Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
File:                     0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json)
Hash identifier:          aVSs4dJSrIQATlTFvGyBnOiNDLx/9NmkIjDxf5qEkiU=
Subject key identifier:   8E:43:CB:3C:47:41:57:2E:A2:66:61:84:11:E9:06:55:00:56:0F:80
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Certificate issuer:       /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial:       018F4E35D0D984AE53B8E58974D247A67216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
Manifest number:          0E9C
Signing time:             Mon 06 May 2024 14:01:40 +0000
Manifest this update:     Mon 06 May 2024 14:01:40 +0000
Manifest next update:     Tue 07 May 2024 14:01:40 +0000
Files and hashes:         1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: /MoKhN+4JlH6y3GPpf3sjSfHD9WSpVnDCzMvWb6z/yk=)
                          2: Z8szb0HezM_z6v9gQ6uqrMqycsQ.roa (hash: pSiKa3YKvl4M0K4I7WKVLTulx1iU6jL7XAi/1Q22blo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 14:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:d0:d9:84:ae:53:b8:e5:89:74:d2:47:a6:72:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
        Validity
            Not Before: May  6 14:01:40 2024 GMT
            Not After : May  7 14:01:40 2024 GMT
        Subject: CN=8e43cb3c4741572ea266618411e9065500560f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:27:8a:37:23:c8:ec:50:0b:43:d9:48:8e:
                    b6:56:a1:c7:97:8b:46:3a:6e:07:c2:3a:94:73:d7:
                    df:e3:3f:0b:44:77:89:a4:5e:cb:38:9a:b4:71:96:
                    d8:23:19:5d:f8:ba:9d:82:bd:e5:6f:22:a5:bf:c2:
                    60:09:13:00:b2:24:0c:9b:a3:90:59:1e:e0:93:20:
                    ee:9a:0f:e7:45:22:ec:be:57:65:a1:3d:2f:b7:a8:
                    e5:01:02:e2:3c:ef:dd:9e:92:b8:ef:54:dc:aa:cc:
                    6e:de:a3:a9:aa:1a:30:4d:28:43:97:7a:31:3c:8b:
                    9d:26:82:fe:43:44:a1:34:53:5f:12:3f:c4:f9:97:
                    56:a8:5a:1c:21:b0:54:89:2c:f8:a8:48:ee:c6:dd:
                    ac:3e:42:de:33:0b:7a:09:96:09:53:6b:0f:d3:0e:
                    6d:b7:f5:9f:a3:bc:43:db:db:61:3b:cc:50:b0:bc:
                    b4:24:1b:a5:ff:a1:3f:45:79:76:7f:7d:76:eb:86:
                    bd:b7:3f:58:a6:7d:d2:7b:72:d6:db:df:08:ee:50:
                    b2:59:f7:a1:73:bb:54:0b:25:cd:19:27:dd:b0:bf:
                    0f:4b:66:a7:e5:32:7d:15:95:90:df:a3:e3:6f:5c:
                    e4:4a:f3:8e:04:0e:f9:dd:ca:2e:0e:6e:60:33:a6:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:43:CB:3C:47:41:57:2E:A2:66:61:84:11:E9:06:55:00:56:0F:80
            X509v3 Authority Key Identifier:
                keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:cd:9f:2d:e9:1f:b3:a9:71:e0:5f:3a:18:d4:37:0e:6e:7d:
         cd:29:3d:dc:72:ab:69:82:26:05:27:88:78:19:75:99:ba:36:
         70:5e:66:d5:32:eb:34:ba:28:73:8c:fa:c9:62:c3:cc:3c:dd:
         bf:94:34:be:04:8e:5f:35:1b:cc:19:f3:56:25:32:fb:52:37:
         86:48:7f:fd:f1:72:c1:55:61:71:32:72:70:b1:38:92:7c:5b:
         af:12:e5:3b:05:bb:15:df:15:25:df:57:f6:9a:46:1c:6e:e3:
         0a:ea:c1:c7:57:f4:c2:66:7f:d9:a2:86:9b:4b:a5:78:82:ef:
         2b:2f:6d:21:6e:2f:3b:87:4e:67:ff:d3:56:67:c5:a5:18:18:
         ed:59:64:6a:7d:ed:bf:4a:d0:fa:37:9d:bd:3b:ed:29:54:12:
         3f:fc:83:a8:b7:bf:87:03:07:e9:10:ee:a9:47:cc:50:55:7a:
         77:9b:43:36:ce:38:49:ab:3e:ad:c3:84:5e:de:4e:43:fd:36:
         be:9f:8e:3c:86:a1:fb:19:12:a2:6d:e7:d1:9b:cb:92:21:e7:
         5b:bf:90:21:45:74:7b:e7:68:6f:b8:3f:e8:cb:b1:ea:13:be:
         92:9d:00:05:23:72:3f:40:69:3c:37:69:e8:fa:a3:b5:0a:2e:
         40:6f:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:46:05 2024 by rpki-client on console-fra.rpki-client.org