Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File:                     C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier:          gzsWj1ADOEujqWZsFFNWNgqlzwHQMZyqA4vVfdNsJZI=
Subject key identifier:   95:1D:B6:36:85:BD:6B:46:01:2E:46:51:04:20:81:2F:B8:17:F6:41
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer:       /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial:       018F3FD7BF3801C8C7D3B96B013340DDE82C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number:          08D9
Signing time:             Fri 03 May 2024 19:04:14 +0000
Manifest this update:     Fri 03 May 2024 19:04:14 +0000
Manifest next update:     Sat 04 May 2024 19:04:14 +0000
Files and hashes:         1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: pFMhQW6NcvUhXhA0wj6AuE6g5HGtHnsuwn1y2Pkoe3I=)
                          2: lodfWc2Raw1LCzlM3UVedKqMcC4.roa (hash: aXanT3IWF15jjBH1dFOb+C+HgeLRyamo1gSlJhCAD20=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3f:d7:bf:38:01:c8:c7:d3:b9:6b:01:33:40:dd:e8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
        Validity
            Not Before: May  3 19:04:14 2024 GMT
            Not After : May  4 19:04:14 2024 GMT
        Subject: CN=951db63685bd6b46012e46510420812fb817f641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:86:a3:d1:7d:50:ad:88:70:d8:cf:69:a4:
                    28:55:e2:90:c2:7a:8b:ed:3b:92:13:c3:74:a1:cf:
                    6f:49:03:68:7a:cc:5b:b6:59:40:11:c2:5a:d8:e0:
                    47:62:d6:a3:cb:ea:a3:3b:31:95:fa:e9:d1:78:68:
                    57:1f:6c:b1:d8:31:c0:6d:f5:44:d3:a5:34:c4:34:
                    fa:24:19:63:94:95:e4:e9:ea:51:71:78:8a:7d:89:
                    a6:6e:e7:f4:49:15:c5:18:04:93:2a:2b:2f:bc:1d:
                    27:83:e7:6d:b1:e3:94:75:75:3c:e4:c8:cb:c9:9a:
                    ca:26:e9:5f:93:68:00:a0:67:6e:76:32:74:88:db:
                    77:9a:ed:ff:0e:cb:43:98:7a:3d:d0:4a:af:e2:9a:
                    f0:c3:ab:0a:05:8d:1d:12:02:d7:93:8b:8b:8e:7e:
                    0e:10:8e:fe:8b:11:23:97:64:f0:22:94:3f:fb:1a:
                    ea:00:8e:b8:67:6e:bc:70:68:58:ab:fa:c7:d7:f4:
                    f3:e4:bb:db:0a:58:83:15:5b:01:51:d1:f5:7f:c1:
                    94:1d:07:24:b4:da:22:4f:f1:53:1a:a4:8f:8d:13:
                    2c:fb:0e:a2:36:92:16:5d:e4:cd:dc:31:a9:99:21:
                    82:32:28:4d:a6:fa:17:54:69:98:e4:63:26:61:38:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1D:B6:36:85:BD:6B:46:01:2E:46:51:04:20:81:2F:B8:17:F6:41
            X509v3 Authority Key Identifier:
                keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:82:81:8a:bf:f7:a9:5b:ee:1f:4e:6e:3b:c5:e7:4e:3a:17:
         81:7e:60:10:58:9b:c9:91:04:15:53:af:08:ae:76:20:bb:13:
         ce:52:85:50:bd:ff:54:4b:01:99:4c:1d:63:7d:46:65:c5:06:
         31:7b:82:cd:4d:d6:50:33:ff:ce:3a:87:08:19:23:0c:6d:92:
         00:b9:e5:bc:72:5d:07:75:e4:09:0b:c3:1d:8b:9b:44:91:c6:
         06:33:24:29:06:21:1b:07:91:c2:b7:fd:7b:c1:0b:6a:3c:fb:
         59:37:16:1e:51:33:80:9a:5f:c7:47:a4:df:35:78:15:2f:c8:
         c3:1c:22:e0:b4:c6:da:f2:7d:de:ba:6a:4f:c3:32:b6:7d:9a:
         c9:c4:eb:73:d6:64:5c:20:a1:af:4f:e5:7a:85:f9:dd:03:57:
         4a:96:27:bb:fa:da:2b:fc:0b:ec:39:4b:50:3b:93:4c:e3:46:
         e6:20:4e:a8:31:a3:91:b1:be:28:fd:c2:00:01:68:96:fb:29:
         a9:88:66:aa:29:5e:8f:c7:fd:05:fa:df:8a:cc:07:7f:af:5d:
         aa:19:22:e5:19:81:f0:fd:e2:77:8d:ee:0b:1e:e7:cb:53:78:
         1d:dd:81:82:40:f7:b7:5e:74:7e:15:2f:c9:19:d9:54:c0:ca:
         09:16:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:21:53 2024 by rpki-client on console-ams.rpki-client.org