Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File:                     Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier:          330VfNFv9RV2gtGjK0tXrwIBA8pb0ug9IV6NmT4Excw=
Subject key identifier:   AE:93:96:A2:3C:CE:37:20:19:95:62:43:EE:52:24:A6:F8:75:81:C7
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer:       /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial:       018F50C865AD886541F65188474DAE308110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number:          08E1
Signing time:             Tue 07 May 2024 02:01:01 +0000
Manifest this update:     Tue 07 May 2024 02:01:01 +0000
Manifest next update:     Wed 08 May 2024 02:01:01 +0000
Files and hashes:         1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: Njimj6Zde6hiyXTpfGPjj+MpdUdwHjQiXBJRa6YiVIk=)
                          2: LEZJ8V25b5aooa9m2xzOhKnDtd8.roa (hash: f5cyhtDhf7xQ/j+4zDPECfhsaIkybR64XovgT9NgalY=)
                          3: r0vEw4yHhgmxmEuSdAKs160E97g.roa (hash: t8BsTxNaruLhDrxdj15qdzBvgqYfmeRmPCj18B1jELs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:50:c8:65:ad:88:65:41:f6:51:88:47:4d:ae:30:81:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
        Validity
            Not Before: May  7 02:01:01 2024 GMT
            Not After : May  8 02:01:01 2024 GMT
        Subject: CN=ae9396a23cce372019956243ee5224a6f87581c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:de:d4:b1:db:22:42:76:aa:ba:74:82:88:
                    ca:75:35:e4:dc:f1:1e:db:61:f8:a2:b9:31:98:8c:
                    c4:39:68:8a:8f:e0:96:f4:90:25:7e:ec:f5:43:62:
                    bd:2a:18:a8:60:7c:0b:65:35:78:59:cd:53:62:83:
                    20:a2:c7:21:3d:3f:50:7a:7c:58:9d:e0:7e:0a:35:
                    b6:a2:3b:31:91:db:5a:85:ae:4d:5a:a0:cd:b4:8f:
                    ea:72:c3:d4:b4:a7:c9:33:60:6f:be:b3:29:b1:24:
                    fe:97:8a:be:ba:43:b6:9f:14:99:a5:b9:c2:cd:f9:
                    a0:46:8d:01:01:b7:07:d3:c4:18:4a:9f:17:39:e8:
                    85:04:d2:02:9c:ca:9d:f4:01:bd:96:bf:29:bd:d6:
                    6a:29:3c:58:a1:4d:cd:da:18:a7:c0:e6:a8:1f:fd:
                    b5:71:a4:eb:58:40:21:c6:af:2f:cd:54:f5:91:d3:
                    f2:e7:2f:bf:77:0a:9b:e5:f9:7e:61:c5:03:79:34:
                    6f:09:69:8c:f0:e2:62:8e:fd:08:38:aa:82:0c:3a:
                    c6:64:0d:20:12:a7:f8:20:35:26:be:42:01:d4:19:
                    69:1c:0e:41:fb:5f:ea:c9:61:a2:75:11:71:67:ef:
                    29:a1:b5:f2:74:7b:f7:ae:8e:d7:71:d6:52:47:37:
                    83:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:93:96:A2:3C:CE:37:20:19:95:62:43:EE:52:24:A6:F8:75:81:C7
            X509v3 Authority Key Identifier:
                keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:eb:8c:f4:d4:a4:95:03:4a:19:a1:b7:cd:cc:5e:bd:a2:7b:
         fb:3c:a5:d5:59:0f:ad:be:62:32:21:18:12:d2:18:3e:9b:e4:
         df:4c:57:b0:4a:16:ef:e0:15:fb:2f:30:6d:47:77:43:78:60:
         e4:de:ff:84:11:b0:4b:ec:59:8e:76:fe:49:99:b4:10:a1:30:
         51:32:04:ed:ed:37:9e:31:38:b3:28:0a:59:33:2d:cd:c9:e3:
         40:a3:76:00:ee:f6:a7:39:04:5a:5e:87:b6:e9:98:a8:64:a2:
         1d:53:18:be:06:ee:8c:32:45:6c:44:de:58:52:53:95:64:b6:
         22:f5:9c:b2:a7:d6:54:84:a0:bb:7e:ae:58:ee:c0:ab:65:68:
         17:fa:e7:8f:88:8f:5a:1c:9b:6d:fb:8c:8e:fb:cf:b4:b2:3c:
         02:78:bb:d4:ca:20:a8:b4:a8:b6:12:63:69:eb:6b:e0:38:22:
         a4:e1:75:82:0f:38:cb:c6:18:fe:57:03:65:00:87:78:73:fa:
         44:86:a9:0d:8b:0b:b9:d7:69:40:58:c2:37:d1:e7:09:f1:08:
         d0:37:16:fb:9e:60:a2:4d:51:32:a7:eb:76:03:ee:4b:eb:0e:
         d6:2c:d8:cb:39:8c:e2:48:4e:32:a8:f4:75:fe:15:12:59:d8:
         40:72:be:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:14:50 2024 by rpki-client on console-fra.rpki-client.org