Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
File:                     9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json)
Hash identifier:          Boj0+oA3BRH0HCNiEfuiuclu83uMMhL2VkT5Ab9pE5A=
Subject key identifier:   C8:5E:01:FD:2C:D8:3A:BA:9D:52:F1:8F:34:DE:9C:5D:55:AE:EE:0A
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Certificate issuer:       /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial:       018FB2D8BE57A26C5B019A40726EE34094B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
Manifest number:          0AF2
Signing time:             Sun 26 May 2024 03:01:39 +0000
Manifest this update:     Sun 26 May 2024 03:01:39 +0000
Manifest next update:     Mon 27 May 2024 03:01:39 +0000
Files and hashes:         1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: EeSZ/8siw/AoYzQaJmmW24RvhHkAdC4l9Kpg1pZTQWY=)
                          2: 9_O786S2PtGrQPSaIm3TgUUwkXw.roa (hash: 3U3T5mmVk2fNOGljJwOdSjep3I7GINbePH8dB8og6kc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:d8:be:57:a2:6c:5b:01:9a:40:72:6e:e3:40:94:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
        Validity
            Not Before: May 26 03:01:39 2024 GMT
            Not After : May 27 03:01:39 2024 GMT
        Subject: CN=c85e01fd2cd83aba9d52f18f34de9c5d55aeee0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:66:78:41:1b:4a:8e:d6:5f:ee:c1:e3:5a:
                    ec:f1:61:ca:8f:b1:8d:f3:26:1f:04:b8:91:f1:8b:
                    d8:eb:65:d3:db:45:ac:37:3b:ff:b5:92:82:e1:53:
                    f3:f5:cb:20:e6:93:d7:d8:35:ba:a6:16:99:31:3d:
                    2d:6f:82:72:53:88:4d:af:ec:c7:c3:75:67:65:b2:
                    46:70:a3:59:0c:d5:dd:90:c8:19:38:01:aa:3f:38:
                    d1:01:8f:85:0d:5a:ca:40:08:af:69:08:01:f7:9e:
                    ef:45:5d:b8:3f:cb:a8:d4:1d:de:89:e0:24:8c:20:
                    05:31:ab:36:35:fc:ca:80:eb:81:16:5c:9d:9a:f2:
                    75:f0:44:c2:70:62:88:23:98:2d:3b:ea:5c:3a:1d:
                    89:61:1a:4e:73:a3:f0:db:8b:08:52:f7:b6:93:25:
                    15:de:d6:56:78:dc:b9:30:33:55:6e:c8:71:5f:57:
                    f5:4a:29:34:a5:02:f2:4b:b6:c2:db:73:80:89:83:
                    65:8c:3a:e0:6e:c7:be:62:9e:0d:f3:04:d3:cd:dc:
                    82:87:47:a5:26:33:1e:38:b7:05:aa:1c:9b:34:19:
                    df:5c:58:0d:95:82:b7:86:82:b0:8e:53:09:73:df:
                    db:43:2a:8e:ef:f9:37:57:f9:b4:d3:41:1f:2f:f6:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5E:01:FD:2C:D8:3A:BA:9D:52:F1:8F:34:DE:9C:5D:55:AE:EE:0A
            X509v3 Authority Key Identifier:
                keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:2b:84:6d:4c:70:b5:97:88:af:af:02:e1:24:cd:7b:9a:
         d3:91:39:a4:c2:8b:ea:35:ae:f1:97:03:2b:1f:9a:af:bd:5d:
         af:57:78:ba:cb:86:1f:f8:53:27:cf:a7:09:f6:57:18:5f:2a:
         6d:0c:85:39:97:65:b7:df:83:e7:0a:a5:de:30:ec:3c:a8:2c:
         64:cb:20:42:6f:10:91:e0:79:a9:6c:e5:42:96:71:42:f2:e7:
         60:fa:7c:7f:92:9e:73:dd:40:78:2d:fc:dd:77:08:27:54:ea:
         7f:a7:b8:f5:47:8b:c3:b3:d6:a4:5c:3e:85:28:75:39:42:8d:
         a4:7d:84:30:0e:68:4c:e9:0f:ad:94:b9:c6:66:8e:6b:04:0e:
         e5:e5:38:b8:c1:54:4a:b3:94:1b:79:d3:2f:65:56:ac:29:e6:
         45:08:3c:54:f2:a2:82:06:d7:7d:92:5f:1b:23:cd:42:56:7a:
         d0:41:ff:90:04:aa:08:df:65:61:f1:d7:d6:b8:54:5b:f2:26:
         da:2f:10:80:86:97:1d:2d:a7:0a:b3:e0:36:7a:28:75:32:f6:
         51:e2:42:19:7b:d7:b0:a0:aa:63:59:66:ff:0a:20:d6:fc:fb:
         0e:cb:01:2c:ae:2c:4d:07:f0:03:a7:d3:7d:9b:fb:7b:7c:9b:
         0b:86:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:39:07 2024 by rpki-client on console-ams.rpki-client.org