Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File:                     0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier:          vvoluojJ5Zx2ZYQpcxoyUDmj+7oRKub8K1pk77TqKDk=
Subject key identifier:   EF:47:53:73:71:41:99:3A:B8:3F:76:D1:C3:3E:09:D6:CC:C2:69:20
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer:       /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial:       018F497E5F0B57625B1385B3E36234AA554C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number:          0A2F
Signing time:             Sun 05 May 2024 16:02:49 +0000
Manifest this update:     Sun 05 May 2024 16:02:49 +0000
Manifest next update:     Mon 06 May 2024 16:02:49 +0000
Files and hashes:         1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: Ki4zC8O+VAYJtEeUqVSXDL8qs1UhU6OWJ5Vb64GBoD4=)
                          2: zFK0-fY7GzfA8MCCslwsdmvXMHw.roa (hash: 86n49pPE0F5Nma+PjZ5U3doDlQlEREtYs32wB+6ybpI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 16:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7e:5f:0b:57:62:5b:13:85:b3:e3:62:34:aa:55:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
        Validity
            Not Before: May  5 16:02:49 2024 GMT
            Not After : May  6 16:02:49 2024 GMT
        Subject: CN=ef4753737141993ab83f76d1c33e09d6ccc26920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:95:cc:74:4a:82:b5:9a:22:74:ef:3a:3f:
                    a5:d2:fd:3d:9b:89:3d:f5:8e:52:b3:be:4a:3b:14:
                    4b:de:2c:ff:26:d2:6e:93:4f:6a:50:a6:d6:7b:0e:
                    e7:8c:82:b2:a9:ce:25:61:83:6e:81:d9:94:a5:5d:
                    07:8d:65:0b:29:b3:6a:f7:04:1b:99:a7:52:f4:2c:
                    aa:1b:ba:c9:79:de:7d:2d:b5:bc:08:c9:bd:f5:68:
                    01:7e:20:84:73:bb:85:30:bd:82:50:64:a4:74:58:
                    f2:d4:28:78:46:d9:9a:38:d9:ba:89:62:04:13:f8:
                    e5:b0:9c:cb:7b:ce:a4:c8:bb:9b:d9:bd:71:38:99:
                    55:88:38:4e:4a:19:21:b8:6d:41:8e:7d:97:f2:6d:
                    06:a1:de:0d:c6:d8:12:f7:21:5f:67:66:36:e0:23:
                    53:f4:8c:cd:af:6e:d3:47:49:18:15:cf:51:8a:53:
                    7a:1f:60:b1:18:58:5a:ee:8a:98:42:95:b0:68:34:
                    d2:da:53:d4:21:78:7b:3b:b2:50:1c:8b:4b:66:2c:
                    37:55:59:dc:3a:77:12:f3:2a:07:7a:06:59:62:c1:
                    69:d1:d1:5c:28:a5:58:5a:0c:f4:79:45:d0:4e:fe:
                    ce:fa:43:e8:88:ae:3e:ca:d6:f1:37:42:c6:3d:e5:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:47:53:73:71:41:99:3A:B8:3F:76:D1:C3:3E:09:D6:CC:C2:69:20
            X509v3 Authority Key Identifier:
                keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1f:09:6c:c8:29:c8:69:25:e9:e5:be:a8:fa:e8:88:12:3f:
         85:01:be:28:ca:1d:0b:13:c5:42:26:ff:eb:bb:d3:63:29:91:
         23:75:2b:78:2c:2b:d9:38:1e:53:cc:bd:87:22:06:e1:d8:57:
         b3:d1:02:dd:ae:5d:1e:ca:e6:87:29:11:47:d0:24:82:e2:56:
         bb:a8:a9:b8:e6:eb:6d:92:4e:88:4c:98:74:e1:65:ae:7e:fc:
         7f:49:77:db:e0:40:65:3c:ed:0f:7f:80:37:16:22:74:b5:c0:
         ed:dd:a6:3d:6a:3d:6b:46:f6:f1:65:17:ee:a1:71:8f:02:ec:
         25:29:e3:32:a2:30:4b:af:59:a5:7a:e6:0d:1b:72:4d:34:fb:
         54:1c:b4:69:9f:0b:a5:ac:74:8b:83:cb:62:28:e4:3d:b1:42:
         79:41:3a:d5:bc:95:6f:ad:46:5e:48:5c:b3:81:f2:8e:e7:6d:
         ec:ea:27:b5:13:35:ea:81:0f:8f:b8:d0:2c:54:f1:ea:a8:b3:
         2d:7a:0d:24:4f:21:e2:fc:d3:6b:c7:54:7e:c8:b7:3e:89:42:
         51:2c:a9:8d:d2:2b:f7:8a:61:ab:15:a4:aa:54:26:87:af:3f:
         52:f2:be:59:c6:d4:96:fc:91:96:c1:05:c0:90:bf:77:76:d8:
         35:73:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:51:25 2024 by rpki-client on console-fra.rpki-client.org