Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
File:                     9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json)
Hash identifier:          TGin/Mk3bKhuPGgeDDucNmhaLfkeFjoBG+N+KSaOiVQ=
Subject key identifier:   01:5E:A3:26:71:F5:84:AB:18:AE:71:95:00:12:6F:8A:F0:DC:69:CF
Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6
Certificate issuer:       /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
Certificate serial:       018F88924CFB627B0938C9E81A1B6BEA2BE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
Manifest number:          0363
Signing time:             Fri 17 May 2024 22:00:40 +0000
Manifest this update:     Fri 17 May 2024 22:00:40 +0000
Manifest next update:     Sat 18 May 2024 22:00:40 +0000
Files and hashes:         1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: YXWI82AUuwnaiiCinxcOxBkWVWHrUS0LmM0tVra2L58=)
                          2: EzCVx3LmMfzPw-ZiwqAE3dYQV0A.roa (hash: x/0UqH28cr1MjXuOhsebm0ed4ZTkL8O4wN91wiX5kcU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:4c:fb:62:7b:09:38:c9:e8:1a:1b:6b:ea:2b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6
        Validity
            Not Before: May 17 22:00:40 2024 GMT
            Not After : May 18 22:00:40 2024 GMT
        Subject: CN=015ea32671f584ab18ae719500126f8af0dc69cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:01:66:b6:6a:cb:11:1f:93:dd:64:b1:20:
                    00:80:13:eb:0f:ff:4f:a6:90:9d:0a:7b:34:ae:d6:
                    53:db:7d:b6:d7:9d:70:07:cb:42:59:59:bc:a7:85:
                    5a:f1:2f:db:98:2c:93:ff:a4:b8:01:93:c0:87:19:
                    e9:d5:23:8f:84:8f:3f:cb:19:fb:c4:00:19:29:a6:
                    47:65:23:aa:fb:f3:6e:4f:ad:50:ee:e5:01:72:42:
                    8b:e0:22:d8:2c:1c:6d:67:c0:51:7a:78:27:1c:5b:
                    cd:1c:e0:b1:44:0b:bd:7c:e2:5d:ea:4c:cc:d5:42:
                    8c:01:8e:f4:99:f3:88:7c:d1:74:df:5b:9e:41:55:
                    30:98:38:ff:2a:52:53:b8:6b:42:0c:81:b7:d6:5e:
                    39:d5:d5:0f:cf:6d:f1:e2:22:f7:51:73:f2:df:59:
                    c6:8c:03:2a:79:3e:96:79:d9:1c:ce:b1:43:ba:83:
                    c6:ff:ad:81:19:a5:a1:a9:7a:7a:41:f3:bf:4a:38:
                    1b:dc:68:df:50:1a:97:46:88:83:7e:f2:b1:1a:6b:
                    cd:ad:1d:e0:09:bb:3f:83:3f:ff:e3:ab:c7:e4:9d:
                    71:a6:e7:86:bf:44:0f:73:5d:b3:de:7d:af:4f:06:
                    f9:0e:74:04:4e:43:26:53:dd:60:f1:a3:f8:77:52:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5E:A3:26:71:F5:84:AB:18:AE:71:95:00:12:6F:8A:F0:DC:69:CF
            X509v3 Authority Key Identifier:
                keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ec:e3:a4:3e:1e:cf:95:18:e1:65:ad:61:30:c1:17:18:04:
         f1:34:d4:c3:c0:13:6f:82:d4:bc:9c:d3:17:8c:dd:f5:8d:f5:
         84:ba:66:2d:35:ad:f4:a2:c8:da:dc:53:9f:51:59:ed:33:b6:
         a5:d4:54:23:be:f9:93:3a:0d:41:6a:f1:89:24:b9:e3:ce:dd:
         80:02:3a:37:2e:75:fc:1f:9d:b3:85:f9:bd:71:06:0f:39:78:
         18:18:46:a6:16:b3:b6:3c:ae:92:b9:e2:20:e0:12:5e:3c:fa:
         c0:b1:37:9c:22:b4:13:5c:f6:d7:f5:8a:ba:0a:50:05:12:f7:
         81:a9:6c:f0:85:7b:ed:01:fa:79:57:d7:90:7c:bc:47:4d:32:
         af:54:82:db:c8:f4:d2:71:e4:c7:73:1f:5d:36:41:ec:c3:1d:
         d0:21:e8:61:5b:64:36:0c:c8:81:e8:a6:7b:dd:44:ad:af:5a:
         2b:da:15:39:a5:ef:d9:41:09:16:19:ad:6c:9f:6d:27:4c:35:
         9f:8b:73:d9:00:a1:a4:b3:38:96:04:e8:ac:56:d4:45:85:cf:
         a5:a8:af:06:3a:c4:9c:d1:50:62:68:8a:50:6d:aa:f9:29:ee:
         24:7a:27:21:66:e4:c3:ca:55:33:ee:90:8f:c7:5c:ac:e6:7a:
         7a:3d:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:44:12 2024 by rpki-client on console-ams.rpki-client.org