Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft
File:                     23_SbKX3kUcLC3KbcvYfgABYoyI.mft (raw, json)
Hash identifier:          wxhj7ATPGsKfBjo0gxpT1y3Xk8c1ymmYG6TdDLjKb7I=
Subject key identifier:   E8:CF:14:79:99:C5:66:E0:B4:6E:22:BD:FD:73:6D:A1:C9:E0:C8:FC
Authority key identifier: DB:7F:D2:6C:A5:F7:91:47:0B:0B:72:9B:72:F6:1F:80:00:58:A3:22
Certificate issuer:       /CN=db7fd26ca5f791470b0b729b72f61f800058a322
Certificate serial:       018F3B1C4224B67DF64AC53F152BEC519B7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft
Manifest number:          1010
Signing time:             Thu 02 May 2024 21:00:58 +0000
Manifest this update:     Thu 02 May 2024 21:00:58 +0000
Manifest next update:     Fri 03 May 2024 21:00:58 +0000
Files and hashes:         1: 23_SbKX3kUcLC3KbcvYfgABYoyI.crl (hash: Ty2vbAK6zOr5+UnHJTgmw17ofphh3GFuMEFvTu8iO4U=)
                          2: zqZ7YeHqk0hiMOBiaFjWyV4aSgw.roa (hash: nueI04if8crC0LwyghMW1a+2gA4Ngf7rPXeWCLYQ4io=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:1c:42:24:b6:7d:f6:4a:c5:3f:15:2b:ec:51:9b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7fd26ca5f791470b0b729b72f61f800058a322
        Validity
            Not Before: May  2 21:00:58 2024 GMT
            Not After : May  3 21:00:58 2024 GMT
        Subject: CN=e8cf147999c566e0b46e22bdfd736da1c9e0c8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:5a:5e:72:cb:ce:81:a5:35:2c:b6:c8:1e:
                    71:42:52:a3:e7:b0:76:87:ad:75:82:a3:15:75:e6:
                    35:35:19:87:49:24:4a:61:b5:a6:42:37:1b:0a:c0:
                    68:e6:2c:36:0d:85:64:39:17:d1:0f:09:03:8a:6b:
                    17:15:14:88:55:2c:f9:40:8d:ba:8d:d0:ea:a2:1e:
                    73:ab:5b:23:37:48:91:0c:1b:87:a9:c3:ef:05:63:
                    9e:89:94:0b:49:eb:b3:6d:fb:84:6c:26:c6:fb:ec:
                    9e:e0:e0:33:c8:46:94:a2:d4:3b:82:10:6d:ea:41:
                    c3:d7:0e:5f:4b:79:a9:66:8e:db:75:e0:28:05:88:
                    64:b2:60:cf:16:6c:58:b2:de:fb:c2:87:56:94:93:
                    75:70:29:98:1e:90:16:cd:b5:37:65:cc:dc:b9:9e:
                    79:e3:a6:74:ef:47:c5:fe:73:8f:1e:a4:ed:22:51:
                    37:c9:88:b1:99:16:46:31:2a:bf:f8:a4:d3:95:a6:
                    1a:ae:34:6f:65:f4:bd:b1:5a:44:62:7f:55:66:8b:
                    88:7e:ba:77:0f:28:41:c5:52:a9:0f:e6:6b:31:ab:
                    31:c8:cb:07:26:3f:f9:f5:25:62:2c:7d:5e:e9:13:
                    de:c8:e2:30:7a:cf:ef:88:09:e5:91:05:cd:a6:e5:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CF:14:79:99:C5:66:E0:B4:6E:22:BD:FD:73:6D:A1:C9:E0:C8:FC
            X509v3 Authority Key Identifier:
                keyid:DB:7F:D2:6C:A5:F7:91:47:0B:0B:72:9B:72:F6:1F:80:00:58:A3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6d:ba:7c:af:9b:37:e8:24:cd:c4:ba:87:92:80:a9:cd:88:
         bc:94:72:d9:c2:fe:e7:b6:71:8b:11:06:00:c6:f6:21:d9:71:
         68:d2:cd:fe:89:91:e3:5d:cf:a7:c3:3d:e0:0e:65:3a:aa:da:
         fc:51:99:94:ce:f2:6e:df:4b:a2:4b:99:f6:d1:70:5a:96:08:
         a0:f4:26:3c:14:4c:2f:b9:7e:27:d7:fa:e1:f9:f0:01:55:fd:
         3e:0c:25:96:9a:c6:3f:47:94:cc:77:99:15:b2:cd:91:74:ba:
         1e:41:f9:34:64:40:d9:83:76:47:ed:62:e4:ba:18:f8:f7:92:
         a7:d8:cc:f2:b7:2a:25:fc:b7:2c:44:b2:73:35:31:1f:19:3f:
         f4:11:33:a6:71:3a:6c:b2:30:f3:e4:c5:a2:09:5f:2d:da:a8:
         1b:54:3d:31:e9:06:35:1b:64:bb:b6:29:50:9a:77:c1:12:2b:
         f9:f1:b6:42:d6:1b:9f:24:a5:d9:3e:1a:b4:04:d5:90:1b:7f:
         37:49:5e:f7:22:1b:77:e3:3b:7d:76:bc:b2:e0:13:60:95:2e:
         d7:b5:24:ec:1f:9e:25:5d:bd:03:fc:c9:b5:65:e8:0d:cc:0b:
         ae:ed:6e:fc:33:5b:ec:df:80:8e:db:f9:70:d0:76:17:98:ab:
         6c:1e:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:22:44 2024 by rpki-client on console-ams.rpki-client.org