Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File:                     0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier:          e53njGoss1ZmnJRjwMLo5VZaifcUv24W7TMqIGD3X18=
Subject key identifier:   79:06:78:66:51:C9:94:81:51:8F:20:88:D0:81:70:DE:13:A9:7E:A3
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer:       /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial:       018F3C9D57259DF679DB1E37D33E418D40AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number:          0FD1
Signing time:             Fri 03 May 2024 04:01:35 +0000
Manifest this update:     Fri 03 May 2024 04:01:35 +0000
Manifest next update:     Sat 04 May 2024 04:01:35 +0000
Files and hashes:         1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: jAWV1pX0HXjMkaF1oxaMK2iRBj1XUv4sgtzPqn20+PA=)
                          2: _Gj2g8PxU7DBazXANN4T2eg51Fc.roa (hash: JJ48M5LcDG6EbyNCNtiIwZkPHnD+2A4icV3ONOqWeFQ=)
                          3: _ezucTOG5aF50VLtPhIG3nZDkgM.roa (hash: 4VImfOVQ6WbhYaP06nesDSxESsBNf15lWLwMf6sShY8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9d:57:25:9d:f6:79:db:1e:37:d3:3e:41:8d:40:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
        Validity
            Not Before: May  3 04:01:35 2024 GMT
            Not After : May  4 04:01:35 2024 GMT
        Subject: CN=7906786651c99481518f2088d08170de13a97ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:d7:70:e1:7a:fd:17:f3:70:a2:3d:8f:e6:
                    2f:5a:0a:7e:8d:82:b6:67:09:a2:57:7a:e6:bc:8c:
                    a5:c7:1e:27:68:50:22:5f:6f:7d:eb:88:cc:2f:7e:
                    12:31:91:4b:16:8d:10:37:30:5e:ae:28:3e:42:6c:
                    32:d9:c2:bc:ff:5b:68:a7:91:6e:a6:b9:14:6b:a7:
                    ae:45:a0:0f:1a:58:56:c3:a0:fd:3d:42:99:b1:dc:
                    e3:ab:d6:5a:38:e5:40:a7:cb:55:ca:a0:88:50:51:
                    0c:f6:52:b2:aa:ea:1e:ad:fb:0e:60:c8:88:c6:40:
                    53:c5:29:dc:1b:44:c7:be:db:76:48:62:7b:e3:ea:
                    1e:df:68:f8:e8:68:6d:21:51:33:6e:71:14:e5:ce:
                    75:32:55:45:72:a1:b5:54:c1:d6:11:6c:ba:e0:23:
                    12:ac:bc:3d:b8:0d:a3:7e:a5:47:8f:59:80:db:0d:
                    1c:79:b0:40:2a:2b:e7:af:54:1b:1e:5d:4d:dd:1b:
                    f1:b3:d9:a1:ad:f9:06:e8:dd:b9:c7:6e:29:ef:c4:
                    72:26:b5:48:87:98:06:62:83:e1:24:e5:cb:a1:63:
                    f4:70:08:e8:28:a9:e6:b6:6b:16:98:84:4b:c8:19:
                    84:e3:ab:14:85:c9:97:a9:0f:2a:92:d2:74:cd:58:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:06:78:66:51:C9:94:81:51:8F:20:88:D0:81:70:DE:13:A9:7E:A3
            X509v3 Authority Key Identifier:
                keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cc:43:2b:37:b2:0c:e3:57:c9:e9:89:46:b7:f2:07:e7:70:
         55:4b:3e:17:39:ce:ae:98:9d:ab:e3:3e:3f:43:e8:4a:11:03:
         17:59:31:ce:7f:4e:2a:f4:d4:54:92:e6:99:e3:48:43:0c:89:
         37:f1:8c:63:d4:44:ea:2f:b3:16:cc:3e:bd:dc:02:7f:59:ba:
         08:06:be:0f:28:94:35:0a:04:41:ca:54:5b:56:a1:b2:07:a1:
         ee:2c:d3:32:ee:b1:e8:05:8a:60:c2:63:3c:81:a9:92:dc:2b:
         f2:93:43:5c:61:15:49:4d:cf:d0:d3:27:65:3b:36:09:3b:6f:
         b2:f7:e4:da:a4:d7:6e:68:1a:30:30:94:5c:8a:88:b3:4b:b1:
         7a:96:c5:18:70:c6:37:95:32:1d:77:37:65:80:5e:5b:5e:9c:
         3c:86:58:bb:f4:2e:41:7f:1e:0d:6f:b4:b9:e1:66:22:1a:fb:
         8f:12:77:59:f2:82:82:e5:e5:dd:aa:87:40:aa:1f:98:e8:01:
         f5:b8:0f:3e:e5:0c:6e:1c:02:15:cc:6f:f7:7e:e5:91:e9:e8:
         6b:d5:f4:c5:b6:ab:ea:2e:50:1b:e4:63:c7:4a:a9:46:86:70:
         25:e8:df:45:f5:f3:1f:4f:30:cd:51:ed:4c:19:53:c4:30:d0:
         28:2d:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:33:25 2024 by rpki-client on console-fra.rpki-client.org