Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File:                     D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier:          bEQ7f7UjkRFe9io8gGtoYs4IjHWilr+4demhoFpbRz4=
Subject key identifier:   7C:25:D8:61:50:60:B3:F9:7B:F7:77:BF:F2:46:81:6A:C0:C6:3C:50
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer:       /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial:       018F866CA6416F1302AC80F3D4F746D15AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number:          0124
Signing time:             Fri 17 May 2024 12:00:18 +0000
Manifest this update:     Fri 17 May 2024 12:00:18 +0000
Manifest next update:     Sat 18 May 2024 12:00:18 +0000
Files and hashes:         1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: Qs8XI93x1FUGVsvu6fX3kf/+HaAqf9YNrYM9P+Q22CE=)
                          2: l3yeJrlKL4w2dCv7o1inOVyn9os.roa (hash: s964VSwm2OCXwFKg8z9IUotPavnQpbsK3q9gGKogmI4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:a6:41:6f:13:02:ac:80:f3:d4:f7:46:d1:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
        Validity
            Not Before: May 17 12:00:18 2024 GMT
            Not After : May 18 12:00:18 2024 GMT
        Subject: CN=7c25d8615060b3f97bf777bff246816ac0c63c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:7a:89:d3:3d:68:4a:86:a0:1a:7a:38:8c:
                    f9:9c:77:23:6b:ef:5a:1a:2a:42:da:5d:66:6c:c8:
                    c2:e8:ac:99:3c:f4:c4:34:35:b0:8e:a0:31:11:18:
                    00:a4:4f:ec:5a:25:fa:df:bf:44:55:82:5c:13:3e:
                    9a:d0:ff:81:ac:b9:52:05:4e:6a:c2:c8:e2:3d:bc:
                    3e:e2:38:c1:cc:31:a8:5a:8f:12:50:0c:56:5d:88:
                    9e:0b:e5:d2:ed:e6:88:36:89:fc:7b:54:d7:91:81:
                    59:72:13:21:54:c6:7b:00:3e:7a:62:90:6a:22:37:
                    d7:bf:a0:62:04:8e:24:11:03:77:81:55:87:87:89:
                    67:2d:ad:69:90:58:a0:05:f2:81:f3:98:4d:8e:b9:
                    82:65:0e:5d:39:5d:a7:7a:10:77:ea:10:d3:c5:40:
                    cc:dc:91:92:61:24:b8:31:1a:71:e6:23:69:80:02:
                    36:49:0c:bd:81:0d:39:cf:94:4f:4a:1f:c3:0b:ea:
                    8a:2a:7d:8f:bf:c9:81:6f:17:b2:08:c0:50:18:a1:
                    29:07:ec:6d:a7:cc:d0:76:06:c3:18:2e:e4:d6:08:
                    f4:41:97:b2:b8:ae:19:ab:6c:8c:f3:f6:f2:2e:28:
                    c7:d4:6f:c3:46:83:20:c8:94:e9:03:b4:17:17:b7:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:25:D8:61:50:60:B3:F9:7B:F7:77:BF:F2:46:81:6A:C0:C6:3C:50
            X509v3 Authority Key Identifier:
                keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:86:5f:0d:31:78:54:33:8b:f5:cb:ec:93:cb:9c:67:b5:
         3a:91:f2:92:a7:b2:aa:9d:6e:a1:4c:eb:f8:79:48:14:c6:e1:
         e0:53:c4:da:33:70:8b:a0:74:63:42:a2:3f:b3:be:fc:1e:a6:
         bd:87:9c:21:be:32:43:81:50:29:41:f1:ad:d9:28:44:2b:88:
         65:5d:91:23:d4:0e:5b:9a:d6:c4:1c:c4:b9:c8:56:79:10:01:
         0d:21:f8:ab:40:7f:1a:af:62:e9:7a:af:34:c4:46:ce:77:46:
         3f:5c:ac:8e:5a:92:04:1b:2f:cf:89:f3:c6:5b:fa:a7:03:e7:
         de:df:d5:86:67:95:13:5c:53:40:54:55:4c:59:af:fa:39:26:
         d6:bc:d6:09:3f:e7:d6:28:82:4a:18:0b:77:a9:e1:17:40:17:
         a7:fa:58:d6:de:c3:d3:f9:80:7e:cd:ea:fd:56:17:18:a2:64:
         3c:ca:b1:08:da:28:a6:6d:2f:dc:0d:0e:2c:a0:46:cd:56:b3:
         a1:8e:33:3a:f3:a4:d6:bc:81:eb:d1:a7:3a:ab:2b:3f:db:57:
         83:df:6f:1e:4b:b3:66:7e:84:a0:fe:fb:53:3a:a3:9d:2e:25:
         e2:e4:ea:8d:c3:5c:72:2e:df:52:5a:6d:a0:12:f3:de:4f:7f:
         ce:b7:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:49 2024 by rpki-client on console-fra.rpki-client.org