Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          /NVHpkPzSHEg4hRimhfG0B53IhKyj1CIX75kFs9SILc=
Subject key identifier:   82:1E:08:B8:04:7C:95:18:F3:B5:F5:4B:F9:9B:F2:0C:57:4F:0B:6B
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       018F381D1EEE8A1FEDA5AC6176830AD40BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 07:03:03 +0000
Manifest this update:     Thu 02 May 2024 07:03:03 +0000
Manifest next update:     Fri 03 May 2024 07:03:03 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: IxhFW4e3lMjelaAf7eIKWD6GEUTmsUrY5HBpc5vPz80=)
                          2: JFyMNggmUl0xfEZpt3nb7EyStwQ.roa (hash: dfxocIqn7rUjXkDRloSWAT2UfkDKSNu4GiqvpBjMgBQ=)
                          3: yLzrDp2Fk69zZmFlYknZxn0mQ0c.roa (hash: i/fQTRbEJRJk7RvyK0xpkXzoI6sUonZCjsp8cMPw5aA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:1e:ee:8a:1f:ed:a5:ac:61:76:83:0a:d4:0b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: May  2 07:03:03 2024 GMT
            Not After : May  3 07:03:03 2024 GMT
        Subject: CN=821e08b8047c9518f3b5f54bf99bf20c574f0b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:54:ac:47:01:da:63:c6:b4:e6:63:ba:45:98:
                    73:a8:ba:78:ed:a2:19:d1:7c:4b:84:3c:81:3f:62:
                    58:99:fa:90:0a:75:37:54:ae:d9:0c:1f:6c:3c:59:
                    5c:e2:af:9b:80:db:90:71:24:b0:bc:7f:f3:96:22:
                    fa:01:38:4d:d7:f7:51:8a:f4:9a:fd:67:0e:66:ac:
                    14:85:f5:c7:90:96:63:63:59:3b:e6:7b:31:15:07:
                    88:f0:2f:be:af:e8:bd:77:05:b1:82:e2:37:b3:39:
                    21:64:1f:77:87:95:df:fa:d8:cf:73:a4:86:d1:64:
                    9e:c7:02:bb:f1:d5:ba:0b:71:26:e9:41:20:16:c7:
                    4b:0f:1e:2a:fe:d9:ea:8d:51:1c:35:3b:a9:9e:8c:
                    53:4e:00:38:05:b4:ff:6f:b7:53:4c:71:54:ae:90:
                    5d:e8:69:46:3f:21:72:7d:f2:1f:73:e3:ef:5b:bb:
                    44:0d:32:79:ba:d8:52:65:57:fb:1c:75:23:b4:84:
                    a9:fc:d7:aa:4a:15:6d:9f:45:9b:79:d9:c1:08:5a:
                    a3:b5:e1:cb:21:3b:32:bb:c9:10:88:d4:26:0e:86:
                    79:f8:e8:7c:bd:ea:90:82:9e:49:f7:d5:cc:56:dc:
                    89:14:6a:43:56:d6:c9:1d:35:c1:fc:da:b6:91:0c:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1E:08:B8:04:7C:95:18:F3:B5:F5:4B:F9:9B:F2:0C:57:4F:0B:6B
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ad:51:36:fe:52:68:a8:96:bb:6c:a4:54:b6:a1:4f:7f:d6:
         e3:9c:b1:13:0d:e7:b9:2b:4a:a9:fa:82:70:de:10:91:2d:ea:
         d9:e2:9a:c7:24:b4:c9:27:b1:a1:78:e7:6e:51:76:f7:c5:44:
         85:94:ac:df:92:4a:61:49:fc:d6:4f:16:f5:a1:b6:a5:f7:84:
         4c:93:fe:6a:e0:3c:22:f0:85:f1:11:57:00:6c:d4:85:e1:7f:
         35:2f:76:96:66:e9:f6:70:97:42:3a:c8:8e:12:7f:3d:09:65:
         0e:eb:f0:f8:40:ea:37:0f:a7:38:84:b7:d9:8f:9d:62:72:2d:
         ad:8e:3c:c1:6c:9a:94:60:ba:90:03:89:4c:65:b5:fa:11:98:
         b5:7f:20:b9:5b:67:8f:18:75:d9:8f:02:ec:b4:36:4f:1d:e7:
         c4:ea:ae:da:a1:c0:73:80:7b:66:7e:d0:2b:5b:e6:ba:e7:c7:
         a8:bd:24:69:4c:8c:30:99:59:ac:ae:11:32:c3:1e:8f:c1:0d:
         78:24:17:53:a7:56:d1:a6:30:b9:eb:08:8f:96:f4:91:de:88:
         0d:8e:bf:6f:9a:cf:60:8d:7f:59:ef:4d:7f:89:46:b1:75:27:
         1a:b2:fa:8d:75:97:03:2e:3f:69:b4:c1:46:c3:44:6d:02:be:
         a5:1e:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:32:21 2024 by rpki-client on console-fra.rpki-client.org