Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File:                     27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier:          qOJflxlIadY4585vQmpWtBWUlqrvju1lS+rRCR2VT2E=
Subject key identifier:   12:03:B3:56:12:94:6D:FE:15:A9:78:2E:5B:65:79:8E:4D:9F:05:FB
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer:       /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial:       018F2381F6979436540376D4E8A3CA08B015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number:          0BC8
Signing time:             Sun 28 Apr 2024 07:01:10 +0000
Manifest this update:     Sun 28 Apr 2024 07:01:10 +0000
Manifest next update:     Mon 29 Apr 2024 07:01:10 +0000
Files and hashes:         1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: nk0pJ7HSf4S665qGEsp+k0I/CCa7SMTEFvweUT7pgI0=)
                          2: 3dhquPMXsdOSn93UO--YTGdklqA.roa (hash: ThN6qYtPQETFiGXA2u1iZhg/wtlgeE8xaolIiIzwiys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:81:f6:97:94:36:54:03:76:d4:e8:a3:ca:08:b0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
        Validity
            Not Before: Apr 28 07:01:10 2024 GMT
            Not After : Apr 29 07:01:10 2024 GMT
        Subject: CN=1203b35612946dfe15a9782e5b65798e4d9f05fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:8a:93:b4:33:ae:87:15:8b:96:9d:16:82:
                    dc:c1:27:d5:9c:9a:80:82:f0:db:71:fd:97:3a:e0:
                    e6:52:10:88:86:62:55:08:0b:d4:6e:52:02:52:7c:
                    1d:9f:05:1d:a4:a0:1d:22:48:0c:02:3b:8f:46:67:
                    b8:69:d2:fd:e4:e8:fb:ad:bc:77:da:2b:f4:9a:4b:
                    6b:20:44:b5:09:f0:d0:81:d6:57:12:8e:23:a8:06:
                    ca:53:f7:37:75:3b:da:7d:95:6f:59:b7:5d:76:fb:
                    59:db:d7:53:fc:2d:a1:3a:2e:0d:4b:37:29:fd:b8:
                    00:38:16:6c:83:a2:6a:50:c0:31:f9:17:06:a5:3c:
                    a4:03:9a:40:78:dc:9d:a1:fd:8d:ec:d5:cd:59:bc:
                    3f:37:a9:5c:1e:ec:bc:c3:94:51:77:c3:6b:1b:2f:
                    bc:55:04:2a:69:3c:68:0c:74:5f:c8:3e:5d:e8:63:
                    d4:dd:05:d2:57:dd:bd:93:03:dc:0d:20:1d:19:76:
                    ff:40:04:29:0a:42:bd:dd:21:51:7e:a5:b0:be:e9:
                    40:2f:2e:86:dd:50:56:7c:a8:c9:c8:63:5b:5c:cc:
                    92:c7:57:7f:f9:13:70:fc:5a:aa:10:95:80:e8:d8:
                    d3:4d:fb:df:c6:04:83:11:58:9a:0b:85:62:a6:61:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:03:B3:56:12:94:6D:FE:15:A9:78:2E:5B:65:79:8E:4D:9F:05:FB
            X509v3 Authority Key Identifier:
                keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9f:d1:10:8c:6b:db:c7:4e:cc:c3:ce:a1:1b:89:fa:40:b7:
         ee:f1:d2:4b:76:dd:79:6e:f9:ea:a8:7a:54:af:3f:05:38:e0:
         d1:38:aa:01:bd:a9:86:43:02:b8:4a:d8:30:f6:c2:a3:fc:93:
         d8:91:fc:f7:b4:19:14:f0:32:1a:fd:ad:f2:72:79:6e:73:5a:
         5f:1d:ee:74:85:17:ec:48:73:54:21:de:f1:f8:9d:93:39:b0:
         59:fc:a1:20:03:cc:dc:5a:0b:09:3d:79:98:10:ee:d5:00:63:
         12:2c:96:51:28:56:9f:2d:50:55:51:1c:16:0d:92:8a:5f:98:
         e1:83:17:96:fb:7c:55:9f:34:6c:29:27:e0:53:66:2a:03:8b:
         37:cd:83:3a:4b:c2:e9:0e:35:f5:99:41:58:f4:02:61:fe:c7:
         2e:e3:99:e8:9b:6d:25:af:be:91:3a:ff:32:9c:fe:c6:51:c2:
         0d:f0:e3:e5:2b:a6:38:d1:bb:02:1f:bd:a3:30:a5:11:1a:25:
         54:79:ab:82:ee:69:0a:55:0a:4a:3f:fb:45:d9:99:bb:0b:d5:
         17:59:28:28:b4:b8:71:16:1d:fb:d3:52:f6:cd:0e:37:46:93:
         c4:82:da:2c:fb:32:70:ef:56:1b:82:05:18:ae:14:50:69:78:
         7e:f9:b1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:57:30 2024 by rpki-client on console-ams.rpki-client.org