Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File:                     F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier:          YF+oLolm8fdjx1wPzTAMFUKOLbAiJpz2w+jmoRuBRao=
Subject key identifier:   28:6B:CA:C3:42:34:09:E3:6B:17:34:CE:59:BE:E7:E5:1C:EF:F5:68
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer:       /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial:       018F4D5AB9321BA6CE16532E0EE1FEE6B6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number:          09B7
Signing time:             Mon 06 May 2024 10:02:22 +0000
Manifest this update:     Mon 06 May 2024 10:02:22 +0000
Manifest next update:     Tue 07 May 2024 10:02:22 +0000
Files and hashes:         1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: c/+Rrk75588Ty55Og2qm7Q49UFJ8gZS52nP7aK7SpDw=)
                          2: i6GLHagrcdIxWmPemHfDHtNizqg.roa (hash: FmNuK4urS1Ccc8mNJv5iFoY6gb4+IjlRaBVpdBCZf7w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:b9:32:1b:a6:ce:16:53:2e:0e:e1:fe:e6:b6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
        Validity
            Not Before: May  6 10:02:22 2024 GMT
            Not After : May  7 10:02:22 2024 GMT
        Subject: CN=286bcac3423409e36b1734ce59bee7e51ceff568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:50:31:c9:ec:a1:1f:d4:d9:95:81:b0:25:
                    91:99:f7:65:d3:9f:98:08:87:84:47:cd:15:0b:ce:
                    91:ef:f4:e5:44:d7:ae:f4:f3:77:a7:e2:38:81:b7:
                    f7:f8:c0:c7:ae:46:70:e6:26:46:95:94:3a:a5:47:
                    3e:18:4f:b7:7e:87:1b:60:d9:cb:09:46:a4:0e:ef:
                    00:8d:06:b1:86:aa:69:75:77:03:76:2d:06:3f:d5:
                    5e:3b:b1:ac:fd:50:74:3d:53:2d:00:f6:02:a1:0f:
                    33:b7:44:7b:81:cc:cf:44:7a:b1:38:07:8c:ae:7c:
                    95:45:ca:9e:a5:1b:b4:a4:a5:93:c5:cc:75:8a:6b:
                    ea:fb:00:a4:38:0b:5e:42:f4:27:65:38:d2:ba:41:
                    63:9c:85:39:ea:b0:a1:02:67:fc:4a:dd:7b:b5:b3:
                    c5:40:43:53:9d:6d:0a:6f:30:a3:9b:34:d9:5f:9b:
                    1b:d9:c4:fa:24:5d:54:e1:4e:f3:4b:06:d4:1d:66:
                    24:f2:12:5e:03:ca:b7:2c:a1:92:17:3e:7a:1f:5e:
                    38:64:a6:3c:53:74:b4:2b:ce:3c:6a:48:e6:d9:d9:
                    df:3f:54:83:e0:d8:77:0f:e4:35:5d:b3:5b:ce:ee:
                    5f:6a:95:cf:c7:b8:88:ea:f3:06:36:13:16:87:46:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6B:CA:C3:42:34:09:E3:6B:17:34:CE:59:BE:E7:E5:1C:EF:F5:68
            X509v3 Authority Key Identifier:
                keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1f:c0:27:3b:51:a6:f6:fb:c6:f0:d2:b6:f3:79:2d:b7:90:
         98:81:cd:7d:1b:11:9c:07:e6:5c:7c:58:59:b3:3e:06:65:12:
         a2:74:42:62:64:95:51:7c:55:a4:d7:91:6f:ae:68:f4:3d:df:
         30:64:90:ac:dc:b7:0c:7f:c2:86:60:bb:f6:53:80:e4:7a:e7:
         82:d4:28:dd:10:a0:65:43:1f:0a:26:76:58:23:29:50:98:8d:
         c2:4b:b0:3e:bf:bc:04:be:57:01:08:ba:ca:dc:e6:3c:0f:e6:
         81:f8:26:2e:57:ba:ce:d5:8f:f1:e9:09:89:86:e5:29:e5:cc:
         9f:07:ab:08:d2:ed:7d:66:06:c3:e2:2d:2a:49:da:69:c3:94:
         de:23:9a:38:eb:bd:2c:90:e7:8e:8d:be:24:ef:5c:eb:e0:86:
         2b:5a:e7:4b:cb:96:1b:00:27:cf:6a:11:be:94:b2:f7:02:fd:
         b9:10:85:d1:28:23:1d:12:ae:bc:73:cc:03:f7:51:a7:c0:a5:
         d9:fe:ce:d1:ef:42:d7:a7:35:a5:3e:66:6e:7d:da:dd:65:35:
         4a:4d:e6:7f:04:23:7f:78:e2:c3:1d:db:79:6f:ae:4a:de:87:
         6e:ea:20:b5:1b:01:38:6a:b9:26:55:bf:64:ba:d8:6b:61:6e:
         31:28:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:59:37 2024 by rpki-client on console-ams.rpki-client.org