Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File:                     _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier:          1peJNBq+9kcc071YP42Q5qs9XyqPu84BaU+uy+kS0xs=
Subject key identifier:   D7:B3:46:65:10:C8:25:81:82:7A:3A:81:3F:51:E3:12:7B:50:A9:AA
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer:       /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial:       018F877F444D9B53D7A1855494EA5BF39D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number:          023A
Signing time:             Fri 17 May 2024 17:00:15 +0000
Manifest this update:     Fri 17 May 2024 17:00:15 +0000
Manifest next update:     Sat 18 May 2024 17:00:15 +0000
Files and hashes:         1: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: mkXCnHWQz+3YMPuAAftfBVz5KAJpZjS/O1j4hgx985g=)
                          2: pEwDZcWgy7NqMazsBGJVMwBzbu4.roa (hash: MnNJqpm1avKnpWuXATib/Q82DbDGHCqr1HiGPWTkaXU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:44:4d:9b:53:d7:a1:85:54:94:ea:5b:f3:9d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
        Validity
            Not Before: May 17 17:00:15 2024 GMT
            Not After : May 18 17:00:15 2024 GMT
        Subject: CN=d7b3466510c82581827a3a813f51e3127b50a9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:82:8b:ef:59:95:d3:a8:fe:20:0e:90:b1:8f:
                    86:d0:4a:dc:90:27:1a:95:6a:6d:7e:1b:71:1d:68:
                    8e:01:b7:01:d7:ad:72:12:10:31:d0:23:f4:71:6c:
                    ff:55:0c:cd:47:77:4f:73:44:5b:e6:48:8d:22:26:
                    82:a9:06:23:18:52:e2:73:da:9b:72:e2:ae:55:7a:
                    0d:92:85:9a:47:68:99:5e:7e:d9:5e:0e:96:41:e5:
                    fd:41:3a:75:58:eb:ac:94:31:aa:b4:0f:40:12:a6:
                    ac:69:d4:10:27:df:8f:09:29:ef:9a:a6:aa:8e:e6:
                    2c:d5:c3:11:60:53:5a:94:11:80:b4:54:dc:70:29:
                    07:3d:b9:b6:97:5e:74:7a:96:4e:68:ef:a9:e1:cb:
                    50:e1:f1:ef:36:da:aa:97:04:44:20:ed:ff:b7:d0:
                    3e:89:aa:ae:9c:b1:6e:83:41:bc:ac:dd:c8:ab:86:
                    ae:98:f7:bd:01:3e:4d:aa:8e:0e:bf:c3:c1:55:c7:
                    5d:34:48:5a:52:f4:72:06:65:11:3f:06:1f:06:7e:
                    ac:a2:36:b5:0a:b9:9f:9a:4a:7c:98:36:14:a2:c2:
                    d8:19:88:9a:42:e2:0d:68:db:3c:fa:f1:72:d0:e8:
                    c6:8b:e5:64:4b:4f:39:60:e5:08:5f:9c:54:06:89:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B3:46:65:10:C8:25:81:82:7A:3A:81:3F:51:E3:12:7B:50:A9:AA
            X509v3 Authority Key Identifier:
                keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:82:46:10:9a:2f:16:eb:d1:18:2c:40:17:71:69:aa:5d:
         b0:e7:34:66:18:f7:d8:ce:3a:8c:e5:8a:60:b0:6a:47:6d:20:
         aa:72:65:f8:ad:83:27:b3:93:eb:c5:86:b7:81:90:98:1c:56:
         60:70:22:43:ca:f0:b8:96:67:05:8a:7b:1b:53:ca:99:ac:e7:
         e4:8d:3f:e3:96:4e:41:e0:98:28:b9:b1:87:2b:ab:dc:fa:10:
         d4:fb:cd:89:7d:8f:99:aa:ed:4c:98:9c:35:de:b5:54:bb:ac:
         4a:3c:25:fd:66:57:51:f1:c8:1e:d0:2d:30:0d:72:9f:0e:23:
         a6:c2:d1:b0:7f:ca:f7:f5:00:2b:d3:ec:0f:5b:7b:9a:c5:af:
         ef:2f:8b:33:f9:2e:4f:7b:cd:ad:ee:a6:0b:42:68:77:ae:a2:
         2d:f1:9a:85:e3:23:a4:25:ea:80:f3:d0:51:b1:47:d0:73:ec:
         16:57:e7:93:d5:36:ef:82:dd:da:42:01:0b:d6:89:e2:b3:70:
         1a:7f:56:de:88:e8:1d:50:97:e8:52:45:7f:61:53:98:3d:a6:
         95:ec:66:db:87:fc:9f:3b:33:19:70:f4:d6:c4:7b:39:50:eb:
         bc:60:df:f1:d4:5b:a7:b5:69:35:15:3d:44:77:f3:77:b5:94:
         26:07:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:39:20 2024 by rpki-client on console-ams.rpki-client.org