Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
File:                     1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft (raw, json)
Hash identifier:          2AYe/Hl7+XFCfK1lbagWPmglpEzCnUSOhnFev7wv11k=
Subject key identifier:   E2:3D:5E:D2:64:8A:60:34:50:EE:52:99:79:7D:F6:B4:84:77:B8:08
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Certificate issuer:       /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial:       018F411F0AFB555ED5D56D2B676E893F6B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
Manifest number:          07FB
Signing time:             Sat 04 May 2024 01:01:44 +0000
Manifest this update:     Sat 04 May 2024 01:01:44 +0000
Manifest next update:     Sun 05 May 2024 01:01:44 +0000
Files and hashes:         1: 1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl (hash: eFkpTTkDfA/GNwqqI/AaHLaG6JeUdPS18DOiRuwl6K4=)
                          2: b2h4UjjoE7JyIvYZhmkPDpeAukQ.roa (hash: wOdaSpEi7aOLG9piN337XzpA1M5O0d3IwaMABcnh54g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:1f:0a:fb:55:5e:d5:d5:6d:2b:67:6e:89:3f:6b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
        Validity
            Not Before: May  4 01:01:44 2024 GMT
            Not After : May  5 01:01:44 2024 GMT
        Subject: CN=e23d5ed2648a603450ee5299797df6b48477b808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:47:ff:46:b1:12:7b:e6:b9:21:bb:17:77:
                    39:46:85:17:89:10:e3:2a:2d:ea:d6:a7:8f:f7:77:
                    b0:b0:9e:7d:c4:22:35:90:a2:61:2a:4a:73:da:98:
                    e0:5c:21:06:d5:86:3e:96:c7:02:61:6e:04:5f:73:
                    9d:1e:36:ca:87:c3:72:34:f8:38:35:1b:a1:19:1d:
                    1c:27:5a:a7:c7:4b:85:db:74:7c:55:3d:d4:98:d5:
                    a7:85:98:27:d1:93:bb:3f:f6:88:c7:a7:bb:59:3b:
                    0e:4d:3f:8e:d1:1d:d6:b0:82:e4:23:ee:67:32:ab:
                    66:8d:7f:82:03:1f:37:d2:f5:04:66:89:90:68:64:
                    38:8a:f8:88:36:9b:79:1c:1a:0f:89:09:de:8c:d7:
                    be:d0:d4:2e:54:1a:b5:b8:3b:c6:fe:9e:3e:05:34:
                    75:e3:a8:63:ea:a5:7e:7f:00:a8:f7:fa:cd:a8:42:
                    40:aa:bd:e6:bb:f6:0b:07:5c:0b:da:ad:99:b0:65:
                    f1:76:26:17:b3:28:3d:2c:43:dd:51:c6:0c:8c:a3:
                    85:f7:6e:51:ac:56:c0:85:05:b9:74:ae:79:e6:50:
                    4b:d9:c3:1a:27:12:24:86:8f:12:be:15:ab:f8:ce:
                    cb:33:4b:87:96:b8:71:b9:c9:80:12:ea:58:93:1b:
                    51:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3D:5E:D2:64:8A:60:34:50:EE:52:99:79:7D:F6:B4:84:77:B8:08
            X509v3 Authority Key Identifier:
                keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:14:24:44:d2:f2:7e:92:f9:49:0d:c5:d0:cd:78:71:54:
         99:e6:e5:0a:28:ea:18:c0:e5:f8:a9:c1:91:ee:83:11:b8:83:
         5d:25:81:2b:a9:90:26:d3:bc:b0:1b:1e:15:32:43:34:f9:02:
         31:9e:61:4d:ec:ab:6a:1b:dd:99:ba:48:4c:88:01:45:e4:07:
         a8:ea:56:49:32:bc:50:65:e6:1a:e1:33:22:21:64:f6:3d:c1:
         a9:33:2d:8f:7a:fa:ac:55:6d:e7:c0:d8:90:b4:b5:c0:5f:d9:
         9c:26:96:94:88:6c:df:7c:95:e3:c7:94:e2:5a:3c:61:00:79:
         5d:2a:b8:a0:4b:ff:ce:61:c9:24:c9:92:f9:84:0e:f6:0e:f1:
         17:ea:79:78:2a:8e:24:36:41:67:4e:b0:c3:1c:4d:e6:51:6d:
         2c:d8:d2:aa:40:2d:cd:06:88:f5:19:09:03:14:55:70:b2:f3:
         43:44:3d:e1:bc:65:4d:4a:71:e6:b2:c3:55:84:55:71:9b:0c:
         10:fb:c7:a3:7c:84:cb:52:4f:5a:ca:08:96:cf:fb:b7:28:2e:
         4b:aa:32:c3:27:eb:92:f5:76:4a:2a:8f:07:d5:44:d9:51:c3:
         b1:4c:33:56:7f:b6:09:b5:bc:f1:67:00:01:c4:b8:da:c3:62:
         d3:d6:b9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:15:22 2024 by rpki-client on console-fra.rpki-client.org