Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File:                     0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier:          W1jzjpYEwUJg+3M6e1Z4Nb/abvaLCtHJ4BoanFWYQ3s=
Subject key identifier:   9A:A9:DB:63:92:43:74:F0:D9:9D:03:FF:D1:D9:76:D1:B0:17:5C:D9
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer:       /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial:       018F3A0991E3887E62863E3F7F084BE2446F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number:          09B1
Signing time:             Thu 02 May 2024 16:00:56 +0000
Manifest this update:     Thu 02 May 2024 16:00:56 +0000
Manifest next update:     Fri 03 May 2024 16:00:56 +0000
Files and hashes:         1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: NPR6ZxGs3Dn/RqBlDBsQl3fPF7SAQ/8C2hm41FFB5dc=)
                          2: 7K2xIHhRpJI9MxjVGJXQPeDRk5g.roa (hash: O6lWLeufHP9pVBds0C+OqFQ7fmO8pUPmP/g8MZHBCWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:09:91:e3:88:7e:62:86:3e:3f:7f:08:4b:e2:44:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
        Validity
            Not Before: May  2 16:00:56 2024 GMT
            Not After : May  3 16:00:56 2024 GMT
        Subject: CN=9aa9db63924374f0d99d03ffd1d976d1b0175cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:d7:9a:23:84:6c:21:b8:b3:9e:79:71:a1:
                    69:b1:e1:da:47:a1:df:70:62:bf:04:3a:b8:d1:da:
                    ad:35:a6:b7:3f:6f:d6:a3:dd:7f:c8:71:49:9c:96:
                    56:44:52:5a:47:af:67:5b:28:08:0c:aa:d5:fa:ad:
                    6f:60:7b:b9:83:5b:9c:a5:ba:ff:1c:ea:a7:2f:98:
                    8b:2f:bf:6e:1c:48:b5:db:d4:62:85:56:c3:3e:83:
                    23:ec:f2:45:81:fc:c8:0e:07:59:2f:48:bf:46:80:
                    a6:9e:fe:b5:8c:70:1b:2f:cf:98:3d:16:ed:67:c6:
                    34:a1:01:98:34:3b:5e:71:1b:6b:02:8b:26:42:db:
                    b3:34:e3:fa:e7:e8:8e:65:42:f7:c2:82:34:04:ec:
                    48:72:dd:fa:22:ad:c5:51:e2:e1:75:16:28:1b:fb:
                    9b:12:3f:5f:8b:fe:77:4d:57:05:cd:8d:28:18:71:
                    53:bd:26:9d:f4:35:a2:c4:5c:16:73:8f:52:15:f7:
                    98:7c:05:92:cb:e9:ae:98:58:28:7a:68:24:78:5d:
                    09:28:01:9a:74:20:d5:59:94:e2:9e:14:93:ad:85:
                    34:b9:3f:93:80:79:23:e3:cf:0f:7e:31:13:20:25:
                    30:38:f3:45:c7:28:72:70:63:75:14:16:ce:d2:05:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A9:DB:63:92:43:74:F0:D9:9D:03:FF:D1:D9:76:D1:B0:17:5C:D9
            X509v3 Authority Key Identifier:
                keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:46:fe:98:6a:9c:39:43:0b:10:82:3a:b5:f9:a1:5c:d0:b3:
         a6:86:8d:e8:3d:9b:2b:b3:36:05:b1:df:cc:15:ff:cd:e4:38:
         04:af:2d:e8:d6:a7:63:84:9f:7c:82:c9:2a:23:4c:7b:ee:34:
         a9:ad:88:52:73:42:53:2b:f8:53:26:4d:ba:a4:b4:63:d3:b5:
         45:c7:75:6d:a8:d9:d3:31:2e:34:dc:ca:a5:11:66:51:f4:91:
         37:e3:d3:54:41:ce:94:d2:58:ce:a0:22:a2:f0:db:82:cf:47:
         3a:85:bb:41:33:70:84:58:0b:72:53:19:06:d8:25:c8:15:5c:
         52:f8:17:f2:ea:c4:a4:cf:13:e7:d7:76:1d:53:83:15:be:40:
         14:80:fd:d5:ba:f0:3b:77:1b:11:57:68:f0:44:ed:8a:30:4b:
         a0:dd:ab:a9:46:2b:6d:b7:ef:6e:9f:29:90:6d:bb:37:7f:0a:
         5e:84:6e:5d:45:de:fe:8d:d5:57:b5:ac:1a:43:aa:fe:5d:e2:
         5b:03:03:cf:c2:45:dc:cb:e7:23:ae:d0:62:d9:2e:e1:1a:04:
         dc:5f:a8:04:c8:be:01:20:5b:8c:4d:81:de:6c:a9:a3:a2:eb:
         69:59:d9:4b:e4:60:65:66:ab:ef:76:5e:f0:28:fe:38:c7:1a:
         65:ca:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:22:14 2024 by rpki-client on console-fra.rpki-client.org