Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
File:                     C_t1KSifiPtLuHs5577cnZ8n1fo.mft (raw, json)
Hash identifier:          s+onQbsfAbnwKlBUTeo/Iab4ePUUXA3lc8PGWoIvYwA=
Subject key identifier:   E3:A5:3B:C7:B8:A0:4E:D5:3A:D1:36:33:A3:9C:34:4C:14:89:F1:94
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Certificate issuer:       /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial:       018F3C661032409718030E3A94611000146D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
Manifest number:          073B
Signing time:             Fri 03 May 2024 03:01:12 +0000
Manifest this update:     Fri 03 May 2024 03:01:12 +0000
Manifest next update:     Sat 04 May 2024 03:01:12 +0000
Files and hashes:         1: C_t1KSifiPtLuHs5577cnZ8n1fo.crl (hash: zN+UD4yNG7yIIaX/bff75WyUHIS8mydtN/1N2PuDlO4=)
                          2: Mk9feoO8awtVnN2znfdEMnbSvMU.roa (hash: gtMgEX4dNmH2oQgrk63991eYe1MU89O7IxMk3OoegY0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:10:32:40:97:18:03:0e:3a:94:61:10:00:14:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
        Validity
            Not Before: May  3 03:01:12 2024 GMT
            Not After : May  4 03:01:12 2024 GMT
        Subject: CN=e3a53bc7b8a04ed53ad13633a39c344c1489f194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:d5:eb:d5:69:17:39:a5:91:51:f1:1f:ad:
                    4b:00:14:8a:b1:a7:7b:ff:0c:63:84:a1:1a:77:c6:
                    91:0d:57:7e:76:ca:ad:b6:59:47:29:95:dc:25:17:
                    bd:d6:9d:b1:22:d9:f4:2e:4f:fe:28:10:24:f4:82:
                    95:24:de:e2:3e:de:44:e6:0f:cb:d8:06:be:a0:b2:
                    db:a3:b1:2b:a3:9f:fb:f1:e0:fa:03:49:cd:7f:cc:
                    70:c9:55:c3:16:26:4e:4d:80:f1:09:68:65:a2:e5:
                    8d:d9:cb:70:a6:c2:e9:bc:9b:8c:36:95:a8:4a:5c:
                    a7:c5:59:39:81:80:c6:81:aa:c4:29:d7:4c:f5:a9:
                    3f:c9:ec:75:79:ed:59:4d:94:6c:d0:43:0e:ba:61:
                    6d:e2:cb:e0:fc:ca:89:58:19:5a:bc:c4:cf:d5:60:
                    e2:09:c7:76:7c:bb:58:04:5d:4f:fe:09:7e:78:52:
                    d2:af:5f:32:04:03:88:c2:75:7f:5e:a7:07:c2:1b:
                    85:3c:d7:44:05:0f:20:3b:4e:91:b3:44:d2:cb:27:
                    2e:d2:74:2b:ee:b0:b9:39:2e:5e:cb:2f:ed:c8:67:
                    ee:fe:d0:be:61:ef:ba:82:8e:f1:ca:49:d8:5f:97:
                    fb:a3:6d:6c:f8:5a:f5:77:1c:c5:3f:01:83:be:13:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A5:3B:C7:B8:A0:4E:D5:3A:D1:36:33:A3:9C:34:4C:14:89:F1:94
            X509v3 Authority Key Identifier:
                keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c9:27:dc:0d:2e:e7:3f:f0:da:4e:ff:90:86:4a:cf:5b:30:
         a9:fb:92:3b:9f:c7:6c:95:f9:c2:e4:ce:13:aa:18:6b:08:0e:
         9f:bb:d6:cd:d0:a2:d0:06:f4:81:de:72:9d:f2:13:c1:da:fe:
         8f:ea:1c:0e:e7:ee:a3:c9:b8:3a:af:99:3c:30:55:c4:f8:89:
         df:e2:d6:0e:23:87:3b:d0:a8:da:00:a1:60:0a:7b:0e:55:82:
         de:50:13:21:e3:64:c1:e9:d6:55:d1:35:bf:ef:5d:72:78:41:
         8a:78:01:90:b3:db:47:a7:bb:12:d5:48:79:32:9f:4d:57:11:
         78:00:ac:62:57:93:43:94:ee:3c:c4:b4:31:d3:c1:95:f9:ad:
         d5:f1:01:16:d7:75:ec:69:24:c7:68:ee:0e:a1:75:94:56:3b:
         f4:2c:be:44:60:87:dd:6f:4c:1e:80:c1:b3:21:fa:d8:a2:87:
         8f:ff:96:3c:fc:ce:0b:50:12:6a:3d:6d:0a:8b:1e:9d:b6:78:
         92:5e:2e:66:83:91:cd:a7:0e:8f:91:7c:2e:b4:22:4c:90:ef:
         e9:9d:e3:db:81:d9:97:06:60:ac:06:a7:81:90:e1:f6:1e:69:
         ba:f8:59:38:ca:47:1a:74:41:fa:d3:5a:68:b0:3e:2b:7d:c3:
         b7:d9:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:05:06 2024 by rpki-client on console-fra.rpki-client.org