Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
File:                     Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json)
Hash identifier:          nkQgdtwai3T1We4ntNMLlV14ZHB24TC72DioPBYJyH8=
Subject key identifier:   B6:CE:93:B6:DC:82:61:93:74:EF:73:F0:E7:79:B2:DC:DD:C2:84:06
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Certificate issuer:       /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial:       018F2D976F1827C0C96DF0A68288B2B4B5F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
Manifest number:          0B44
Signing time:             Tue 30 Apr 2024 06:00:50 +0000
Manifest this update:     Tue 30 Apr 2024 06:00:50 +0000
Manifest next update:     Wed 01 May 2024 06:00:50 +0000
Files and hashes:         1: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: PQo3lNZ9kYH2clilfQU1oh12zsEGhA9AtNJUcxCeEZE=)
                          2: UlaNdagBuG_pDXeMTm-5TI4_qyQ.roa (hash: eRhCTWO1Wx5Kb+x2/y+f7OIsV1vRRcb9H8D864hJhFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Apr 2024 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2d:97:6f:18:27:c0:c9:6d:f0:a6:82:88:b2:b4:b5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
        Validity
            Not Before: Apr 30 06:00:50 2024 GMT
            Not After : May  1 06:00:50 2024 GMT
        Subject: CN=b6ce93b6dc82619374ef73f0e779b2dcddc28406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:82:79:fc:ef:8d:c1:a5:cd:26:54:2a:60:
                    d2:65:16:ed:e2:9a:47:f6:7b:ab:5b:49:8d:ca:4f:
                    50:a0:22:59:17:76:1f:1b:f6:fb:f3:13:ae:d0:ad:
                    5a:8d:51:0a:88:3b:fb:ae:67:70:2f:d7:ed:fa:15:
                    b7:fa:7a:79:c6:3e:e2:22:3a:7c:5e:e0:13:72:9e:
                    5b:66:87:86:72:35:35:c8:e4:bc:68:57:6f:ac:56:
                    8d:4e:50:4d:f6:54:39:1b:d9:32:a6:95:1c:b2:43:
                    34:de:a5:fd:0d:49:58:9e:ac:34:00:2b:b0:94:82:
                    f5:c1:e5:cf:ca:d6:c6:90:0e:ed:78:0a:11:7e:58:
                    4d:b0:2d:ef:3c:00:aa:63:6f:f7:a6:c0:17:d1:09:
                    46:bb:3c:f7:6a:41:ad:63:cf:0d:52:51:20:be:8c:
                    3e:87:70:95:84:f0:38:92:7c:ba:e0:31:03:f4:48:
                    ee:b3:8f:8a:5f:c7:c2:91:43:ff:72:bb:2d:fe:e9:
                    01:ef:3f:09:ab:f6:ec:78:a4:45:03:96:48:e3:f4:
                    9f:15:a5:a3:5e:d4:0b:26:64:b8:d5:be:ed:aa:c1:
                    3e:dd:2a:f1:5b:35:c2:c3:15:07:70:8a:72:ae:6a:
                    3f:ef:0b:f7:03:90:ed:1f:1d:ea:d3:a8:30:df:ca:
                    87:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CE:93:B6:DC:82:61:93:74:EF:73:F0:E7:79:B2:DC:DD:C2:84:06
            X509v3 Authority Key Identifier:
                keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:13:89:d5:35:c4:0c:4f:12:34:19:07:20:86:98:50:c5:cb:
         21:51:fe:cd:9c:31:06:ee:64:55:33:22:f7:10:7c:30:a8:67:
         e1:aa:66:e5:0a:82:c5:49:38:03:0b:f6:1d:b8:85:6f:60:c0:
         1c:3d:7d:76:10:8e:78:e5:89:2c:a8:0f:d1:aa:04:9b:3d:6f:
         70:32:10:ff:73:56:19:10:d7:0a:2f:36:e0:3f:9c:23:1f:c8:
         8d:2d:06:a1:ca:d9:8e:8c:cd:63:61:52:d1:86:ae:cd:1a:92:
         1a:b1:23:4c:56:10:48:8b:b9:0b:87:7f:54:62:32:81:ed:2c:
         bd:02:b6:a9:27:57:03:55:f1:5f:18:06:f8:2a:c2:46:cc:2b:
         ef:0a:a2:3e:40:3c:1c:41:18:6f:ba:99:03:2b:b4:97:42:d7:
         46:e5:0d:63:c0:4a:00:1f:85:90:36:97:ed:4f:fd:8e:81:21:
         19:dd:59:2e:60:f2:f9:f8:98:ac:71:30:b4:b6:20:48:88:e4:
         52:a4:b4:51:a9:b0:cf:c1:dc:db:64:26:a1:07:f4:ce:ca:95:
         fe:a3:cf:d6:12:af:fc:9a:7d:5e:83:e9:d4:c3:38:c4:b3:c5:
         58:31:03:a7:91:73:6b:d0:0c:0d:d0:7e:c8:4f:09:8a:78:50:
         d6:5c:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 08:05:36 2024 by rpki-client on console-fra.rpki-client.org