Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
File:                     dvLzQc-Yuei0bt04mkgGTHuub5o.mft (raw, json)
Hash identifier:          q9KhjIHIve27OB25SR4uonfNPSL90QSHqeVoICSG/U4=
Subject key identifier:   20:F9:F0:4C:1B:10:73:05:5E:6A:A7:C8:1C:E1:E9:AF:F3:EF:2C:16
Authority key identifier: 76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
Certificate issuer:       /CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Certificate serial:       018F87ED990EB7D8794EC6A68E766C5F5496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
Manifest number:          095B
Signing time:             Fri 17 May 2024 19:00:46 +0000
Manifest this update:     Fri 17 May 2024 19:00:46 +0000
Manifest next update:     Sat 18 May 2024 19:00:46 +0000
Files and hashes:         1: dvLzQc-Yuei0bt04mkgGTHuub5o.crl (hash: LOU3l9ifXASY0HR3z+IrRlHGy4GOrGcz2KEbAPkdAjU=)
                          2: lhXZyPclsyMC7CcxEzqUUZ1vQWc.roa (hash: HACd1ZTtNfTUF8ANvWpz4vJco8lFkk1PagQjCyxfuno=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:99:0e:b7:d8:79:4e:c6:a6:8e:76:6c:5f:54:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
        Validity
            Not Before: May 17 19:00:46 2024 GMT
            Not After : May 18 19:00:46 2024 GMT
        Subject: CN=20f9f04c1b1073055e6aa7c81ce1e9aff3ef2c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:b2:59:31:be:a9:6f:3b:1d:44:51:90:e2:
                    f0:60:08:8f:76:42:d8:68:e2:ed:63:46:0a:d4:21:
                    c0:29:93:98:87:fa:d8:e3:26:ac:60:e7:35:64:b4:
                    81:4b:5e:e2:ce:2b:c0:df:c9:57:e5:77:36:e6:fe:
                    cc:da:52:09:eb:91:37:b2:bc:b7:64:9b:73:a3:07:
                    f0:24:f6:2f:66:bb:9d:4a:aa:c4:c2:4c:80:4f:3d:
                    2c:56:02:a4:93:7e:39:22:df:1c:af:18:15:75:94:
                    a9:65:fe:6e:bc:53:d1:35:9e:d8:fa:54:49:e5:89:
                    2c:35:b1:d6:a0:be:e8:86:6f:2c:57:65:32:91:81:
                    c9:1a:0c:a4:7a:c5:04:00:4d:4e:5b:f0:d1:aa:7e:
                    f4:ec:2e:a5:5d:ba:5e:4e:ca:61:a2:ea:81:37:ea:
                    44:0f:0e:9b:e2:a4:bc:ed:84:87:14:d9:17:12:1c:
                    8b:a6:d8:9e:44:4d:b6:ca:99:3e:77:e5:e9:19:1e:
                    f0:80:d9:06:aa:60:f8:5e:1f:95:83:2c:6b:3d:1b:
                    b8:10:6d:1a:7a:44:8a:54:14:6b:3f:d5:2e:6c:12:
                    96:9d:84:09:d6:07:29:16:a4:1a:d6:8a:ce:04:66:
                    8d:67:29:9f:9f:9b:e5:c8:39:37:6d:73:7e:42:1c:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:F0:4C:1B:10:73:05:5E:6A:A7:C8:1C:E1:E9:AF:F3:EF:2C:16
            X509v3 Authority Key Identifier:
                keyid:76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:fa:c2:f9:12:57:0b:a4:7b:32:94:f5:43:93:69:0f:52:56:
         43:5b:89:79:78:9a:0e:33:89:32:c6:f9:1a:e3:d4:a3:51:98:
         19:e3:53:dc:a7:bc:13:97:e9:45:2f:2d:e8:37:d0:6b:8b:a5:
         41:d0:85:e6:ca:97:41:1c:a5:d4:5c:0d:f4:92:fa:bc:7c:47:
         14:ee:d8:3d:ae:58:93:78:2d:b2:16:7c:a3:8d:ce:a4:56:f2:
         22:af:24:e9:3c:a1:63:ed:ac:e7:58:19:da:40:9d:8e:4f:95:
         7b:e4:71:44:6d:ba:fc:35:9e:c3:3f:2b:29:5e:6f:13:62:9f:
         fc:c8:27:a1:04:cc:55:25:b1:1b:68:34:ad:d5:1a:99:07:a5:
         1a:19:40:bd:70:c1:77:6d:7b:10:0b:d7:db:c3:e8:63:8a:ad:
         1d:f0:c8:84:3a:ee:06:dc:7c:d3:31:1b:21:e9:c2:4f:00:e8:
         14:31:40:1f:cd:03:88:b1:a3:18:b9:f6:ca:6f:ca:27:50:b4:
         b7:62:b8:32:7e:8b:8c:39:87:18:93:0a:7d:e7:fd:cf:57:fb:
         fc:d5:58:87:c4:13:a6:f5:ed:bc:91:ca:17:4c:89:59:41:48:
         4e:e3:7b:aa:a8:5b:59:c7:b7:bb:25:bb:c9:5e:2d:1e:d7:be:
         5c:48:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:35 2024 by rpki-client on console-ams.rpki-client.org