Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File:                     B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier:          J7ZgK0jIxajs/jDusVLjo17uJaOUGY+rPPx4d+umKVM=
Subject key identifier:   F9:76:36:52:ED:89:6A:DE:8B:F8:89:83:76:19:24:91:EC:9B:3A:AC
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer:       /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial:       018F4F4A7F69DF5193342FDD6D58E089A39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number:          0C59
Signing time:             Mon 06 May 2024 19:03:53 +0000
Manifest this update:     Mon 06 May 2024 19:03:53 +0000
Manifest next update:     Tue 07 May 2024 19:03:53 +0000
Files and hashes:         1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: E9OFaKGzata4LN6kGXmHCniP/sFqyEis39ff2ZPREiM=)
                          2: jc1KLHw7atZ0xZSnrLqLzF_JwKg.roa (hash: o0lUYf09k14cg0xOSln/N0PQQ6wtB8ilMvwb5d52R/s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:4a:7f:69:df:51:93:34:2f:dd:6d:58:e0:89:a3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
        Validity
            Not Before: May  6 19:03:53 2024 GMT
            Not After : May  7 19:03:53 2024 GMT
        Subject: CN=f9763652ed896ade8bf8898376192491ec9b3aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:45:c3:87:47:96:9d:79:b9:a6:b6:58:43:
                    50:d6:4e:37:0f:67:1b:27:f8:98:41:01:8c:43:32:
                    8c:e5:c9:ef:5d:be:a4:d7:eb:c9:ca:a8:91:95:62:
                    40:71:fa:d0:37:79:d2:46:ec:3e:42:6a:30:5f:41:
                    dd:dc:25:3e:56:46:03:65:e6:d7:85:92:aa:96:81:
                    b3:a1:30:cc:e7:83:80:df:da:b7:85:eb:9c:09:53:
                    72:39:31:a8:4a:ca:11:4c:06:5a:3d:18:80:27:20:
                    6c:a3:49:64:d1:5e:ce:9f:af:e3:ce:e8:9a:18:b6:
                    be:6e:f5:24:5f:a7:34:b8:6d:57:ea:9d:ec:a2:24:
                    48:42:b1:34:e2:d5:34:84:15:2d:5c:7a:e0:c9:3f:
                    ac:e1:cc:9d:be:8e:ad:8c:4a:8b:43:64:00:a1:38:
                    e3:1d:b0:50:98:d3:ef:6f:71:3c:b4:3e:38:6f:11:
                    8f:c5:b6:36:13:c9:4e:f7:0c:b7:63:03:44:2c:04:
                    fd:36:8b:95:19:48:aa:4c:20:78:6d:d1:14:c4:9c:
                    9c:27:df:f9:fa:39:00:81:22:40:f2:28:b7:42:5b:
                    1a:08:5b:ec:d2:a5:86:8a:f7:f2:be:32:a8:7c:6b:
                    b0:b2:2f:61:d3:3e:1b:96:14:50:03:87:0b:09:30:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:76:36:52:ED:89:6A:DE:8B:F8:89:83:76:19:24:91:EC:9B:3A:AC
            X509v3 Authority Key Identifier:
                keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fb:74:4b:0b:d1:f6:74:d9:a1:e6:b0:f3:a1:0b:cd:e3:3e:
         a3:91:e6:7c:ec:dc:8b:9c:62:bd:2c:06:cb:fe:8e:7f:f2:3b:
         72:0d:1e:43:73:3a:94:f5:18:1f:e1:e1:2b:21:58:bb:f4:05:
         0b:7b:27:be:28:fb:c1:70:4c:5d:65:4b:9a:a6:b1:5e:31:33:
         11:93:18:2b:1d:a9:0b:ce:40:6b:9d:30:4c:3f:bb:03:16:1e:
         17:bc:75:20:98:f6:65:8a:9e:e2:39:b0:b3:59:f8:73:7a:66:
         08:4f:02:6e:5e:f4:7d:62:6b:e6:d5:ad:08:20:40:d2:c1:d5:
         24:aa:2d:bc:65:ff:4c:2e:fa:4c:11:ff:37:9d:9a:ce:7b:b1:
         2d:db:84:e9:86:4b:57:ab:e6:b4:98:70:8b:93:1e:93:3e:f0:
         30:af:c1:49:fe:38:c3:9f:c4:fc:22:a7:7a:4a:28:63:20:00:
         1e:0f:a9:a3:3a:b3:2e:1c:7d:8e:c3:fa:8a:17:3e:94:54:9c:
         cc:17:ef:d9:73:b3:ed:cd:7f:f7:b9:2e:fb:17:ac:b8:ba:ce:
         97:8e:85:7f:52:6f:0d:8d:a2:84:b5:ea:e3:9a:5b:51:6b:02:
         87:31:5b:5e:b2:6e:08:6a:db:08:05:82:fd:c7:83:a0:16:53:
         96:fc:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:32:08 2024 by rpki-client on console-fra.rpki-client.org