Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File:                     fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier:          fWGDt3lUVCHJP6cou+IX8ZeKdfWd4cBBajKftVCS8qo=
Subject key identifier:   D2:54:D9:AF:50:54:0E:15:70:F6:FC:41:96:17:4A:73:C2:66:8D:B6
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer:       /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial:       018F88244B088D91BA004D2C5DD0FACFBB6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number:          04B9
Signing time:             Fri 17 May 2024 20:00:30 +0000
Manifest this update:     Fri 17 May 2024 20:00:30 +0000
Manifest next update:     Sat 18 May 2024 20:00:30 +0000
Files and hashes:         1: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: 4k+qcs1Ir/LNk6jZXd09o4Q45IGLhVNwlwUA/hxs74s=)
                          2: nC7nGxqyhHlJ5uAJ6RNbMWzW6dA.roa (hash: zoS6c0glIvjBRiKv6gJaiEKJevXnf19+0bH40yvbfLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:4b:08:8d:91:ba:00:4d:2c:5d:d0:fa:cf:bb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
        Validity
            Not Before: May 17 20:00:30 2024 GMT
            Not After : May 18 20:00:30 2024 GMT
        Subject: CN=d254d9af50540e1570f6fc4196174a73c2668db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:87:60:d1:17:3c:49:9f:f1:6d:47:e3:6e:
                    21:40:22:ea:07:f5:61:bc:df:dd:be:5b:83:b3:73:
                    05:25:f0:f4:e4:1b:71:87:8b:39:80:fb:5e:37:db:
                    4a:34:70:df:20:18:e6:95:fb:d9:13:06:f6:7d:c1:
                    e6:84:f4:b1:7a:1c:d4:ff:48:75:01:4b:a5:1b:ec:
                    54:72:4d:66:14:d7:7d:8b:b3:de:fe:e8:ae:4d:6f:
                    ec:1f:1c:20:cb:48:4c:de:9c:a4:85:3c:01:a2:85:
                    38:42:4f:06:18:f3:ad:af:d7:81:d2:7f:73:6c:12:
                    a1:be:0c:ab:07:17:ec:4b:be:cb:43:da:82:5f:dc:
                    22:17:a2:58:89:b8:bc:66:46:3a:60:98:d5:9f:7f:
                    fb:e6:21:7d:36:6d:42:5e:73:73:04:14:1d:99:4e:
                    79:b6:05:8b:cf:a0:33:f8:71:c5:34:40:c3:f0:57:
                    55:cd:c5:46:c2:85:40:69:14:ee:e7:cb:5b:60:e1:
                    ea:9b:92:46:1b:4b:24:59:d8:8a:67:8f:dd:53:31:
                    bf:ca:9d:2e:d7:01:34:0e:fc:1e:b0:c4:71:98:bd:
                    0b:dd:0a:14:40:47:33:40:37:d5:f1:c7:da:5d:05:
                    04:5a:40:40:16:12:a0:20:d8:6c:7e:8f:dc:77:7c:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:54:D9:AF:50:54:0E:15:70:F6:FC:41:96:17:4A:73:C2:66:8D:B6
            X509v3 Authority Key Identifier:
                keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:37:26:bc:c6:3c:01:57:dc:3f:7c:db:04:5c:5b:5b:a7:a7:
         f8:30:e1:93:ca:b1:a2:32:52:d0:6a:21:e0:25:87:37:27:c6:
         39:41:d9:be:cf:82:9c:63:71:ec:bb:f5:c6:9e:3a:90:39:af:
         f5:63:9a:c4:bc:dc:d5:15:72:51:13:16:bb:b4:bf:3f:c5:39:
         95:87:8e:6c:47:44:ee:12:94:12:4c:f5:26:4b:5f:a7:86:22:
         c7:7a:0c:b1:20:6c:40:98:49:2b:9c:ea:0c:8a:77:9f:0d:e3:
         2d:4c:b2:84:b3:80:a1:85:5c:e5:46:d9:7b:a6:23:d1:5e:4e:
         2b:2e:73:58:89:9e:56:ef:78:36:53:2b:15:7a:6c:b9:f5:6e:
         76:b7:7c:f3:ed:5f:ec:af:b8:74:4b:59:02:e4:bf:8b:14:29:
         c6:73:65:7e:ee:d4:6f:b8:a5:68:7e:2e:39:0e:82:ae:d3:db:
         3d:24:4a:b4:10:e8:c3:6a:da:4d:04:0a:c9:34:98:31:b1:ae:
         14:6a:15:3f:fb:55:3b:7c:42:23:29:9d:14:fc:87:e1:b8:2a:
         cb:11:ef:b7:38:70:c4:ec:17:65:ab:35:70:7e:fb:35:2f:df:
         c0:7a:9e:6f:6e:4d:3b:8b:ef:6a:e0:30:d9:3d:06:f9:46:f5:
         cb:e1:54:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:46 2024 by rpki-client on console-ams.rpki-client.org