Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
File:                     4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft (raw, json)
Hash identifier:          wZRSz8/FXRdyQwbanqbAG2NN/IBH74qkzBmEnSCyZAY=
Subject key identifier:   3D:07:7F:4D:3F:A8:C8:1F:45:72:D1:F8:8F:DC:4C:0F:39:C9:08:3D
Authority key identifier: E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
Certificate issuer:       /CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
Certificate serial:       018F5514C6B49389FE172FA35DA0750BB1E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
Manifest number:          0F03
Signing time:             Tue 07 May 2024 22:02:55 +0000
Manifest this update:     Tue 07 May 2024 22:02:55 +0000
Manifest next update:     Wed 08 May 2024 22:02:55 +0000
Files and hashes:         1: 4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl (hash: jH5yIS0f/nNq1KmeHxPuSUf+06IToROoLY9yVsmCaVs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:14:c6:b4:93:89:fe:17:2f:a3:5d:a0:75:0b:b1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
        Validity
            Not Before: May  7 22:02:55 2024 GMT
            Not After : May  8 22:02:55 2024 GMT
        Subject: CN=3d077f4d3fa8c81f4572d1f88fdc4c0f39c9083d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:5c:ad:e2:a3:b6:8d:dc:3b:a6:17:5e:ec:
                    a8:2f:d4:8e:28:40:6f:64:4d:43:f6:46:37:60:9c:
                    8d:b8:de:49:6e:ba:6a:53:1e:ef:a6:dc:50:af:06:
                    21:1c:dc:06:ef:48:49:2e:3a:7c:bd:c2:3b:b6:9c:
                    9a:a2:e5:4d:5c:e5:c6:8b:73:ea:4e:c3:84:fa:96:
                    85:89:6d:f6:da:5f:4d:23:75:12:6b:1d:9c:0e:40:
                    c8:18:8a:66:1a:cb:89:bf:46:74:3a:de:c3:b7:62:
                    b8:8a:2c:13:ea:fc:7d:f9:e1:f1:62:67:65:02:22:
                    70:fe:eb:ab:d3:ea:ba:1a:0a:ed:6c:37:bd:83:b4:
                    8a:80:ea:6e:73:76:b6:22:08:ac:66:a3:50:06:9a:
                    18:94:6a:b5:d5:0c:86:7f:f2:46:db:34:85:ab:bc:
                    72:a9:5b:a8:33:ad:9c:e8:d5:c8:fb:70:8a:2e:e4:
                    5e:85:bb:16:0b:7d:e0:07:c9:c9:e9:04:69:65:0d:
                    69:17:36:7b:01:7d:19:16:34:9d:17:dc:9c:eb:6e:
                    a5:a4:31:f4:d6:4e:e0:0b:98:3d:de:d1:c8:08:0d:
                    12:e5:31:70:23:97:fe:fd:6f:fb:2c:a7:8c:a2:5f:
                    91:95:54:92:4a:39:c1:df:76:63:f3:40:dd:1c:f4:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:07:7F:4D:3F:A8:C8:1F:45:72:D1:F8:8F:DC:4C:0F:39:C9:08:3D
            X509v3 Authority Key Identifier:
                keyid:E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:da:50:87:08:75:b0:0f:e6:39:5a:f6:8f:28:89:d2:c0:
         cf:3e:6b:bf:ff:79:4d:08:9d:17:bf:10:8c:b9:56:fc:b5:d4:
         24:93:2f:ad:dc:76:47:b5:e7:46:59:6d:7e:5f:9c:ea:af:96:
         e3:df:21:f3:18:f5:73:79:cc:05:bc:3a:a7:21:cd:36:57:f8:
         44:fb:e4:16:a3:cc:3b:f8:f9:b1:0e:a9:67:15:13:5f:db:37:
         06:d9:b9:be:47:60:99:c3:7a:ab:64:c7:e5:c1:1c:87:a2:ac:
         5b:e9:ad:59:81:10:db:5d:6d:fb:74:5a:da:fc:5a:39:d7:a8:
         4b:08:ed:cc:1c:8a:de:81:50:0f:8a:d9:cc:d6:29:36:ad:94:
         78:29:fe:ce:65:7f:a8:42:a8:97:41:bc:af:17:52:5e:d3:3b:
         1d:44:f9:0f:3f:86:21:3b:80:56:be:f4:9b:24:11:f5:67:ef:
         40:3c:c3:db:c8:8a:f1:cc:09:74:f5:87:09:30:23:71:08:1f:
         5a:ea:4e:75:84:c4:79:07:09:70:33:d0:9b:fd:dd:a5:ee:8d:
         69:a4:1b:5f:cf:0f:e7:ed:61:3c:bd:95:3e:10:65:da:84:63:
         06:8a:b5:ab:8a:00:77:f5:62:92:3d:10:27:40:1b:31:83:02:
         45:8e:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:21:50 2024 by rpki-client on console-fra.rpki-client.org