Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File:                     1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier:          zkLk5b/XZ3Oa4pLyb/+UIo4WyhaJxVC/xCA35o9v0lQ=
Subject key identifier:   3C:FF:0B:C6:0C:FE:D3:49:DA:C3:CD:55:44:DA:F5:A3:DD:C4:9A:B5
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer:       /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial:       018F1EFFCA5BAEE6894CD385AFDED2B57351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number:          0550
Signing time:             Sat 27 Apr 2024 10:00:31 +0000
Manifest this update:     Sat 27 Apr 2024 10:00:31 +0000
Manifest next update:     Sun 28 Apr 2024 10:00:31 +0000
Files and hashes:         1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: ARpFUUwogEnMd0bE7GMZ6WSCo58DQhZugi5tWBrxOkE=)
                          2: JD4f42-HQZFmR5tk-B5wQlN6cOE.roa (hash: acXKIz2TLCbv2lK9FzhBfDyRBvNPW9AvIOItnOrJMqk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:ff:ca:5b:ae:e6:89:4c:d3:85:af:de:d2:b5:73:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
        Validity
            Not Before: Apr 27 10:00:31 2024 GMT
            Not After : Apr 28 10:00:31 2024 GMT
        Subject: CN=3cff0bc60cfed349dac3cd5544daf5a3ddc49ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:57:1f:1c:29:dd:56:6b:f1:f7:51:60:1b:
                    6d:b8:de:4d:24:27:10:97:f2:49:1f:8a:fd:2f:26:
                    7a:b5:3d:12:4d:f2:fa:a3:54:91:4a:cb:63:ef:9a:
                    3f:9d:3b:08:73:13:46:6b:aa:12:92:fa:43:bb:48:
                    6a:24:e4:8e:90:19:0b:8b:36:c9:d9:46:ba:e9:ea:
                    55:a1:a8:cd:b9:be:77:2c:e7:e2:2f:26:e5:90:fe:
                    e1:f9:44:ed:2d:1c:b9:04:de:22:5b:3a:49:ff:3b:
                    ff:d5:d7:17:00:c0:98:c4:1c:a3:69:b8:95:51:a5:
                    fa:c1:2a:a1:78:68:74:53:7c:55:e2:a1:fc:46:2a:
                    b9:93:1b:9a:c2:6b:9f:08:44:e4:52:df:b9:88:31:
                    a5:58:da:81:d5:0b:10:7a:a0:bd:18:98:5d:24:31:
                    90:60:25:f3:4c:68:b5:68:1f:8b:27:72:53:a0:6e:
                    09:cc:06:1b:cd:25:dc:a4:e4:e7:15:2d:1e:f0:ae:
                    33:dd:00:a7:4a:30:62:f4:90:64:72:97:19:37:f3:
                    50:66:b0:ff:eb:57:89:5d:df:db:3b:41:40:04:60:
                    7e:92:55:36:3e:41:23:9b:e9:96:18:95:45:18:78:
                    b0:48:d9:3e:70:33:a8:d6:1d:8c:33:9e:7c:9d:15:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FF:0B:C6:0C:FE:D3:49:DA:C3:CD:55:44:DA:F5:A3:DD:C4:9A:B5
            X509v3 Authority Key Identifier:
                keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:47:41:cb:a1:00:1c:fc:57:92:8e:e5:59:1b:ec:d9:40:0d:
         4c:0e:25:46:e5:eb:0b:f4:af:7c:fe:61:0f:cc:c5:fb:8e:2e:
         89:ac:d1:91:1c:5f:16:43:48:31:17:33:6c:3a:92:6e:7a:8e:
         e3:64:cb:5e:eb:83:74:6c:57:d4:97:5a:d8:bd:1d:7c:0c:78:
         6a:f2:3f:c7:c8:81:de:96:d4:7c:a2:73:91:f6:3e:d5:6e:dc:
         60:af:27:c9:51:f3:df:c0:01:b4:96:b5:da:45:4f:84:2b:dc:
         ff:14:78:2a:03:33:88:b5:5a:b8:db:14:a5:0e:a6:fc:87:e1:
         65:96:3d:5f:6e:14:60:2d:00:c2:6e:cf:2e:de:fb:8a:5e:36:
         5c:eb:5d:d8:5e:d5:29:49:aa:69:5b:ab:ae:89:55:7a:81:8b:
         a1:43:b1:91:18:28:98:60:fe:07:e8:9c:90:6f:86:9e:da:ec:
         3b:49:e2:d0:26:0e:19:10:79:29:c0:79:a0:5b:e7:2f:4a:e6:
         09:16:24:37:51:ba:76:ef:38:1a:36:62:a7:97:c6:e8:49:90:
         40:dd:46:39:1c:cc:08:76:e2:5d:2d:a2:2a:18:15:5e:ad:51:
         04:93:c9:03:03:16:85:ce:d5:41:2a:45:33:ed:26:19:14:d6:
         f9:6a:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:41:13 2024 by rpki-client on console-ams.rpki-client.org