Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File:                     1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier:          KscYbmgr7PnWFhQw9SwdDTK11eHVrk0JPBJm3n4qBcw=
Subject key identifier:   D9:2C:A8:5C:7D:BC:DE:E4:BD:E7:6E:3D:9A:83:34:28:D5:40:61:9B
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer:       /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial:       018F505A8AA8DF4A9ACED9D3ECA78C70790A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number:          095F
Signing time:             Tue 07 May 2024 00:01:01 +0000
Manifest this update:     Tue 07 May 2024 00:01:01 +0000
Manifest next update:     Wed 08 May 2024 00:01:01 +0000
Files and hashes:         1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: uwUc8CDcERqJ7nXsSkimJCiksOWWe67hKRJOrpsYz1c=)
                          2: f2fQlTveqHJceEBrI074elO0Uy8.roa (hash: dAj/qCvJBclZE/+D64mjeSEwvVBnFfbPp98laacyrqA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:5a:8a:a8:df:4a:9a:ce:d9:d3:ec:a7:8c:70:79:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
        Validity
            Not Before: May  7 00:01:01 2024 GMT
            Not After : May  8 00:01:01 2024 GMT
        Subject: CN=d92ca85c7dbcdee4bde76e3d9a833428d540619b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:ae:77:4a:ec:70:a5:6c:25:29:17:a6:8d:
                    39:30:b5:e8:ad:f3:ea:51:64:69:0b:6a:f2:17:38:
                    49:4c:3a:eb:55:a5:0b:08:c5:9e:27:bd:f0:51:bf:
                    cd:c0:9e:14:32:d7:12:f2:a1:9e:d5:63:f2:f4:ea:
                    43:88:e3:10:88:69:1f:84:5f:14:8b:2d:6d:10:f7:
                    2c:d8:44:44:32:97:64:cd:35:5d:61:49:32:7c:26:
                    0c:f3:ba:12:d0:0a:d9:46:e4:e0:a6:8b:16:1b:b2:
                    28:f2:e8:07:2a:57:63:d5:a0:f6:22:20:ce:5e:32:
                    a8:3a:5f:7f:fd:3d:39:1b:a1:ad:03:d2:c0:4d:a8:
                    b6:7d:33:98:22:a0:6a:7d:1a:72:fd:42:bd:b3:40:
                    48:85:b8:f9:1d:cb:e5:cc:d8:dd:95:ee:5a:40:00:
                    0e:17:12:81:2a:e8:ac:d2:af:f9:af:1a:2e:bf:13:
                    1e:40:56:74:5d:c3:6a:53:b4:be:eb:ad:1c:62:97:
                    bd:6b:9c:bd:4c:09:ea:90:45:9e:49:70:c6:68:b5:
                    91:6f:19:9a:9f:c2:9b:18:24:0f:d6:da:18:b8:e1:
                    d5:6f:22:e3:98:84:2f:eb:c8:f2:6c:a9:1f:67:e4:
                    4b:43:f8:bc:f9:3f:96:b1:dc:7d:9a:aa:30:c8:6c:
                    9a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2C:A8:5C:7D:BC:DE:E4:BD:E7:6E:3D:9A:83:34:28:D5:40:61:9B
            X509v3 Authority Key Identifier:
                keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3f:e2:10:59:d3:f3:e2:fb:6d:9e:d5:52:55:7e:88:17:b6:
         19:29:7d:ce:98:36:74:4c:9f:13:95:d9:97:a6:80:0f:d8:38:
         46:75:f6:a5:27:d7:d7:92:df:5d:5e:36:48:06:cf:7a:bb:28:
         58:31:bb:5d:84:c0:b7:3f:81:39:ec:5d:49:46:5c:a0:4f:b4:
         5d:af:04:47:6f:b4:eb:6c:0e:7c:90:d2:18:35:18:82:7d:54:
         f9:5a:c6:88:1d:34:98:9c:14:fe:f3:12:26:9a:5a:a0:fd:f8:
         09:91:0c:30:7e:2f:7d:fc:d9:f6:8d:c6:2a:df:b3:3b:ea:36:
         ba:15:08:01:6a:78:f9:39:fa:49:fb:c2:b3:40:8a:f7:f8:21:
         09:2b:56:48:65:d4:97:69:ca:d0:55:33:b4:8e:15:8a:2e:8a:
         b5:2c:39:a3:33:ae:0b:bf:eb:9a:12:8a:2a:9a:b3:13:73:1c:
         e5:dd:75:c5:83:39:50:0d:ea:51:20:53:30:a1:68:6b:53:33:
         ae:3c:9a:a5:8b:27:e2:a3:ba:dc:de:fb:c5:b3:50:1d:d4:83:
         a2:7c:9e:fe:d6:63:e8:b1:f9:35:dd:ea:21:b6:d3:80:b6:e7:
         37:96:d1:30:69:8f:2b:e9:a4:3c:4b:ea:dc:e6:89:a2:04:df:
         62:3a:24:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:20:52 2024 by rpki-client on console-ams.rpki-client.org