Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File:                     0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier:          ch8bJSmynHvcLJAjXb5MgbuVKSwWVkaN50pSbdUf4QE=
Subject key identifier:   BE:45:AD:29:4A:64:A5:42:A7:19:9F:DC:BA:CB:CC:45:56:D3:ED:F1
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer:       /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial:       018F46EA20CB682DBFBA03F54CC166B56BC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number:          06CA
Signing time:             Sun 05 May 2024 04:01:39 +0000
Manifest this update:     Sun 05 May 2024 04:01:39 +0000
Manifest next update:     Mon 06 May 2024 04:01:39 +0000
Files and hashes:         1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: YH7/neEfK81nerUvdkGgTdU35ySsel8gAVXh/Afv7gQ=)
                          2: Mj6cnOrzwqmswVzipQ1nh27anw8.roa (hash: SRnCJOZ9CNj3EF1aJLdtaOPtZima99ll7AquzihBsig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:ea:20:cb:68:2d:bf:ba:03:f5:4c:c1:66:b5:6b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
        Validity
            Not Before: May  5 04:01:39 2024 GMT
            Not After : May  6 04:01:39 2024 GMT
        Subject: CN=be45ad294a64a542a7199fdcbacbcc4556d3edf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9e:89:8d:cc:34:16:97:00:96:46:76:83:81:
                    e9:e1:5c:c1:38:ec:4d:cc:f6:62:5b:c9:fb:f2:38:
                    2d:26:a4:8a:a5:41:95:b6:49:4b:25:8b:ec:06:66:
                    5f:18:71:cc:11:8e:71:a0:75:4e:c2:cc:88:98:53:
                    14:ec:e5:44:18:3f:82:a0:a7:72:e6:9c:2b:ba:27:
                    31:2e:07:30:5c:57:e1:e5:6b:64:93:9d:b7:a1:e9:
                    10:aa:0a:2c:7c:96:e9:93:c8:be:9c:d6:f5:47:50:
                    5f:52:0c:f9:4f:30:37:5f:da:17:d4:7e:d9:35:bc:
                    2d:21:6a:ea:e5:d3:af:f1:dd:8a:b5:93:be:ee:f7:
                    20:34:db:29:3f:2e:a5:c0:9b:66:75:b8:68:5f:e8:
                    59:af:cb:c3:1c:bd:99:92:55:94:e3:b2:59:a8:7f:
                    24:ef:e5:0c:6f:b7:71:7a:a3:ef:0f:8b:ff:be:f3:
                    08:16:15:e8:c5:88:e0:7e:cf:41:83:48:7b:52:12:
                    ec:cd:b1:c5:b5:fd:c8:3e:71:c9:9c:dd:cc:c5:93:
                    74:6f:fc:a9:d1:fe:f9:ea:d6:63:f5:bb:dd:ae:fb:
                    e0:2e:a3:33:0c:bf:52:ee:5c:22:99:f9:db:13:fe:
                    c5:0e:f7:fb:80:d7:5c:b6:d9:31:a8:7e:cf:e2:75:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:45:AD:29:4A:64:A5:42:A7:19:9F:DC:BA:CB:CC:45:56:D3:ED:F1
            X509v3 Authority Key Identifier:
                keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:52:dd:78:dd:7a:c4:3e:6d:a8:d4:ed:4b:bd:86:24:b0:bb:
         9a:27:c5:8f:9a:05:80:82:06:14:6c:1f:50:2e:33:6b:58:02:
         9c:29:7e:fe:2c:b0:c7:97:f8:13:a0:ac:23:10:34:15:e3:de:
         dc:56:43:d0:3c:3b:85:27:bd:0d:d7:6f:16:e1:f8:90:75:7d:
         47:d8:be:46:38:c1:11:ee:8c:d1:9d:8a:b6:73:90:6f:92:a9:
         59:43:a2:84:b6:51:26:07:38:31:cc:05:fc:7b:35:47:42:14:
         f6:43:c3:03:4b:f7:48:e1:86:3d:6e:6a:a7:5d:d6:1f:f2:4e:
         ae:f8:57:ae:c5:13:a0:23:dc:80:7b:7c:3c:85:95:8b:7b:79:
         77:c9:e5:66:bd:ce:01:b2:4f:8c:5f:2a:1b:e3:b8:64:dc:23:
         4e:ba:4b:09:d5:d0:d6:92:c7:b8:bb:aa:2f:0d:68:19:f2:ef:
         50:d3:e1:8f:85:0f:98:ac:27:01:5d:13:d5:f3:81:9b:94:c7:
         a5:d4:f1:6e:d3:52:e8:13:0b:83:d1:c1:95:6a:32:3b:e8:55:
         35:68:d1:23:94:2d:be:e5:d3:91:5f:e0:82:7f:ff:b2:f7:5a:
         76:2c:cf:05:25:0e:aa:cd:10:59:22:8d:d5:77:5c:6f:19:06:
         1a:97:28:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:15:59 2024 by rpki-client on console-fra.rpki-client.org