Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
File:                     D-qK4ZBhrMVImsJxkIKs6lovxdM.mft (raw, json)
Hash identifier:          Er5B/nHouZ/GEb83r766J57VUO9WYdps2b1V/zuZhXU=
Subject key identifier:   27:EC:E4:1F:93:6F:63:0D:08:31:31:BC:B3:4A:CB:9A:41:09:04:15
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Certificate issuer:       /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial:       018F532705DB0DD0C41DC7CB2B6F3D31BB90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
Manifest number:          0425
Signing time:             Tue 07 May 2024 13:03:37 +0000
Manifest this update:     Tue 07 May 2024 13:03:37 +0000
Manifest next update:     Wed 08 May 2024 13:03:37 +0000
Files and hashes:         1: D-qK4ZBhrMVImsJxkIKs6lovxdM.crl (hash: oU81yNfOmsQofycDpflcqXwe26JqVNoHNm7+Uitk0Q8=)
                          2: ft7xh59tqK7_5hcrgRjbzwOYESY.roa (hash: 0KzPAQHT+ZzN589dBPkpXLJuRqz1sSp02qjgmpLxh6U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 13:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:27:05:db:0d:d0:c4:1d:c7:cb:2b:6f:3d:31:bb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
        Validity
            Not Before: May  7 13:03:37 2024 GMT
            Not After : May  8 13:03:37 2024 GMT
        Subject: CN=27ece41f936f630d083131bcb34acb9a41090415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:11:f4:76:2d:b5:d4:80:5a:8c:2a:15:ce:25:
                    07:0a:ad:98:e3:63:70:56:90:d2:6e:cb:cb:da:aa:
                    75:7c:ec:b2:06:38:00:0f:07:47:ca:f9:ba:6a:19:
                    bb:8f:4c:8a:b7:13:c4:fc:6b:97:45:1c:81:e6:91:
                    b5:89:f8:a8:e3:74:f2:90:4a:1e:a9:0b:83:81:4f:
                    98:62:88:74:48:3f:19:c4:6d:20:ee:b4:65:7a:ca:
                    6b:81:f7:03:e7:d2:3c:07:33:3d:15:2e:5e:a0:0a:
                    47:93:19:5f:39:ff:f6:ba:d3:b2:a3:f5:fb:20:f8:
                    00:2d:fc:d8:5e:78:e5:12:68:19:5d:ef:fe:b0:81:
                    cb:7f:e7:71:73:f3:f1:2c:54:f7:79:ca:fc:dc:74:
                    15:8e:5f:d8:51:c1:0b:96:6c:38:5a:69:4e:7b:88:
                    0f:1b:46:43:04:86:cd:18:10:59:a1:9a:3f:0a:50:
                    3c:cf:19:25:da:c3:e3:0b:96:29:02:b8:da:c2:17:
                    32:ed:09:e8:0a:2b:9d:52:ad:3e:13:b7:81:cd:c9:
                    23:11:44:4d:75:24:b2:39:83:1d:0d:e5:9f:e3:3b:
                    7d:f5:7b:e6:02:0c:a0:cb:3f:8c:4b:d7:e6:78:ed:
                    d5:79:92:8c:7f:7f:80:2a:69:d4:77:01:fe:54:af:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:E4:1F:93:6F:63:0D:08:31:31:BC:B3:4A:CB:9A:41:09:04:15
            X509v3 Authority Key Identifier:
                keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:35:4d:9d:58:47:fe:07:2b:8e:df:8c:3e:06:2c:f4:e5:
         7e:c2:a3:66:4b:7b:60:85:86:b8:4f:c3:d0:73:14:90:0b:e6:
         9f:fc:f6:d8:47:b7:aa:8e:e4:1c:df:6b:43:23:e4:c3:6d:d7:
         1b:62:a9:42:bd:f7:46:12:95:93:cb:b2:35:52:a0:17:54:a5:
         e5:26:91:7c:99:25:40:13:cf:24:68:96:b0:c8:22:0b:1b:16:
         f4:29:af:4c:20:6a:a5:08:83:14:2d:9a:8e:1a:e1:af:21:7e:
         91:ab:5c:d8:77:4d:9f:d6:97:e3:b8:8e:e0:1a:4d:9a:35:26:
         ff:4a:8a:ba:53:4e:44:7a:4b:2f:6e:ba:53:be:4e:3f:ff:6a:
         d5:8d:85:fc:af:bf:b0:63:dc:ed:6e:91:01:9a:1d:23:65:26:
         25:3f:3a:02:01:7e:7d:1a:46:d6:cc:88:43:25:b0:ab:e7:4e:
         c5:8e:86:57:80:2f:9b:0c:6f:24:bf:73:05:de:66:ff:50:1c:
         c0:10:6f:d7:9c:39:b3:3d:96:92:5d:95:77:33:ee:db:ea:18:
         fc:21:eb:a9:de:9c:a0:ed:71:72:a3:c9:73:5e:f6:6f:27:63:
         b5:f3:26:4d:28:6e:6b:a1:ef:07:bf:43:a5:60:85:d7:e6:49:
         ac:b3:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:14:34 2024 by rpki-client on console-fra.rpki-client.org