Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft
File:                     45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft (raw, json)
Hash identifier:          PwAAVlnuWgBtiRf7vadUKX0dze0Bot0HkamQGZ6WLqg=
Subject key identifier:   66:17:CF:C0:83:A4:21:9F:14:E3:0C:84:68:CE:C2:46:46:D8:37:50
Authority key identifier: E3:9B:10:00:E7:86:B4:FD:6D:61:73:77:90:E4:F3:42:98:92:65:0E
Certificate issuer:       /CN=e39b1000e786b4fd6d61737790e4f3429892650e
Certificate serial:       018F3DE7A037FE88C3E208D13E75B5DBFF41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45sQAOeGtP1tYXN3kOTzQpiSZQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft
Manifest number:          09FD
Signing time:             Fri 03 May 2024 10:02:20 +0000
Manifest this update:     Fri 03 May 2024 10:02:20 +0000
Manifest next update:     Sat 04 May 2024 10:02:20 +0000
Files and hashes:         1: 45sQAOeGtP1tYXN3kOTzQpiSZQ4.crl (hash: /Mn3pgBdmmSRitJSQrTEh6RTnwdyFijvlVytUjfjBVM=)
                          2: fkb-wFSujNU3L7Tz3O_wi7H2n-Q.roa (hash: +8vx8PaGwLUDNlX/mFuxb2e4aksK7V2DgTYg0GqQxFk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45sQAOeGtP1tYXN3kOTzQpiSZQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 10:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:e7:a0:37:fe:88:c3:e2:08:d1:3e:75:b5:db:ff:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39b1000e786b4fd6d61737790e4f3429892650e
        Validity
            Not Before: May  3 10:02:20 2024 GMT
            Not After : May  4 10:02:20 2024 GMT
        Subject: CN=6617cfc083a4219f14e30c8468cec24646d83750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:19:40:0b:b1:c6:cf:7b:1a:10:44:e0:54:30:
                    2b:ce:39:5c:0a:6a:2c:cf:76:4f:66:89:66:cf:1a:
                    c2:e3:b4:70:37:6e:fa:69:19:d6:db:82:2e:54:2e:
                    f2:b4:c6:c2:e4:3b:0f:41:59:2e:e9:9a:f7:6c:1b:
                    89:ec:bd:88:2d:d8:87:44:c5:d2:2e:b1:95:f3:3b:
                    c6:d3:75:80:1c:e4:7a:da:24:1a:21:0c:eb:a3:ad:
                    a2:3f:7a:91:8c:bc:00:1f:2a:0d:fe:4d:54:4f:d5:
                    76:67:83:59:eb:45:4f:26:c4:36:a8:5c:ec:ea:b8:
                    03:f4:d9:78:1e:1b:ab:f9:97:7d:ac:ef:6a:30:45:
                    08:99:5e:0a:a4:17:eb:f4:97:55:1d:c4:f9:27:e7:
                    04:c1:dd:6d:fd:fa:31:27:f0:2c:c2:49:46:71:0c:
                    c5:46:96:16:2e:7d:e2:31:c5:db:b6:7e:9e:2a:42:
                    b7:6e:b5:21:86:fe:aa:fd:5f:41:f5:c4:1a:0d:fa:
                    60:1c:a7:bb:0b:c4:35:2d:78:d9:12:90:15:1a:4c:
                    5c:6a:1b:96:ba:03:7a:73:35:46:06:bb:8e:6f:82:
                    74:29:4f:fb:7a:f5:c6:fa:b0:1c:18:e7:8e:97:7e:
                    7a:0f:68:89:9e:b5:cd:dd:bd:be:02:86:51:ae:c2:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:CF:C0:83:A4:21:9F:14:E3:0C:84:68:CE:C2:46:46:D8:37:50
            X509v3 Authority Key Identifier:
                keyid:E3:9B:10:00:E7:86:B4:FD:6D:61:73:77:90:E4:F3:42:98:92:65:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45sQAOeGtP1tYXN3kOTzQpiSZQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2992da-60d9-442f-9331-7f1da6827447/1/45sQAOeGtP1tYXN3kOTzQpiSZQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:74:ce:54:88:72:b0:b0:cd:13:d0:0d:61:9c:af:d0:58:21:
         2f:6d:58:0f:05:6b:f6:48:d9:3a:06:06:86:63:40:35:dc:be:
         c9:ab:b6:c6:41:8e:b6:d7:31:84:18:cf:63:e4:44:25:bf:3f:
         f9:3f:cd:27:9e:4c:aa:24:90:4d:e8:ad:5b:74:cc:1b:48:17:
         38:74:72:03:f8:c7:89:11:2a:2f:7b:40:35:db:3d:34:db:db:
         04:51:a6:5a:f2:17:e9:fa:33:79:f1:c0:c8:7b:d9:ec:ac:39:
         fb:2d:fb:03:76:53:e0:42:b4:d0:7e:38:d2:d1:59:59:bd:20:
         02:46:05:00:b7:70:86:d7:41:6f:70:2c:ab:d2:7b:74:37:7b:
         c8:d7:a6:19:7c:1c:b1:7d:0b:82:bb:a4:e0:f7:e1:26:d9:8a:
         ab:50:04:bd:20:27:60:8c:b9:f6:99:cc:6b:e6:f5:f6:3c:bb:
         34:e8:49:b5:fc:b7:3a:ef:0d:26:e6:52:18:73:45:bb:1c:39:
         7b:8a:3c:9d:63:b3:b0:c3:74:0a:77:f1:5e:17:40:47:3d:dd:
         d0:d3:68:0c:39:f3:c6:95:22:91:d3:af:3e:16:85:c1:21:5f:
         ab:2c:a5:0d:ff:ea:3e:76:a7:cb:5c:4f:e0:54:80:96:5b:41:
         d4:60:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:42:42 2024 by rpki-client on console-fra.rpki-client.org