Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File:                     DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier:          62ia+hHQFqQmlSjL1PsJjUu2reA9HUpwGHlmmLnmnpw=
Subject key identifier:   AE:95:39:A0:AF:E5:0E:3F:C5:C5:DF:50:2A:E7:2D:98:79:51:D8:E9
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer:       /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial:       018F7EB3559DC7AB223B2B29D0195474AB1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number:          080B
Signing time:             Thu 16 May 2024 00:00:33 +0000
Manifest this update:     Thu 16 May 2024 00:00:33 +0000
Manifest next update:     Fri 17 May 2024 00:00:33 +0000
Files and hashes:         1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: USUs3uBPygSXRESRM5sWa+OtUUTQ8t6+OT/pWRCGntc=)
                          2: jGWhSv1mxhuMXfVZ4y2-0IaipmY.roa (hash: kEo8OfEQszxm2ZxOZALf7o+Dw1KKaAODRcx5hZ1McA4=)
                          3: vD6A37Hb84PdXuDKksgrMQHz4hI.roa (hash: SYkXGonC0G/PPtsqetHUMulaneG7pvoVSmupydtye8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7e:b3:55:9d:c7:ab:22:3b:2b:29:d0:19:54:74:ab:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
        Validity
            Not Before: May 16 00:00:33 2024 GMT
            Not After : May 17 00:00:33 2024 GMT
        Subject: CN=ae9539a0afe50e3fc5c5df502ae72d987951d8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a5:5d:cf:3b:f0:51:b1:45:ed:09:01:01:61:
                    75:72:a6:b6:85:c6:7d:cf:5f:6f:85:4d:b8:70:11:
                    ae:9e:df:d5:b5:bf:ba:1b:f3:8e:ba:02:8e:1f:9e:
                    45:49:c5:89:d0:f5:36:5d:0e:15:1b:41:f9:f2:1f:
                    18:f9:97:82:f0:bb:5a:1d:37:d4:c1:90:a4:9d:b7:
                    f8:8d:fb:4d:8d:7d:df:f7:28:1f:4e:52:ad:01:73:
                    ea:93:c6:f7:00:71:e8:ba:9f:59:96:23:e2:84:68:
                    be:86:cc:a3:6b:b1:c8:ff:cd:74:b3:e5:a9:7c:52:
                    5d:b9:c1:a9:f0:2b:79:15:e2:19:cb:7e:ee:db:e6:
                    14:ad:cb:32:fd:d7:e3:0e:e6:68:7e:4b:bd:8b:d6:
                    a1:44:cc:6d:b1:b2:64:fb:8b:a1:06:02:9a:9c:41:
                    12:51:3d:e6:fb:f0:2a:e7:54:8a:31:b3:31:ba:9e:
                    67:19:25:b6:05:f8:27:ff:3c:02:bb:7c:17:e8:b8:
                    d9:92:7f:ba:77:06:32:b3:e1:65:c3:c5:09:74:48:
                    df:3b:cc:56:bd:ee:f8:91:9e:4e:6a:e5:46:84:41:
                    5b:90:23:30:56:5b:21:b2:ea:b4:be:1a:b2:ec:15:
                    87:03:92:92:94:72:b7:9a:4b:27:a5:06:dc:dd:44:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:95:39:A0:AF:E5:0E:3F:C5:C5:DF:50:2A:E7:2D:98:79:51:D8:E9
            X509v3 Authority Key Identifier:
                keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:60:05:0f:9a:e0:84:6c:7a:88:3c:7f:7c:03:6f:29:a4:0f:
         0b:69:01:4b:2b:f2:aa:f4:41:8b:10:b8:12:f2:e7:c8:d8:1b:
         32:4a:6b:a7:bd:9a:6c:e1:88:db:60:ff:d6:d2:90:1a:df:47:
         15:1a:b5:ed:59:b3:0b:f0:d7:d6:07:c4:62:6b:c1:2d:76:f2:
         09:04:6b:06:4f:c4:15:c4:f5:19:da:ca:08:aa:fd:83:9a:01:
         e7:41:8c:08:2a:d0:5c:c4:f9:a0:6b:bc:f4:a5:14:54:ee:48:
         2b:7d:45:a4:3d:43:23:96:82:67:97:bf:d4:ec:69:dc:d2:72:
         06:5d:57:35:f8:0c:17:ea:ae:9a:da:55:fe:19:cb:6c:29:45:
         0e:df:c4:94:6d:92:7b:55:c8:ae:db:88:24:ab:e7:38:02:a4:
         5e:4e:50:7d:46:0d:87:c6:d4:da:b4:8e:e1:3d:da:cb:4a:77:
         62:d4:cd:a7:7d:f8:15:07:cf:d4:7f:9c:d1:e8:5c:5b:c7:71:
         0f:76:09:c9:b8:dc:51:a0:e8:ff:6d:01:1b:a5:98:aa:c1:c0:
         26:a2:5b:ba:9c:81:d1:3e:d2:a9:dd:be:84:00:f6:e7:c5:45:
         44:b7:50:57:89:93:79:f7:cf:f2:17:2d:c8:ae:a1:1f:f8:bf:
         47:bd:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 04:42:18 2024 by rpki-client on console-ams.rpki-client.org