Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File:                     kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier:          1P7Nad3wLHmqru35gWX+GKy2ywKwpEoIsYB9/dpgVhQ=
Subject key identifier:   50:B1:B7:DC:B7:1E:A9:E6:62:55:13:28:97:FD:B3:B1:3F:FC:C3:20
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer:       /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial:       018F8749D4D8F690B29E715979B7B85954C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number:          0603
Signing time:             Fri 17 May 2024 16:01:53 +0000
Manifest this update:     Fri 17 May 2024 16:01:53 +0000
Manifest next update:     Sat 18 May 2024 16:01:53 +0000
Files and hashes:         1: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: GFErlC1hgPKex/bmnlF4LUuQUlhjfhYzvLu4/UDcptA=)
                          2: oLByLBpFGvxSWJHtb3qCNHZ1n5I.roa (hash: Fwo4EtcnaiJQgDniXLbjoAaIAIvTvDrLifi0qzvMxZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d4:d8:f6:90:b2:9e:71:59:79:b7:b8:59:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
        Validity
            Not Before: May 17 16:01:53 2024 GMT
            Not After : May 18 16:01:53 2024 GMT
        Subject: CN=50b1b7dcb71ea9e66255132897fdb3b13ffcc320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:c8:ac:0f:3c:06:6a:f9:03:af:0b:0a:e3:
                    6a:05:f9:21:80:ca:80:1e:04:9b:ec:ed:d5:b7:4a:
                    70:2f:c3:89:76:51:5a:a4:bc:34:1c:c1:53:a9:8f:
                    c2:05:4a:f9:37:56:4b:d4:e2:55:fe:a1:58:89:8b:
                    25:ef:61:c2:6b:f4:a7:0b:1d:21:bc:d8:95:bd:72:
                    08:21:35:84:59:c0:09:1b:eb:20:5e:1b:4a:84:97:
                    c9:2b:c4:0e:5a:7c:ec:f3:42:f1:29:f7:83:38:da:
                    0e:20:f0:12:a3:84:42:f9:f0:a0:78:79:14:3c:0f:
                    1b:09:78:53:f8:9f:6b:ac:c9:4e:ab:57:79:b3:80:
                    f4:c3:63:cd:01:1d:e0:92:4e:26:9f:ab:53:d8:ed:
                    c2:70:01:96:d7:be:09:79:41:f7:8a:88:f7:41:fc:
                    90:9f:be:86:62:5a:7d:39:e7:ea:5f:c3:e8:66:28:
                    30:49:74:2b:2a:4e:9f:12:44:35:e8:eb:3e:86:14:
                    a8:9e:bb:3f:23:af:91:82:b0:bb:f6:d1:b4:a0:90:
                    4b:63:65:bb:2c:5c:43:f9:a9:7d:0d:08:65:1a:35:
                    79:c7:f8:02:89:1c:ef:f7:d1:42:34:83:2b:22:96:
                    a9:ca:7d:87:b9:e2:28:f4:fc:0e:9a:dd:35:4c:73:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B1:B7:DC:B7:1E:A9:E6:62:55:13:28:97:FD:B3:B1:3F:FC:C3:20
            X509v3 Authority Key Identifier:
                keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:95:34:b0:68:63:81:4d:f5:e7:f9:79:b1:78:f9:66:3c:2c:
         0b:ed:cd:45:38:f9:2d:5e:68:be:74:77:d4:bf:b2:44:9a:6f:
         39:d7:f6:16:84:d7:46:d1:39:1d:af:6f:3d:13:17:ab:07:41:
         35:2b:a8:69:7f:bf:fc:7a:7e:9d:02:1c:23:f6:1e:65:88:aa:
         f7:8d:05:8d:f5:85:11:98:18:69:3c:8e:2c:07:54:72:0b:3c:
         5a:fb:79:dc:67:d3:f5:e6:a1:1a:d1:4e:13:9c:4f:f5:82:5a:
         68:00:b6:b7:8b:67:ae:cd:a0:0a:06:a2:03:62:c9:96:b9:cc:
         90:07:52:29:d4:2f:5c:71:16:7b:2d:77:37:a7:4c:2d:61:e3:
         42:c7:42:d7:b5:f5:93:ff:10:76:83:9f:58:78:46:0b:92:f9:
         a4:9e:3a:67:d7:06:d0:42:b1:9b:1a:33:6d:7a:69:7b:77:a2:
         65:93:19:7e:36:74:22:65:f7:05:7c:94:61:c2:8d:7e:61:62:
         8d:be:1b:9b:4f:f6:58:0a:87:7e:c6:32:d1:d0:fb:16:12:5d:
         de:18:be:d4:db:15:d9:e6:31:5d:a0:20:3f:80:b1:de:fd:a2:
         a1:5a:5f:14:13:2c:13:bc:69:54:1f:07:c2:37:3b:ad:5e:c0:
         a2:72:75:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:41 2024 by rpki-client on console-fra.rpki-client.org