Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
File:                     S5o7nhAjIJXBjSZERAzlxYoTizU.mft (raw, json)
Hash identifier:          90xrWqeXp1ybapLxfMF0JUg1LNNUQQOhgRbYOLDyFt4=
Subject key identifier:   D8:DA:3B:8B:37:46:EC:80:2E:23:69:70:B8:2D:08:08:88:BC:03:F0
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Certificate issuer:       /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial:       018F874959EDF3F67587A9A0BA71D86AB235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
Manifest number:          090F
Signing time:             Fri 17 May 2024 16:01:22 +0000
Manifest this update:     Fri 17 May 2024 16:01:22 +0000
Manifest next update:     Sat 18 May 2024 16:01:22 +0000
Files and hashes:         1: S5o7nhAjIJXBjSZERAzlxYoTizU.crl (hash: U5XVkMIakp2IiJ7/RsaLLBssfUplou2TSPOYdQjfwlg=)
                          2: W3dKgJbzuIBZ82yY1LHsO5eUNq8.roa (hash: +nvMMA0NQ/6uahRlvXx0+I7fP0ImclGKhst1TucUxw4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:59:ed:f3:f6:75:87:a9:a0:ba:71:d8:6a:b2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
        Validity
            Not Before: May 17 16:01:22 2024 GMT
            Not After : May 18 16:01:22 2024 GMT
        Subject: CN=d8da3b8b3746ec802e236970b82d080888bc03f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:ec:be:2b:00:6e:b4:42:f1:c5:85:02:73:
                    22:b5:e4:38:9f:e2:ce:0a:8b:0c:d2:94:c0:cf:66:
                    d9:b8:5e:86:33:6d:8c:bc:19:3f:64:17:4a:87:3b:
                    9b:e5:68:29:16:ea:03:f4:23:15:e9:ba:e6:ca:c1:
                    1a:72:d3:e0:12:c2:2f:19:e1:f6:dc:9f:a8:68:25:
                    ba:b4:13:dd:2a:5b:8d:49:67:57:77:87:b1:13:e7:
                    8a:25:8f:89:d4:b7:44:5d:f0:db:45:eb:0b:54:da:
                    ae:96:47:2e:74:14:8f:6b:98:a2:d4:55:7e:13:2a:
                    6e:35:fb:60:8e:59:ae:4a:40:35:93:4f:79:88:66:
                    02:84:44:bc:52:63:92:f3:ad:3e:41:1c:5c:7f:e2:
                    da:51:ac:ce:b7:c6:ff:e4:f0:00:5b:b8:1d:1a:28:
                    8c:f2:a9:24:5f:0e:a6:c0:fa:93:53:fc:98:01:ef:
                    41:4e:02:f8:3c:83:ae:bf:45:52:d0:f1:f5:d6:8c:
                    b1:bb:de:2a:e2:5b:fc:ab:94:a0:98:a6:02:db:99:
                    ab:59:78:20:0d:f0:d9:3a:d4:cf:0c:92:4f:0a:97:
                    35:47:3e:e0:9c:55:46:bf:e7:90:03:b8:c6:21:63:
                    c3:db:c5:d0:ff:aa:1c:48:2d:45:9e:53:bf:6b:d1:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DA:3B:8B:37:46:EC:80:2E:23:69:70:B8:2D:08:08:88:BC:03:F0
            X509v3 Authority Key Identifier:
                keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:a6:bb:3f:bc:58:d2:89:3e:a1:b7:92:a4:2f:c9:e0:9a:
         5e:bf:da:04:5d:f2:0c:06:16:b9:81:01:49:0b:fe:07:bd:d5:
         f3:9f:97:07:50:5c:0b:ab:26:b7:cd:b2:85:6f:ad:4e:2d:1b:
         a4:b2:25:d7:fd:32:82:2e:f2:18:91:2d:09:7d:9b:78:ac:f3:
         38:71:94:cb:f3:34:5d:97:a4:99:7d:7d:56:b9:81:f8:80:09:
         1e:e7:52:64:be:30:1b:24:6e:14:bd:f7:7d:81:62:86:97:b3:
         78:c0:fd:e4:c4:fe:63:02:6a:94:f4:03:cd:5f:2a:42:7a:3a:
         a6:b5:09:a2:d6:ce:18:ba:fb:4d:19:c0:82:10:e9:73:68:cf:
         8f:cc:36:34:53:5c:c5:41:ec:c3:14:19:d1:0b:1f:cf:b4:77:
         7f:17:07:3e:99:af:5e:8d:eb:23:b2:03:10:1b:22:ba:24:c9:
         57:a1:5f:d2:ba:6c:2f:bd:00:bc:d5:4e:98:bf:98:3b:5f:75:
         26:90:eb:34:cc:d2:b9:9b:62:ec:e8:5d:19:4d:53:0a:e3:68:
         2c:72:a5:f1:52:05:8a:a4:3d:43:79:81:33:fc:cd:14:83:8f:
         ac:76:9c:be:9d:97:c6:20:4b:8f:c7:4b:41:30:73:c2:1e:45:
         53:f9:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:57:52 2024 by rpki-client on console-ams.rpki-client.org