Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File:                     1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier:          J1mIVh/LJ4Xv/tK4HvFEJ5uOjXRxqdv3bc4iyrRq57E=
Subject key identifier:   A1:7D:1B:08:BD:52:8E:50:54:37:3C:16:93:DF:10:9B:CE:57:8F:F6
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer:       /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial:       018F3C9D003AC412C4BDB3908B0F217AA9FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number:          0A2B
Signing time:             Fri 03 May 2024 04:01:12 +0000
Manifest this update:     Fri 03 May 2024 04:01:12 +0000
Manifest next update:     Sat 04 May 2024 04:01:12 +0000
Files and hashes:         1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: evZFeCpRpwVc0MUeN66L9W8rtXJhBIq3CambbncbZnY=)
                          2: 6AjpE2X2U3UOKWWUW9KIbYlc9n0.roa (hash: 62h4gtVQewSwKU7kMqnxFcHQDRwb9GNrx2eKkUZjOfk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:00:3a:c4:12:c4:bd:b3:90:8b:0f:21:7a:a9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
        Validity
            Not Before: May  3 04:01:12 2024 GMT
            Not After : May  4 04:01:12 2024 GMT
        Subject: CN=a17d1b08bd528e5054373c1693df109bce578ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:d7:7a:d4:82:c1:04:0d:57:35:3b:d2:12:
                    d5:e5:fd:75:ca:af:04:7e:03:e8:f7:57:ae:3c:f6:
                    e9:91:47:7f:5e:6b:31:e7:83:8c:7b:d7:3c:c4:d1:
                    3d:27:88:46:90:c6:86:7e:f1:03:0f:ea:31:fe:51:
                    e2:f4:68:30:31:2b:de:40:c4:b2:c5:b0:fe:ec:da:
                    05:18:f0:b9:eb:be:41:f0:a0:56:3b:ef:76:2e:80:
                    c6:19:73:9b:7c:25:54:ca:60:96:71:9c:44:6a:7c:
                    f3:8f:94:2d:18:d7:39:45:d9:ed:2e:ff:5b:05:cd:
                    80:a4:e2:77:ef:fe:ed:b7:bd:50:58:8c:18:3c:e2:
                    e1:81:f6:50:54:5b:f3:a4:4a:48:7f:50:26:c0:1f:
                    d1:ef:2e:de:8b:c5:85:57:47:f0:77:58:9b:c2:66:
                    25:ce:17:ae:38:42:d6:53:41:4e:ae:c9:87:01:8a:
                    bc:20:5c:8c:11:13:57:e3:f0:a7:be:35:85:b6:d6:
                    29:94:fc:d7:9e:ca:f1:b2:90:fb:05:50:d2:76:cd:
                    64:9c:0e:03:98:e6:75:ae:ec:98:45:69:ba:db:40:
                    10:51:9b:03:75:6a:d6:27:b0:1f:ea:20:2c:d7:66:
                    92:cb:58:ab:73:1d:63:f7:d2:44:76:27:ac:c6:8b:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7D:1B:08:BD:52:8E:50:54:37:3C:16:93:DF:10:9B:CE:57:8F:F6
            X509v3 Authority Key Identifier:
                keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:23:af:b4:55:29:e8:f5:7b:9c:8c:32:33:ce:c4:48:84:d5:
         3c:8d:93:e4:ea:f8:f5:8a:18:aa:16:a9:9c:2f:55:6a:88:49:
         04:54:7e:55:af:f5:a5:af:e3:e1:55:16:84:c9:48:22:b1:71:
         96:ff:16:9b:cf:70:39:6e:fa:47:0e:2f:19:90:74:8b:db:ec:
         74:4b:34:16:61:d7:ed:05:ee:fa:ad:d9:68:d7:da:02:3d:f2:
         8b:1a:1d:9e:3c:3d:0a:a4:b6:c8:fc:14:c4:d9:97:a1:3e:9a:
         af:cc:45:bf:11:ac:ad:5e:78:e7:7c:dd:0f:56:47:97:eb:e9:
         c9:06:fd:8f:e3:fa:92:f5:92:c4:8c:42:bc:4d:a5:4d:bf:85:
         0f:61:02:e1:ad:fb:d6:52:0b:07:3a:3a:2f:94:76:e9:5f:2f:
         63:89:30:bf:de:49:50:70:cc:96:9d:cc:cc:ad:7e:c2:a9:96:
         86:f5:36:8a:38:b8:b4:e7:38:6f:5f:23:42:e6:27:2d:ac:1a:
         ac:58:f6:2e:87:9d:55:ba:b5:65:30:52:73:0c:3b:0f:80:29:
         3f:65:7e:6e:6f:8b:60:1a:62:f7:50:a7:66:b6:5c:a6:35:de:
         11:4b:72:3d:0c:4e:ce:fb:fe:1d:48:0e:80:4b:bd:55:69:38:
         72:a0:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:02:44 2024 by rpki-client on console-fra.rpki-client.org