Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
File:                     RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json)
Hash identifier:          gNJJAiTcrDTehjpVcP555/m+ahjGXq10Kopbg4k+UEg=
Subject key identifier:   6B:D6:18:63:27:10:45:D3:2C:05:27:30:AB:BF:69:8C:86:ED:9A:A8
Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1
Certificate issuer:       /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
Certificate serial:       018F874849A3B7627966FD049B74A939195D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
Manifest number:          0C8F
Signing time:             Fri 17 May 2024 16:00:12 +0000
Manifest this update:     Fri 17 May 2024 16:00:12 +0000
Manifest next update:     Sat 18 May 2024 16:00:12 +0000
Files and hashes:         1: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: imNwsmovM1si3XA1pxTYKaXEqUrPg+40VZH9P70U3Bo=)
                          2: ncBZez982G-LiSjP_Xm3wVRkClE.roa (hash: dItbW68tLai7YtRf+gnumttLU3SI4vg5J+DzDcWJIfU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:49:a3:b7:62:79:66:fd:04:9b:74:a9:39:19:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1
        Validity
            Not Before: May 17 16:00:12 2024 GMT
            Not After : May 18 16:00:12 2024 GMT
        Subject: CN=6bd61863271045d32c052730abbf698c86ed9aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:34:5c:1a:a3:2c:68:6e:65:a9:3a:7f:d0:
                    30:54:64:02:39:ec:7e:dd:2c:c2:55:f2:b5:4b:67:
                    ea:41:e2:be:48:29:b7:fb:57:06:52:70:43:0c:6f:
                    4b:6a:40:4e:4d:d6:91:50:6e:cd:0c:2e:23:4e:ea:
                    1e:4e:21:63:3e:70:01:80:6e:dc:4a:e2:89:91:04:
                    a3:3f:a0:90:fc:22:bc:2c:f2:a4:dd:60:4d:24:dd:
                    02:63:2f:f2:42:36:19:0e:a3:ee:d5:89:a8:44:84:
                    7b:8d:30:d1:15:0d:96:20:57:fb:42:9c:d3:ad:f0:
                    7b:1d:29:36:b4:60:ac:36:a6:27:42:39:bf:77:69:
                    59:6d:76:a7:73:a2:48:65:c8:c9:21:00:d5:6f:c9:
                    97:48:ff:e0:3a:78:c6:f3:1c:2a:1d:0c:8e:c1:63:
                    51:0b:d0:46:57:7a:48:46:a9:66:85:da:0e:a7:51:
                    55:c5:fd:23:e3:59:df:ca:b7:e7:80:55:70:e5:2d:
                    59:1b:0d:25:bb:54:93:2f:06:40:7f:d9:e8:b5:02:
                    8c:b2:c6:a0:53:a6:02:d9:4d:56:10:a4:05:27:c4:
                    22:85:dd:70:7b:b0:3f:70:6e:2e:80:4e:7e:2b:74:
                    21:5a:0d:a9:28:40:73:65:db:49:86:f6:64:49:af:
                    83:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D6:18:63:27:10:45:D3:2C:05:27:30:AB:BF:69:8C:86:ED:9A:A8
            X509v3 Authority Key Identifier:
                keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:5a:df:43:05:a2:65:b7:85:1a:d1:84:39:29:e2:5f:e6:
         e9:20:d9:74:b6:53:fd:cd:27:75:eb:51:91:73:43:c2:58:96:
         4c:53:54:ad:a6:84:63:9d:bb:08:2a:cc:fa:93:36:16:7d:28:
         b1:ee:6e:12:66:29:6b:a9:d7:7b:b3:12:7d:90:d5:f9:95:aa:
         3a:2b:bc:21:65:d2:d3:1f:b2:50:e8:ec:ca:24:3b:bb:43:44:
         e1:ab:aa:20:12:6f:ce:be:f2:ec:3b:fa:26:bc:7e:41:99:50:
         31:77:70:d2:c3:4a:ad:f9:a4:3a:1c:fe:20:19:68:65:e1:f2:
         8a:86:2d:19:d6:4a:9e:0e:5e:68:39:98:91:8b:f4:90:9a:39:
         aa:3b:14:32:61:eb:00:66:9a:f5:ce:06:39:2b:77:34:91:49:
         dc:8c:45:5a:f7:01:55:f8:ab:d4:8c:b5:cc:12:7b:96:2f:17:
         35:2a:c6:c7:f4:be:20:9c:75:a4:ad:e1:46:62:b1:34:bd:8e:
         7d:55:9d:23:1e:6a:73:4b:b3:78:d0:df:dd:20:17:74:4d:73:
         0f:f8:7d:2f:d3:6b:46:24:fc:e0:63:5a:7c:6d:9c:42:17:96:
         45:6a:36:8a:59:50:d6:59:5b:c3:ac:1c:dd:08:a7:4a:2d:29:
         82:c0:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:13:49 2024 by rpki-client on console-ams.rpki-client.org