Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
File:                     9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft (raw, json)
Hash identifier:          3hb7SJ01d8WTC8M+2LoS2l1NERhtdZ7Na4GTgzrPqm8=
Subject key identifier:   32:B9:CF:56:44:C0:56:EF:B7:53:05:A9:B5:D8:44:69:06:CC:EC:E0
Authority key identifier: F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
Certificate issuer:       /CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Certificate serial:       018F355196EB6CE016B1233044638F7D8FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
Manifest number:          060E
Signing time:             Wed 01 May 2024 18:01:30 +0000
Manifest this update:     Wed 01 May 2024 18:01:30 +0000
Manifest next update:     Thu 02 May 2024 18:01:30 +0000
Files and hashes:         1: 9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl (hash: zMnI4HM76bXc4HL/SjVg17YFgRZUhqzTB5l4I9Wic3A=)
                          2: UkS8SUInkzgsqSzfJ181bF1GZME.roa (hash: 6vfQ7YliVT6CTDwHmHx/uDZzV3zdAmKUnuH1ENcvF+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:35:51:96:eb:6c:e0:16:b1:23:30:44:63:8f:7d:8f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
        Validity
            Not Before: May  1 18:01:30 2024 GMT
            Not After : May  2 18:01:30 2024 GMT
        Subject: CN=32b9cf5644c056efb75305a9b5d8446906ccece0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:d6:6f:1a:22:42:00:69:b4:51:e0:1f:44:
                    c9:9c:ab:c2:a4:07:59:e0:d6:c5:ea:62:87:81:4d:
                    06:af:05:62:9a:db:05:ca:66:16:df:24:8d:ac:6b:
                    40:ee:9b:cf:40:38:d2:f7:c0:58:76:44:93:0a:c1:
                    7b:8f:f1:fa:49:3d:35:e5:11:3e:51:fe:de:87:9f:
                    3e:14:ad:e7:26:ca:c0:5e:cd:3e:54:41:1b:2a:2d:
                    bd:e8:9d:3a:25:69:d6:94:fe:87:65:ca:2d:d1:3d:
                    a6:66:80:8d:71:23:a3:fb:b8:a6:2f:d8:67:3b:08:
                    c4:8c:50:e6:a5:df:fd:ed:28:cd:cb:b0:82:27:11:
                    a2:6f:17:71:a2:bc:18:a6:ee:94:2c:35:d8:c2:29:
                    c9:2b:2e:82:34:17:9b:ca:37:6b:1f:a6:e6:f9:eb:
                    46:f6:4a:50:b8:52:fb:e4:6b:94:bc:b1:ac:46:3f:
                    f0:cb:d9:1b:88:4d:78:b1:0d:59:9c:1e:1f:2f:dd:
                    c3:52:34:d6:1e:d7:89:6d:61:e6:f1:a8:7b:e9:b8:
                    05:a4:20:d3:71:ac:c5:43:16:98:ff:41:d0:48:2d:
                    cc:a7:4b:a0:c3:6b:db:3c:d9:2c:75:3d:92:9f:2c:
                    76:6f:64:c9:2f:51:63:40:c9:df:2c:a1:b3:60:e7:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B9:CF:56:44:C0:56:EF:B7:53:05:A9:B5:D8:44:69:06:CC:EC:E0
            X509v3 Authority Key Identifier:
                keyid:F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:72:0d:ac:12:8e:c5:86:fd:20:2b:3a:df:55:79:a1:e5:18:
         a8:85:d8:80:b1:d0:c2:83:08:39:8b:03:a2:79:85:e5:96:93:
         3f:17:7c:ce:3e:4d:96:1a:ea:17:af:55:cf:53:90:0a:77:e7:
         1c:78:82:47:32:e0:d3:bb:42:eb:80:50:93:4c:e2:1c:cd:29:
         b1:65:71:e6:e1:26:07:2e:6d:f3:6d:e4:5e:cd:41:c7:cd:07:
         40:fb:b3:11:c3:6f:08:c6:16:ca:72:8c:81:39:eb:e0:41:84:
         24:b3:31:b1:57:3a:2a:b0:0d:9c:6b:f1:d2:34:a3:6e:40:4c:
         e4:89:1a:38:90:00:4b:a5:03:ed:06:aa:bf:01:bd:ba:28:a3:
         7a:2e:a2:7a:c6:96:0c:43:eb:24:0b:15:18:16:81:b5:4a:62:
         9e:41:fa:b5:8c:dd:31:13:43:22:c5:ef:a8:ec:28:66:7e:90:
         63:32:75:98:3f:0a:80:b3:cc:dc:db:cb:97:8d:13:19:24:fc:
         22:73:e5:13:b4:12:7f:08:96:69:26:3c:67:91:cc:c9:65:47:
         80:c5:0c:54:c5:16:dd:a8:da:f1:86:c6:f4:e9:4a:5a:d5:91:
         54:05:08:b5:d7:77:9a:2a:9e:f7:56:b4:da:8f:4b:8c:23:e0:
         fb:63:44:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:49:58 2024 by rpki-client on console-fra.rpki-client.org