Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
File:                     0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json)
Hash identifier:          cFYBmYizX4lNVumt/sU9h6OExuKMpEhW5eB+9y42V1Y=
Subject key identifier:   00:A5:53:12:AF:CD:16:AD:AE:9E:52:A0:E3:24:6D:40:7C:8C:E1:31
Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
Certificate issuer:       /CN=d291741252bb9c4cda80047dfb01ce98c219d180
Certificate serial:       018F4F487AA5313E8A075A8827AE1AA3F7C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
Manifest number:          100E
Signing time:             Mon 06 May 2024 19:01:41 +0000
Manifest this update:     Mon 06 May 2024 19:01:41 +0000
Manifest next update:     Tue 07 May 2024 19:01:41 +0000
Files and hashes:         1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: psW9jrVqhFYrBKRWJiiuzHb3qildX2WNFc6WCgN1c+4=)
                          2: CDl7IBW5vHz4RcYQ0RBwBJwTrLg.roa (hash: Rj3eF7o4FIID1b/689giQxGlm8LLhaP/Gzrffw8Ju08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:48:7a:a5:31:3e:8a:07:5a:88:27:ae:1a:a3:f7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180
        Validity
            Not Before: May  6 19:01:41 2024 GMT
            Not After : May  7 19:01:41 2024 GMT
        Subject: CN=00a55312afcd16adae9e52a0e3246d407c8ce131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:5a:f2:36:3e:6c:28:fc:bc:cd:4f:8c:e1:
                    ae:4c:dc:b6:01:fd:1b:28:fb:64:29:4c:56:07:4f:
                    35:88:d1:33:91:e2:d9:95:c3:b4:31:28:75:31:4e:
                    38:7e:86:a9:68:62:ec:05:57:55:fc:60:3a:fb:ce:
                    77:01:4a:e6:d5:c9:5e:54:75:e6:52:cc:f2:7e:8f:
                    d6:94:43:e1:21:c3:60:8d:51:7b:fe:7f:9d:34:16:
                    8b:36:92:af:31:93:be:3e:d7:ac:9d:32:f1:91:1f:
                    52:df:e0:b0:00:e2:40:a3:b1:70:43:11:4b:b9:63:
                    7c:29:ad:fa:f5:82:a9:ce:66:f1:dc:71:36:ed:a4:
                    58:5f:bc:f1:e2:4a:06:b6:20:fd:ba:0f:85:30:a5:
                    15:39:45:5a:24:2d:cb:81:55:8e:8b:99:c2:45:15:
                    e0:2d:c0:8a:e4:9a:42:51:2b:d8:9b:1c:af:8d:65:
                    30:94:fb:8a:41:06:c9:38:2e:b0:25:dd:77:4c:cf:
                    f8:7f:82:44:89:20:bd:df:7a:34:f0:6b:17:35:11:
                    09:63:b9:04:25:8a:f0:02:88:e0:e5:9e:39:15:d4:
                    be:71:aa:10:40:f6:94:18:1e:3d:2e:8a:00:48:c4:
                    08:f1:f9:fd:91:6d:97:e6:62:99:0e:68:de:14:c7:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A5:53:12:AF:CD:16:AD:AE:9E:52:A0:E3:24:6D:40:7C:8C:E1:31
            X509v3 Authority Key Identifier:
                keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:02:c8:8b:89:bb:a4:47:4c:67:f6:bc:3f:00:92:79:7b:
         db:f5:d3:91:4b:8b:7e:ec:0d:af:56:14:30:dd:e0:63:61:27:
         99:74:2e:b4:0e:d5:18:fe:a5:5a:5f:22:0e:50:df:4f:69:f8:
         5f:e2:27:48:7f:a9:d6:20:86:83:8d:de:7f:b8:76:cd:99:e2:
         02:72:45:24:ab:e3:f3:af:89:09:97:77:9c:34:28:0c:03:0b:
         8a:01:89:61:fe:2f:62:35:47:f4:87:60:f5:a7:ee:dd:4f:69:
         67:e9:bb:e8:f7:4b:4f:62:21:0b:04:06:2c:67:2c:46:d2:64:
         05:58:88:99:6b:46:3b:b3:a3:94:47:c5:e3:8a:98:9c:83:01:
         21:b2:a6:df:64:ce:d2:64:08:d7:72:18:07:e9:b8:6f:67:de:
         cb:75:c1:46:8a:61:92:06:9e:e1:25:95:85:2a:39:ba:fe:03:
         9c:56:55:e9:47:74:6b:4a:cc:4e:00:32:72:60:ed:80:b3:df:
         34:f9:6f:66:1e:31:c1:d8:47:52:d7:04:e4:c9:d3:f3:5f:4a:
         b3:16:55:17:45:d2:73:73:2d:a9:fc:a8:2d:a8:e5:58:e4:0d:
         1f:8b:95:80:d5:dd:7b:3e:55:24:14:29:89:07:a1:1e:80:39:
         11:e0:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:59:02 2024 by rpki-client on console-fra.rpki-client.org