Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File:                     10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier:          OLCFje0qZojxBm9+zCLUpKAUQatcASaC6pxN6UtDYU8=
Subject key identifier:   D5:C5:E1:32:C3:23:8F:E9:E2:76:7D:2D:39:7B:12:95:75:A5:63:5F
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer:       /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial:       018F22381BDB6046C5D328347AC39FC5BBC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number:          1141
Signing time:             Sun 28 Apr 2024 01:00:53 +0000
Manifest this update:     Sun 28 Apr 2024 01:00:53 +0000
Manifest next update:     Mon 29 Apr 2024 01:00:53 +0000
Files and hashes:         1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: VwVP5NgSvTBj5AwdTpxcP9WH+OdIJ/PXKf8n0b8G3yc=)
                          2: noobUfXLR01ci1yDFZxV4J538C0.roa (hash: d52s/4e1/xDmoZAgFRhZdim8aHl6OF/5NCpcyrxGJ6o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:38:1b:db:60:46:c5:d3:28:34:7a:c3:9f:c5:bb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
        Validity
            Not Before: Apr 28 01:00:53 2024 GMT
            Not After : Apr 29 01:00:53 2024 GMT
        Subject: CN=d5c5e132c3238fe9e2767d2d397b129575a5635f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:82:be:f5:51:ce:14:aa:4d:bd:de:10:46:
                    c9:0c:46:fc:89:c4:59:2c:6b:75:09:7e:97:79:98:
                    0a:bd:4b:65:29:46:e9:18:a8:c7:d8:8e:ef:88:b1:
                    8f:22:84:f7:be:d1:ae:56:d2:69:4a:ad:20:7a:9b:
                    c5:d9:da:77:9e:bd:86:06:74:5f:e8:b2:cb:b0:7e:
                    a8:6f:cb:90:ae:92:b6:21:09:f1:1d:2f:eb:7c:34:
                    f7:a0:4f:a5:47:f9:75:b8:91:a5:ca:29:69:27:46:
                    ed:0b:cd:57:ae:36:b7:f5:2b:fe:0d:d8:4f:31:39:
                    87:23:c1:4a:ab:58:d6:e2:7d:44:43:a8:19:cc:73:
                    eb:c5:d1:13:db:74:31:5e:5c:30:b1:c5:13:fc:ac:
                    b4:44:99:c5:61:bd:63:d5:ee:b6:81:78:e7:65:39:
                    14:08:83:41:bc:b9:fc:82:9e:fb:37:47:e1:4c:09:
                    c9:5d:84:ea:47:e4:f4:ab:b9:11:77:15:f7:88:a1:
                    f0:ee:b4:8f:f5:39:88:19:52:bb:80:08:cf:d1:42:
                    1b:cd:b2:04:21:e3:85:d0:6c:1b:cd:31:51:1b:c1:
                    33:17:ef:af:31:89:f4:c4:02:17:cf:f6:07:0c:23:
                    e9:8b:d6:d6:ff:3b:f9:95:fb:74:b9:92:33:55:5c:
                    a7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C5:E1:32:C3:23:8F:E9:E2:76:7D:2D:39:7B:12:95:75:A5:63:5F
            X509v3 Authority Key Identifier:
                keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d0:fe:a8:07:4e:0d:93:d6:d0:4e:5d:0b:12:3d:0c:aa:99:
         f0:66:51:05:a0:66:e8:03:f4:31:a0:f9:99:9f:cd:e6:67:76:
         77:79:fb:b4:b8:b1:cf:76:9d:ed:43:8b:d2:d1:2e:ef:8e:a2:
         66:26:4e:28:55:9c:3f:ed:8b:fc:a5:9f:98:de:a8:a5:ab:be:
         fc:3d:5a:9c:82:e6:b1:40:e5:b8:d9:d0:aa:e5:08:0a:7c:3b:
         8b:5f:e6:a2:56:6e:a8:ce:68:ad:68:03:fe:0d:91:b7:5c:1a:
         95:e2:d8:8b:09:05:3c:1d:84:a7:fc:9f:d5:00:92:31:ff:f0:
         91:40:93:b0:ad:cd:2c:eb:00:2f:03:a6:a4:d0:29:6a:0d:75:
         09:5f:1f:50:1e:8b:99:21:9b:65:ed:7f:54:41:ff:c1:54:4a:
         ae:b6:39:e2:69:8f:33:5d:f1:82:ad:7b:c2:c2:e5:6b:76:6d:
         03:a1:8d:74:b2:c9:7d:ca:43:c7:9f:56:87:bf:39:b4:7b:88:
         1e:54:65:cb:1f:9a:92:ba:64:0c:11:4e:3d:bd:75:ea:cf:3d:
         b7:6f:f1:1b:e6:bf:4f:30:0d:e7:d4:10:74:a2:57:3f:b2:c8:
         bd:65:3a:36:63:ed:01:50:ad:14:09:dc:6e:99:d7:5d:78:14:
         57:19:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:10:17 2024 by rpki-client on console-ams.rpki-client.org