Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
File:                     9_TLjFICzFNe2v0grLaoBQLk_Sk.mft (raw, json)
Hash identifier:          U5UHwqiDveDJm3osJXChU9mtZxJI8c6vEsMT7IUGyog=
Subject key identifier:   32:57:7F:5E:75:75:81:6F:C9:3D:77:80:3A:E5:F2:24:60:38:C6:F1
Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
Certificate issuer:       /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Certificate serial:       018F4B6E0C6358CCCC443877BAE97F1036F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
Manifest number:          0E43
Signing time:             Mon 06 May 2024 01:04:14 +0000
Manifest this update:     Mon 06 May 2024 01:04:14 +0000
Manifest next update:     Tue 07 May 2024 01:04:14 +0000
Files and hashes:         1: 9_TLjFICzFNe2v0grLaoBQLk_Sk.crl (hash: wu2FWHobSV9kb9n92iHFbhnD70VEqV4sYaQHMV4341s=)
                          2: yeZINMdHxKtAx84jjDvB1ZY5bQ4.roa (hash: AeaAgMvOCfTG28DdNWpKJtyuwJZFlXF8mSh8PhainUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6e:0c:63:58:cc:cc:44:38:77:ba:e9:7f:10:36:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
        Validity
            Not Before: May  6 01:04:14 2024 GMT
            Not After : May  7 01:04:14 2024 GMT
        Subject: CN=32577f5e7575816fc93d77803ae5f2246038c6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:17:27:28:ff:11:c8:c9:16:4c:9d:ef:da:
                    2d:32:49:3a:6b:fb:55:84:9c:cb:24:30:ab:08:f2:
                    fa:f9:05:f3:56:ec:dc:bb:43:e9:2c:50:ff:f9:a2:
                    bb:a2:9c:2a:66:1d:53:49:79:6d:b1:4f:47:ac:30:
                    51:a5:5b:1f:4b:5c:40:ea:25:ed:81:f4:7b:82:79:
                    50:ea:e0:55:03:05:73:ec:dc:ad:bf:24:f6:c3:8e:
                    c2:8c:c2:bb:97:97:93:dd:22:ae:c3:ec:f4:6f:2f:
                    eb:35:cb:d8:cc:01:02:f8:23:55:d7:38:32:f8:5f:
                    0e:6a:94:68:e0:cc:70:0a:18:7d:e4:2d:be:f6:4e:
                    1e:81:2e:a4:2a:bc:dc:5d:37:d6:ce:8a:cd:6d:d1:
                    24:63:71:cc:43:71:68:be:cf:f5:24:42:7c:e5:20:
                    f4:07:ed:03:e6:df:2c:1f:b1:f3:af:d6:a4:e7:81:
                    72:08:a6:54:df:1a:1c:19:2a:76:53:e9:8e:de:cf:
                    82:95:79:94:54:0d:64:dc:02:54:8b:13:1c:ab:1d:
                    44:03:66:3c:38:da:ff:11:cf:4b:7d:cc:4f:26:97:
                    0d:97:49:bd:d4:a5:27:fc:c3:da:b5:8f:ff:f0:c4:
                    69:f1:12:ee:1d:d5:f1:13:71:95:98:87:58:5b:98:
                    53:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:57:7F:5E:75:75:81:6F:C9:3D:77:80:3A:E5:F2:24:60:38:C6:F1
            X509v3 Authority Key Identifier:
                keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d8:9c:48:16:ad:45:b7:58:d1:74:22:48:0a:e0:d1:b6:25:
         83:9f:c5:a6:ef:8a:48:ec:16:91:82:6d:95:ec:68:ee:0a:84:
         f2:b1:fc:dd:de:26:97:05:a1:f2:80:62:e0:36:cc:74:db:0f:
         b3:2d:22:50:81:9f:3a:e1:f5:7b:57:84:b0:9b:fa:74:76:c1:
         27:5e:0b:be:10:5c:05:73:80:db:9d:18:32:75:97:02:cb:50:
         15:2b:de:1c:c6:b4:89:6f:02:e9:30:a2:a7:08:75:1e:42:40:
         2b:2d:43:6e:5e:5f:e6:05:dd:43:6c:51:ab:2e:c7:39:7d:e7:
         9c:90:56:9e:02:c1:94:95:24:cf:83:83:fe:b4:d5:93:b3:f3:
         b6:87:28:00:ed:c5:fa:d4:8a:9a:2b:66:59:57:ac:2e:d8:dd:
         de:70:94:b0:56:f2:a4:0d:ae:41:a6:bc:84:f5:99:d2:5e:74:
         54:db:ff:7c:fc:c3:6f:80:66:49:b4:b9:37:13:78:a1:63:bb:
         04:7b:35:85:7b:6b:93:4e:d7:12:22:77:2b:68:be:91:de:aa:
         c1:80:8f:d2:8d:0b:e4:47:9d:b1:1b:d0:bf:56:44:b8:44:8e:
         e1:91:ec:2c:92:b5:d3:e8:7f:3d:24:5a:99:b2:71:b3:b1:d1:
         41:34:9a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:57:57 2024 by rpki-client on console-fra.rpki-client.org