Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File:                     0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier:          o94IO8/Z8hcI1BXJg5t3IzOp9xZSLw6Ub9Dzlv/G6nA=
Subject key identifier:   F7:23:58:4D:D9:0C:17:B1:3F:B9:B7:9A:81:2E:FB:8B:24:5B:76:DF
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer:       /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial:       018F20EEE621A6DCC9E89C13646A7E804502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number:          0EF6
Signing time:             Sat 27 Apr 2024 19:01:18 +0000
Manifest this update:     Sat 27 Apr 2024 19:01:18 +0000
Manifest next update:     Sun 28 Apr 2024 19:01:18 +0000
Files and hashes:         1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: l9VA18f8dlHdBKSBa15/D26uyWXGASvmGmQChhwSVGI=)
                          2: DR6ZGbif0VVW1sLPR9dtQznAkWY.roa (hash: CPyIabgiO0KsuC6W1xYHhgaACWq/10vpAPMsePBYrmo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:ee:e6:21:a6:dc:c9:e8:9c:13:64:6a:7e:80:45:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
        Validity
            Not Before: Apr 27 19:01:18 2024 GMT
            Not After : Apr 28 19:01:18 2024 GMT
        Subject: CN=f723584dd90c17b13fb9b79a812efb8b245b76df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:7e:10:88:bd:5d:58:9e:79:34:23:a2:64:
                    0f:46:45:d7:39:84:87:60:f0:b0:c5:9f:c4:95:64:
                    31:51:d5:a2:ae:d2:cf:4d:c5:e7:26:34:84:5d:4c:
                    48:98:ae:05:72:45:16:8f:44:03:ec:db:b2:dd:79:
                    19:1d:20:6b:d8:3e:7c:92:c6:38:83:14:31:ae:7f:
                    71:b3:6d:ba:95:42:d4:2c:bf:47:54:99:71:fd:37:
                    53:e0:5e:09:14:29:39:be:12:5a:3b:4b:c2:24:c4:
                    01:aa:c4:ed:31:fe:cc:bc:a3:f9:f2:9f:d3:44:d6:
                    da:7c:9e:c4:35:da:17:ac:6e:7e:ad:bb:18:07:46:
                    db:f8:a3:7f:aa:9e:84:8d:c3:01:29:54:ed:94:e6:
                    de:ae:9e:78:c3:71:e4:75:68:80:82:0f:4a:3f:db:
                    3b:a2:ed:a8:49:22:31:19:11:80:b7:69:7b:bd:db:
                    5b:4f:2c:39:e7:f1:48:36:fd:c7:ff:54:78:95:c3:
                    fb:15:5b:c0:91:c1:64:9f:8f:13:22:7c:45:3c:fb:
                    ab:62:67:99:7d:d4:2a:49:f3:07:d0:39:10:df:62:
                    33:0d:f9:68:d0:c5:6d:9f:2e:ae:e1:4b:a8:cd:37:
                    ed:bc:64:2e:38:a8:92:68:88:34:63:d2:ef:33:c7:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:23:58:4D:D9:0C:17:B1:3F:B9:B7:9A:81:2E:FB:8B:24:5B:76:DF
            X509v3 Authority Key Identifier:
                keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:08:6f:ff:9e:06:7b:a9:3e:f1:a5:9a:7c:98:6e:86:11:7c:
         47:35:87:4b:3a:c6:d8:30:69:8e:77:9f:c1:91:e9:d1:02:d0:
         05:5c:ec:ed:e5:6b:61:27:eb:61:d3:ab:74:ed:47:6f:af:bb:
         b9:66:76:d6:1d:2b:71:e0:e1:f4:c4:2c:77:d3:01:49:7a:45:
         9b:9d:48:3d:63:60:25:ab:02:c6:ba:5a:42:bb:4c:75:9c:38:
         6b:56:4a:58:57:3b:db:2d:f7:2e:63:c1:71:bc:9c:6f:d7:f2:
         8b:d2:0d:ae:88:66:4d:7e:72:13:43:78:0e:14:f8:37:ba:b1:
         8e:23:c3:bd:5b:3c:29:8c:73:ad:ea:87:48:81:b6:92:34:2e:
         05:5e:b5:a5:09:59:1c:1e:4c:66:5d:5e:d7:37:b7:61:42:9b:
         67:b0:01:d8:d8:26:e0:1d:a2:de:8e:5c:8b:a1:b1:27:44:29:
         ab:36:d0:a6:a1:42:ed:76:4f:75:5e:af:29:b9:9c:83:c3:4c:
         85:a5:5d:49:aa:d4:3f:df:0d:66:81:2e:d7:50:9a:a1:bb:bc:
         1e:f3:fa:88:47:06:ec:ec:bb:19:1d:df:31:a4:02:16:e6:c1:
         c0:f6:f3:60:b7:53:e1:8b:8f:66:c5:08:d2:ea:5a:44:1a:e7:
         de:02:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 01:25:08 2024 by rpki-client on console-ams.rpki-client.org