Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File:                     cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier:          yKkaxsCm6RbVNo7kIdmFb2TC+yLhznmT2ydOobvvygM=
Subject key identifier:   CB:6F:5F:16:18:6F:FE:EF:19:6A:AA:5D:B9:6E:61:2A:D1:B0:C5:1E
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer:       /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial:       018F874903F366398927E198BEB49CB5DC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number:          110B
Signing time:             Fri 17 May 2024 16:01:00 +0000
Manifest this update:     Fri 17 May 2024 16:01:00 +0000
Manifest next update:     Sat 18 May 2024 16:01:00 +0000
Files and hashes:         1: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: Zd6wa5P92g0jSfIM/EuPsOWNp4CVMlCmy3dPOgEYYT8=)
                          2: cWYtzh97Y5xJyWvvO2tRRKHTSRI.roa (hash: BzWIY0juQizS+IaQgFB3CTCIx/YEVzGHMBmXB0jMJgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:03:f3:66:39:89:27:e1:98:be:b4:9c:b5:dc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
        Validity
            Not Before: May 17 16:01:00 2024 GMT
            Not After : May 18 16:01:00 2024 GMT
        Subject: CN=cb6f5f16186ffeef196aaa5db96e612ad1b0c51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:72:c0:ee:c7:0b:74:e9:ba:b7:d2:8c:87:
                    01:1d:57:9f:1b:23:8e:a9:59:9d:b2:43:0b:b9:83:
                    dc:07:94:35:69:8a:05:a8:d0:a2:bc:bb:17:74:7b:
                    51:f7:e5:ef:a9:80:8a:18:5e:1b:1f:09:84:3d:0a:
                    53:43:55:45:fb:9d:97:7b:53:25:b2:58:ef:97:da:
                    14:4a:63:a5:9d:6e:2f:68:1c:28:a5:a9:83:b0:63:
                    39:7c:e4:e2:b8:58:25:1e:13:a0:cc:d2:eb:2d:6d:
                    2c:2b:23:78:98:cc:66:ab:d3:af:7a:8d:8b:56:f4:
                    9a:9e:03:a7:a3:54:e0:c2:ac:e7:5b:4c:c1:d6:82:
                    4f:5f:76:fb:bf:06:2e:71:f5:d5:0a:44:ec:4c:ae:
                    66:92:b5:d9:48:8a:3b:4f:a2:e8:b5:9e:d6:ba:4e:
                    af:6a:0f:67:1f:33:13:6b:96:92:51:e3:c1:e5:da:
                    b6:e9:f9:0b:4e:83:7f:b5:d1:24:55:de:6c:f9:d6:
                    a0:f7:32:9f:6e:a0:25:36:96:d9:35:dc:b0:2c:8c:
                    a3:1b:9f:e3:a8:70:e7:8f:98:d9:5f:48:bd:ed:db:
                    b0:c5:06:f8:8e:d2:a9:59:58:2e:96:44:55:ca:8c:
                    25:8b:29:09:fb:61:0c:43:11:93:87:9f:3a:e9:cb:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6F:5F:16:18:6F:FE:EF:19:6A:AA:5D:B9:6E:61:2A:D1:B0:C5:1E
            X509v3 Authority Key Identifier:
                keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6d:89:95:af:75:2b:38:e0:22:b2:d5:a9:a7:10:2d:d8:bf:
         af:83:6b:d5:8f:35:93:5b:e0:38:92:9e:11:73:ab:64:39:5d:
         1d:b0:b9:4a:eb:3b:16:45:e9:46:72:26:c7:9b:8e:78:3e:48:
         01:69:94:f8:a8:87:0d:8a:de:9f:18:c9:ba:dd:1d:30:17:20:
         17:bb:64:f5:fb:09:2a:14:06:ed:44:44:c8:25:48:7e:61:18:
         9f:df:c2:8e:72:e8:7c:a4:41:ef:5b:04:d2:07:ee:fd:80:73:
         f9:32:5f:53:a0:99:41:2a:aa:84:a5:d1:ef:33:50:56:98:f9:
         45:77:93:15:35:15:63:4e:01:67:d4:97:4e:dd:ac:39:82:5f:
         49:2a:6f:d0:8c:b0:12:55:4c:fe:5a:21:ce:29:f3:9d:93:94:
         a5:b2:78:0c:36:6d:5f:1b:83:93:f2:8f:2f:db:14:2e:77:bb:
         43:dd:43:8c:cc:28:55:1e:b9:f7:f9:3d:b6:65:bd:1b:39:0e:
         51:1a:61:c0:f9:ba:24:ac:40:af:cc:8e:90:e9:50:95:bc:4f:
         d2:9e:d6:37:a7:39:f2:fe:08:7a:16:12:33:76:40:62:87:ba:
         d6:ea:91:9c:b1:6e:cf:d9:3f:1e:31:0a:ab:12:96:e4:aa:0b:
         59:93:c0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:01 2024 by rpki-client on console-ams.rpki-client.org