Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
File:                     9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft (raw, json)
Hash identifier:          Edcq4o06JTBctqb2yfO34jhd/4iamEhstm2mqG5XRGs=
Subject key identifier:   35:55:5E:BC:6A:91:D7:53:AB:96:A3:83:02:6F:0C:E3:4B:A8:4B:BD
Authority key identifier: F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88
Certificate issuer:       /CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
Certificate serial:       018F22DD15A725807DDEF7029FE6792AE6B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
Manifest number:          0BEF
Signing time:             Sun 28 Apr 2024 04:01:05 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:05 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:05 +0000
Files and hashes:         1: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl (hash: ejqzTfcAGCOGjzB4cmDvjgqk3eKTw/0lwb4zc40C/Bo=)
                          2: O2rPzQEDO_2snNs6qT34OfEOmcI.roa (hash: ZoSe8BdTJM9q/ZTcW4Z5+30cQaeCkXULpFqNbWVsB60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:15:a7:25:80:7d:de:f7:02:9f:e6:79:2a:e6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6b54e15714c23f35fdcf5a316c6b99a35410588
        Validity
            Not Before: Apr 28 04:01:05 2024 GMT
            Not After : Apr 29 04:01:05 2024 GMT
        Subject: CN=35555ebc6a91d753ab96a383026f0ce34ba84bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:85:2a:e0:fe:ef:e3:0f:01:a0:22:57:f2:
                    95:ac:8a:4a:78:bb:40:7f:31:db:65:63:8a:86:ea:
                    15:0c:87:20:0f:a6:25:c3:53:ff:db:97:35:22:35:
                    df:5e:79:a9:4a:4f:4a:3b:0a:1e:ba:fd:a9:7b:b8:
                    8c:df:1f:00:0a:30:e9:be:6e:36:18:b0:2b:10:89:
                    c2:c3:93:99:7e:2d:5d:40:bf:52:db:ce:54:30:75:
                    5e:17:4c:72:88:d1:e7:b6:7e:cf:66:46:04:c1:bc:
                    e4:d9:4d:05:93:b2:be:40:a7:2c:d8:70:07:4e:3d:
                    10:ac:d0:a9:6a:bb:cd:22:77:51:72:4e:f2:b3:a8:
                    03:b7:16:7f:de:c4:32:3f:cd:77:17:1f:04:ef:3d:
                    64:3a:f0:12:8f:53:99:66:f5:50:63:1f:31:da:9f:
                    1f:44:54:04:fa:39:c2:11:20:aa:8a:ba:af:53:e5:
                    7a:39:af:b8:65:cf:d3:ea:40:6f:62:ac:bb:06:09:
                    fe:b7:e7:d4:c3:25:82:ca:46:1f:8a:49:93:b9:cd:
                    65:a7:23:46:db:44:45:db:09:27:37:52:bc:e2:96:
                    f5:20:5f:77:f9:79:3b:4c:f3:7e:81:83:df:9c:7e:
                    ed:d0:9f:54:88:3f:6d:b8:57:96:d2:9e:7b:bc:da:
                    13:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:55:5E:BC:6A:91:D7:53:AB:96:A3:83:02:6F:0C:E3:4B:A8:4B:BD
            X509v3 Authority Key Identifier:
                keyid:F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1a:11:22:b5:63:41:37:f8:98:3e:b3:7c:06:ff:2a:80:33:
         72:57:46:2c:0a:a7:06:d4:11:81:da:9c:7f:2b:5c:94:8d:eb:
         e5:d0:3b:df:7c:b2:a9:7e:0d:91:38:5e:dd:21:7a:c3:ee:d3:
         24:91:94:59:1b:a0:86:42:57:9a:fb:0c:1c:47:86:a3:b1:a3:
         b2:1e:c4:a4:32:38:99:3a:05:56:41:48:a7:d4:e2:a9:44:1e:
         77:9a:d9:4e:40:1c:07:b1:92:5c:1a:d0:f9:d7:67:58:06:51:
         d5:5c:c4:5c:0c:78:a0:ef:81:46:b8:e3:d5:91:ae:77:f7:1f:
         fa:f9:95:9f:85:7a:69:3f:28:07:a9:f8:1f:89:ce:5e:73:51:
         0d:9d:06:c9:f2:1c:da:53:0b:53:c5:1b:4a:c9:9a:30:61:e2:
         c7:36:ad:e2:0b:c9:8a:9b:a2:95:f9:68:3d:50:d9:e4:40:44:
         69:6e:fa:f9:5a:f7:e4:c1:7a:87:3d:1d:ae:da:1f:22:8c:03:
         b8:e8:fd:01:ae:1b:a9:7d:c5:48:2c:4d:5a:d4:40:65:15:19:
         74:38:ff:93:65:47:c7:7e:13:47:ba:7c:3f:d7:28:65:55:52:
         38:81:cf:af:f4:4d:f3:8e:b6:89:e3:99:a2:09:66:11:5a:2d:
         09:5c:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:44:43 2024 by rpki-client on console-ams.rpki-client.org