Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File:                     1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier:          lajU7PE23sLBwLY7qc64lAN0XFKKsMQAPqYjUb7UGes=
Subject key identifier:   C6:BD:C4:60:29:06:35:69:E5:5F:2A:86:BD:4E:62:7D:CE:89:0B:39
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer:       /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial:       018F41C487C5F569E87A61ECD0DD5523DEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number:          090B
Signing time:             Sat 04 May 2024 04:02:29 +0000
Manifest this update:     Sat 04 May 2024 04:02:29 +0000
Manifest next update:     Sun 05 May 2024 04:02:29 +0000
Files and hashes:         1: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: Kkb2IAzJILcTSziqz25TC5fqEnSgEr3966cua9MhRjo=)
                          2: pwqEQrTNpjo0zM0uQK-mhMpQmZk.roa (hash: yVsDUfeys13Hbv8MsD/9sO7W/cjeTO0KboSAsO0zSME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:87:c5:f5:69:e8:7a:61:ec:d0:dd:55:23:de:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
        Validity
            Not Before: May  4 04:02:29 2024 GMT
            Not After : May  5 04:02:29 2024 GMT
        Subject: CN=c6bdc46029063569e55f2a86bd4e627dce890b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:d6:a2:3c:c5:9e:df:03:7b:eb:68:47:d6:
                    f3:65:71:e0:6b:72:37:43:31:44:c4:c9:ca:31:26:
                    11:9d:da:fe:18:25:27:36:b3:f4:7b:0e:dc:1c:63:
                    87:5e:20:8c:85:d2:41:a9:c3:b4:cd:9e:ee:af:28:
                    7d:7c:d9:a0:a3:5b:be:27:4b:fd:d7:38:76:4f:b5:
                    a7:4e:2f:b3:48:8c:d1:66:ad:59:f0:47:1d:a8:1d:
                    26:c2:56:49:65:c0:d9:51:c1:a5:4b:7b:b0:c9:88:
                    e9:1f:8b:ab:84:ed:fa:7d:25:91:c8:5f:20:60:20:
                    f1:7e:28:4f:22:e6:e1:18:8b:08:5c:15:fb:b7:8a:
                    1b:1a:b5:bc:39:3e:64:cb:86:8f:b1:4d:23:d1:50:
                    4b:e6:0e:69:f6:14:81:c8:69:cd:ac:08:78:b3:69:
                    2b:23:5d:0d:ff:2f:20:e7:0e:7e:1e:a1:24:cf:f3:
                    42:b0:79:89:8e:3f:2a:2d:26:5d:b8:0c:75:0d:ec:
                    e5:71:b9:fd:62:ea:e1:35:e7:dd:b2:3b:54:b1:92:
                    52:5f:a5:93:6b:86:27:a4:e6:c3:60:39:23:e8:ff:
                    86:0b:d2:15:cd:4b:d1:70:41:e7:cd:95:50:62:25:
                    e2:41:72:62:62:6f:7a:05:28:65:0f:b3:fc:90:2c:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:C4:60:29:06:35:69:E5:5F:2A:86:BD:4E:62:7D:CE:89:0B:39
            X509v3 Authority Key Identifier:
                keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:a4:18:08:8b:15:65:9c:c6:49:3c:e9:65:c0:f7:65:e7:
         3e:6a:e8:aa:a1:67:bd:16:9d:6a:db:72:5a:7b:44:b1:fd:5b:
         52:86:d1:94:24:f5:19:3a:ef:65:b0:eb:d0:43:b7:5c:99:44:
         25:03:a9:f6:cd:3b:e5:23:db:c7:b6:cf:8b:33:b8:04:cf:45:
         f1:a0:03:7e:bc:a8:d8:5a:5d:1a:1a:da:f6:9f:cb:34:cc:23:
         1e:01:35:de:7d:eb:76:4d:cf:7f:c2:4b:a1:94:b8:33:45:e4:
         e9:73:0f:b5:85:a7:b7:3b:93:75:83:63:f3:f3:6c:1b:f1:db:
         6b:0d:32:70:4e:3b:e5:e0:0e:7b:8c:90:dd:76:c9:f4:83:6a:
         77:0c:aa:f6:84:23:13:6d:3e:ea:bf:e8:fb:b2:66:22:2b:27:
         de:f5:2b:12:fb:ae:1c:16:87:43:a6:ca:a2:e6:05:38:7e:03:
         65:30:4f:a2:82:8b:ec:c4:c9:ca:d1:61:0f:3d:88:ea:27:3c:
         bf:56:f4:e7:0c:b1:bd:a5:61:06:86:2f:9f:ae:ac:c0:7a:33:
         a9:d0:ae:e8:44:bf:3a:9c:1a:62:87:51:bc:78:f8:ef:d7:ed:
         5f:1d:b0:98:d6:7a:e9:c8:bf:a1:55:34:8a:65:06:04:27:ea:
         34:c5:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:17:15 2024 by rpki-client on console-fra.rpki-client.org