy9_U88.roa (hash: Sw8M4MiYLMbQo1w4h2FdOyOK3cAUoB3tou2UCEMEDBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Jun 2024 07:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e2:0e:95:4d:01:42:d9:d7:59:97:fb:32:44:cc:11:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
        Validity
            Not Before: Jun  4 07:02:37 2024 GMT
            Not After : Jun  5 07:02:37 2024 GMT
        Subject: CN=1358dbc175098a2e882c4264f1114f1267210203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:ff:fa:3b:fd:de:49:ab:f5:8e:75:09:ce:
                    19:1f:1e:60:98:fa:cb:b0:1f:ef:1c:9d:88:94:0d:
                    5f:5c:4c:f8:e1:31:94:2a:6b:8f:8f:fa:52:1d:94:
                    d4:c0:e8:a8:09:13:df:42:9c:c1:5d:cf:6d:26:43:
                    5d:26:6a:26:77:a7:32:c0:f2:78:44:a1:8f:80:48:
                    5a:3c:bb:9f:e9:64:bd:45:70:82:e2:11:81:a8:49:
                    e4:10:47:b6:b2:aa:55:b4:32:4d:a4:49:27:8d:7a:
                    35:cd:0d:77:96:16:72:30:a2:70:4c:ea:c8:25:f3:
                    0b:09:e6:3b:06:78:c2:a8:52:60:bf:d5:26:db:2d:
                    2f:34:13:98:38:74:61:39:9c:03:81:72:18:94:ae:
                    82:fa:76:a5:e5:9d:a5:b7:61:fc:7c:86:c9:d0:6b:
                    ad:44:9d:24:45:1c:50:18:cc:27:f5:8e:0a:0f:85:
                    b9:be:55:b4:e9:28:15:48:cb:83:4a:85:b5:b3:fe:
                    99:c6:14:cc:18:30:07:23:c2:7e:6f:5e:ca:94:24:
                    b1:19:d4:f1:af:e8:5c:fb:74:a7:a4:b6:7a:8c:54:
                    ab:34:7d:1c:92:73:13:e6:6f:8b:f1:27:4c:de:a5:
                    b2:7f:c7:ce:94:a0:0d:9f:8e:37:f1:39:2c:9f:27:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:58:DB:C1:75:09:8A:2E:88:2C:42:64:F1:11:4F:12:67:21:02:03
            X509v3 Authority Key Identifier:
                keyid:F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:cb:ba:13:b8:98:fe:fc:d1:1c:f7:78:8e:01:2e:b8:86:2e:
         01:26:b7:3e:a8:ed:d0:3a:8a:14:f6:46:7a:c9:c4:45:c5:95:
         49:09:52:84:af:c6:b6:79:66:74:cd:e8:3c:c5:06:60:ad:78:
         1e:d8:9c:52:90:f9:08:c9:ab:53:36:65:54:b1:8b:05:df:4b:
         98:32:fa:c8:4c:ae:d3:af:e7:e4:b0:35:3e:50:30:73:de:f1:
         48:56:da:cf:f9:1e:e5:71:d7:09:de:99:47:0e:cc:42:1e:06:
         2e:87:37:10:4e:d1:35:ce:7b:df:d4:f0:be:a8:ac:6b:19:30:
         a3:f2:15:8e:88:85:bf:93:7e:1d:90:4e:c3:b1:35:97:dd:3f:
         8b:55:34:c0:94:86:05:f1:eb:c6:bf:a4:7f:de:c4:f6:fd:d7:
         ad:06:a8:57:ea:5e:b1:f0:cd:90:9a:74:60:d0:78:c4:84:06:
         36:75:e8:bf:ac:b5:c6:37:8a:cc:60:0d:34:67:69:90:f9:f9:
         45:78:2d:6f:c7:77:58:62:e9:04:b6:39:f8:b0:db:92:2e:55:
         c5:44:46:6a:72:c4:91:b6:da:24:49:33:16:92:00:94:f0:8f:
         e6:7f:eb:87:b7:53:86:08:ce:c8:ed:77:b2:8b:aa:1f:13:1c:
         c6:f6:cb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 11:49:12 2024 by rpki-client on console-ams.rpki-client.org