Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File:                     95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier:          5ux54Iz9ojvFMum3GtXc8UshemT/IxlIxzYPFlqEG+E=
Subject key identifier:   6B:BA:6E:BF:05:08:2C:6D:C7:0D:2B:E4:02:19:6A:72:96:98:B7:1B
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer:       /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial:       018F460DEBEF445140E00509643AE1545BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number:          07D9
Signing time:             Sun 05 May 2024 00:01:08 +0000
Manifest this update:     Sun 05 May 2024 00:01:08 +0000
Manifest next update:     Mon 06 May 2024 00:01:08 +0000
Files and hashes:         1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: weUTujktCMetLAEf6kw9S5e5cIRhV8TOHtMmX5jQv1g=)
                          2: gG-lPQ622H10sfCL0qaPUkC3QYk.roa (hash: 5W8Zqrn9h3WK+YXGuS6JIHv25u2N6ndUsblb647vuA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:0d:eb:ef:44:51:40:e0:05:09:64:3a:e1:54:5b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
        Validity
            Not Before: May  5 00:01:08 2024 GMT
            Not After : May  6 00:01:08 2024 GMT
        Subject: CN=6bba6ebf05082c6dc70d2be402196a729698b71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:2e:10:64:4f:ba:38:be:fe:f1:d1:88:1f:
                    69:5d:fb:9c:89:d9:b7:2d:40:3e:f1:fd:4a:0c:96:
                    c2:03:f9:23:2b:17:93:c5:cf:39:a0:d5:c0:18:d1:
                    c2:9e:2f:65:19:bf:6c:cd:93:b4:59:ed:5a:a8:69:
                    a1:6d:98:81:a1:dc:57:49:40:2c:a2:53:99:ad:75:
                    aa:5c:ff:6b:69:d0:a8:08:4d:d4:b6:2b:5b:34:aa:
                    87:a1:9a:ff:a6:52:4f:98:a3:a2:fa:3f:07:b8:c7:
                    ba:ef:7f:87:77:fc:36:63:da:a9:e0:80:a2:80:26:
                    04:98:f4:8a:2c:18:d8:03:24:da:29:5a:ce:0d:0c:
                    13:e3:9b:9a:e8:a0:b9:0f:7a:2c:c1:68:b2:ea:c2:
                    2e:dd:ce:0d:ef:5d:d5:e5:2a:5b:60:70:90:81:e4:
                    83:d7:9d:73:d1:2d:7a:94:12:ee:56:54:4d:5c:8a:
                    e8:71:26:d3:b6:6d:01:96:66:80:9f:d5:cf:0b:c8:
                    85:6f:a0:9d:88:83:3e:e5:51:f3:58:1b:00:82:37:
                    7f:cd:b0:2c:a0:45:cf:79:13:bc:c3:31:a1:89:44:
                    27:15:b8:2d:98:98:bd:0a:9f:88:ea:eb:00:f5:83:
                    5d:73:a3:e1:bf:65:4d:3f:fa:b3:9f:44:a8:d1:ed:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BA:6E:BF:05:08:2C:6D:C7:0D:2B:E4:02:19:6A:72:96:98:B7:1B
            X509v3 Authority Key Identifier:
                keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:aa:4c:69:b7:38:17:d8:3f:97:7a:02:bc:04:2a:49:9f:
         b1:b9:0c:47:6c:68:a0:43:a7:c3:ac:dd:54:c2:4e:38:c5:d3:
         ec:8f:f1:ee:d4:e7:aa:02:b4:5d:2b:2b:2b:5e:6f:50:64:d6:
         05:57:a7:2c:f0:f7:0c:eb:7e:2b:55:07:a8:ed:f8:5c:c6:ba:
         59:08:84:d6:0a:a5:f9:cd:09:16:05:c9:49:c7:e3:64:fa:8c:
         f6:8b:d0:a6:23:46:4c:01:bf:45:29:29:4b:95:d5:7b:8d:70:
         83:e8:cf:19:e3:4d:4e:63:7c:60:23:e9:11:f8:cc:6f:8c:f4:
         5a:19:31:23:c4:f1:68:f6:7c:a9:5c:9b:62:10:d7:50:7e:e8:
         2e:ce:16:a3:5d:d3:20:e9:b4:14:98:a5:8e:ed:f7:d1:b1:e1:
         32:0f:34:97:7a:28:2b:85:92:71:9a:09:37:39:a8:be:30:dd:
         8c:5a:bc:c0:6e:13:11:f9:5a:fe:86:47:fc:ce:fe:5f:dd:71:
         92:a7:54:88:7d:00:92:42:b6:fa:99:2a:fe:d7:86:c4:06:11:
         0f:55:c6:1b:80:78:e0:13:32:f7:b0:c1:8b:10:ab:e4:42:54:
         89:1a:bf:dd:44:4d:05:d3:ad:54:48:68:79:de:60:a1:dd:c6:
         84:19:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:19:43 2024 by rpki-client on console-fra.rpki-client.org