Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File:                     H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier:          onx9lcTe0iptLkoxy6Ghfgg9KFBQopM/dp5TR6rWaPw=
Subject key identifier:   C8:7B:53:AF:6C:24:55:CE:AF:03:A5:19:C9:EE:53:39:95:39:43:5F
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer:       /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial:       018F351A8CB85E33E463C6F1007DA8A7E69C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number:          08D1
Signing time:             Wed 01 May 2024 17:01:23 +0000
Manifest this update:     Wed 01 May 2024 17:01:23 +0000
Manifest next update:     Thu 02 May 2024 17:01:23 +0000
Files and hashes:         1: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: j0QG16o0VCtfKQ/Rqv7O5WtisxPUI4Cg+pGNLAcr2pE=)
                          2: sBf3VYHtqyszdr67TB15TWbc-4s.roa (hash: uoE8GdV6zWJj2t4S/xEuE9QGR8TTD9/I3lhCjiC2SAg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:1a:8c:b8:5e:33:e4:63:c6:f1:00:7d:a8:a7:e6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
        Validity
            Not Before: May  1 17:01:23 2024 GMT
            Not After : May  2 17:01:23 2024 GMT
        Subject: CN=c87b53af6c2455ceaf03a519c9ee53399539435f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:71:56:1e:20:62:75:e1:f8:b5:05:58:da:
                    06:e9:97:63:1f:cd:9f:66:ed:b8:43:92:91:16:a1:
                    5b:e4:12:89:c3:44:fb:88:4d:49:bc:79:a7:d4:46:
                    d2:38:69:4f:ef:85:e6:8f:ee:86:9f:68:3f:96:67:
                    bb:63:63:50:13:07:b4:1f:9e:b7:b5:fa:d4:c7:1d:
                    1e:21:f9:4f:99:05:f5:32:7e:96:4a:a9:0d:d8:42:
                    17:4f:a9:db:8e:95:ec:af:01:c6:87:95:ee:a7:b1:
                    e6:0c:03:03:86:aa:71:4f:16:8c:27:4d:3e:45:3f:
                    ed:ce:d3:a2:34:d7:d6:56:8e:a4:f0:ed:95:3b:62:
                    c0:c9:32:4b:d9:85:2e:38:97:fa:e3:15:ea:c2:e4:
                    38:76:78:e9:6a:a1:8e:b8:f8:dc:cb:52:bd:cc:b9:
                    16:88:43:58:eb:d2:72:cf:3f:38:dd:ae:38:cc:e7:
                    b8:12:7f:3c:c7:cc:17:7b:52:fb:48:3a:d5:93:dd:
                    a1:28:55:13:f0:32:e6:af:a0:9b:5b:34:61:ad:19:
                    ba:99:b1:c8:f9:26:73:5f:d6:29:68:75:ed:c0:c4:
                    fc:1c:79:a9:62:1e:35:a6:13:ba:78:df:ba:c6:84:
                    4c:7f:6d:f5:60:3a:cf:bb:31:50:cc:c9:b2:10:fd:
                    10:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7B:53:AF:6C:24:55:CE:AF:03:A5:19:C9:EE:53:39:95:39:43:5F
            X509v3 Authority Key Identifier:
                keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:60:77:d3:6e:26:67:57:5f:1b:08:31:0f:1d:aa:bd:f3:
         4c:88:50:44:e5:4e:a6:74:28:fd:eb:ff:11:4c:ad:de:fa:8b:
         d7:80:11:cc:3e:aa:c1:6c:2a:c4:24:08:02:0a:4b:35:90:97:
         76:f5:e9:a4:8c:52:42:e4:c4:4f:27:2a:1e:35:64:07:86:42:
         11:67:c0:1d:36:e2:2a:45:bd:95:fc:1c:3e:df:df:2d:60:41:
         a9:2b:56:2f:b2:bd:ef:a7:01:61:96:cd:fa:80:46:90:24:0e:
         7e:b6:a7:db:7e:21:40:2b:30:18:ef:bf:bd:6a:84:03:91:b3:
         f2:65:6e:bf:43:27:00:ff:9c:d8:4f:e4:81:00:0a:62:d5:06:
         a7:aa:98:32:ed:97:7e:9f:a4:ba:e2:97:bc:a0:4d:7e:26:ce:
         d5:9b:4e:ba:02:bc:1a:58:7d:a5:82:1f:3a:98:39:86:96:3a:
         1e:52:71:03:e3:33:fd:f1:e4:7f:84:cc:8d:41:b9:c5:80:5a:
         f2:01:29:fa:2a:a7:7d:4c:05:22:0a:a0:dc:80:60:9f:3c:9a:
         4f:23:37:68:a1:08:34:ae:65:df:c5:1a:6e:28:53:ff:a3:fd:
         2b:26:7d:44:2f:27:7a:d9:8e:19:3d:4c:1f:86:97:50:1c:4d:
         01:42:d2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:56:47 2024 by rpki-client on console-ams.rpki-client.org