Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File:                     9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier:          zFKZGU6DYysiIh0JGdMCMqxb7kSMlpRUzE90JNtUVA8=
Subject key identifier:   E5:C7:03:9F:B5:78:9D:CE:9E:8E:75:10:38:85:2C:EF:79:72:60:EA
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer:       /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial:       018F1F6DF9ED74CA10040782BA3C32C41F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number:          0EE9
Signing time:             Sat 27 Apr 2024 12:00:52 +0000
Manifest this update:     Sat 27 Apr 2024 12:00:52 +0000
Manifest next update:     Sun 28 Apr 2024 12:00:52 +0000
Files and hashes:         1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: rmMYSPKcPsM5zCtjWoc3SS9G+9LEP4F9YcT1OZ5p8D4=)
                          2: JpjigjzfTCaOt-Ta2hRORn4fzDE.roa (hash: op67asKcX2OoovqqmgNPSNpIkpcGM0ROwMMD51hOdDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:6d:f9:ed:74:ca:10:04:07:82:ba:3c:32:c4:1f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
        Validity
            Not Before: Apr 27 12:00:52 2024 GMT
            Not After : Apr 28 12:00:52 2024 GMT
        Subject: CN=e5c7039fb5789dce9e8e751038852cef797260ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:92:3b:7e:37:cf:8d:e9:f7:27:40:19:4c:
                    84:3b:84:f9:b4:33:f9:c0:14:9b:bb:ba:08:18:07:
                    5b:65:20:1c:75:7a:81:19:3e:b6:ab:12:f4:42:a5:
                    6a:69:69:e3:fc:7f:fe:7b:ee:6a:77:00:3f:f8:9c:
                    fb:63:ba:b3:99:24:83:61:5e:88:75:30:8d:0f:2f:
                    4a:5d:6c:96:42:da:df:05:d9:16:56:2a:9b:39:6f:
                    d6:e7:88:d1:fa:8d:1e:1c:88:29:89:f1:8d:d6:62:
                    17:e9:1f:ee:fc:8d:61:a5:94:a6:a9:b1:57:b6:23:
                    68:22:f1:d1:f6:46:1c:e6:b1:1d:d9:c3:51:59:3f:
                    c3:66:86:45:ab:0f:5b:16:a8:04:36:a9:96:46:5d:
                    3b:b5:b0:dc:22:df:27:bc:b9:1d:d9:cd:4f:bb:ef:
                    1e:0c:a5:7c:bc:35:10:7a:8d:a5:59:17:ce:e7:eb:
                    3c:47:3a:df:86:0b:48:6f:22:95:b3:45:d8:99:ab:
                    48:c2:82:43:62:9f:09:33:3f:ba:1c:32:f1:80:be:
                    db:b6:0d:b7:29:9f:5d:7e:51:e4:65:78:c8:a4:4a:
                    e4:77:e9:a8:87:0f:b9:9e:c9:d0:22:58:67:91:4b:
                    42:80:14:c6:98:6a:d0:13:01:bf:1a:6d:b4:83:c4:
                    23:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:03:9F:B5:78:9D:CE:9E:8E:75:10:38:85:2C:EF:79:72:60:EA
            X509v3 Authority Key Identifier:
                keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:15:2c:54:ad:2d:60:46:1a:df:5d:9c:ac:da:7a:41:fa:06:
         2c:83:72:08:f0:88:0d:b3:90:8f:a5:6b:c1:f3:ab:05:cb:ea:
         49:88:e7:6a:51:6d:82:eb:d5:ff:e0:0f:72:d4:c1:b0:c7:05:
         54:7e:9b:8c:0c:48:16:0b:19:3c:85:0a:d4:4d:0e:7a:8f:66:
         31:20:65:5c:59:25:d6:b8:53:ad:7d:84:43:9c:fd:38:de:13:
         f4:09:4e:52:b5:36:4b:09:bc:92:e8:e0:80:7f:cb:ef:b1:96:
         5d:99:90:90:c9:6e:b3:a0:79:1b:bf:de:bc:0a:40:4b:0b:29:
         b7:e8:dd:05:f8:e0:fb:89:d4:7f:14:1a:23:95:eb:66:d2:05:
         20:78:a4:8e:58:d6:65:b6:be:5a:20:9f:56:fb:ae:bf:c4:8b:
         27:8a:de:89:8f:a6:af:56:5a:e4:cf:58:a4:1c:90:b4:4b:f6:
         a1:e4:f3:75:e9:19:ee:98:46:01:a4:29:b7:ce:7f:87:6e:fc:
         e2:ce:88:6d:fd:af:c7:09:9f:d9:2c:7b:fd:80:ea:62:17:56:
         f1:87:4c:cf:61:fa:63:2d:2f:d2:1a:01:11:a6:27:fd:66:71:
         d5:8b:8f:73:21:b8:2c:ac:8c:56:7b:97:00:e9:a9:5b:f4:9c:
         7a:cc:77:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:59:50 2024 by rpki-client on console-ams.rpki-client.org