Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
File:                     0BdL5CbKRRE0N1Teo31qNgo0qbg.mft (raw, json)
Hash identifier:          uT0G8IQ2PQYqTaPlicSlzBCSLFPedfQ05jWjAnSzEo0=
Subject key identifier:   3C:B7:A8:DD:D0:DF:70:78:DF:75:EA:F1:62:F5:1B:B0:CB:E0:28:7B
Authority key identifier: D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8
Certificate issuer:       /CN=d0174be426ca4511343754dea37d6a360a34a9b8
Certificate serial:       018F42D5C5177B03989702B33A2B69FDBDD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
Manifest number:          10E7
Signing time:             Sat 04 May 2024 09:00:56 +0000
Manifest this update:     Sat 04 May 2024 09:00:56 +0000
Manifest next update:     Sun 05 May 2024 09:00:56 +0000
Files and hashes:         1: 0BdL5CbKRRE0N1Teo31qNgo0qbg.crl (hash: 3iE1PGrcZ6yausNEJYDcJ29E+OctYYowkKXW0bhqKoE=)
                          2: iI3jJU2eI3m78H8QE9sH5t8vkiI.roa (hash: TSggtqGr27mQn8zZjHAMRv4x/1YJRMajNh3tBIw+Pgg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:d5:c5:17:7b:03:98:97:02:b3:3a:2b:69:fd:bd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0174be426ca4511343754dea37d6a360a34a9b8
        Validity
            Not Before: May  4 09:00:56 2024 GMT
            Not After : May  5 09:00:56 2024 GMT
        Subject: CN=3cb7a8ddd0df7078df75eaf162f51bb0cbe0287b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:2f:79:26:8d:88:e2:22:75:ef:74:8d:f3:
                    3b:2e:d5:6a:f1:48:0a:43:7c:c3:d2:57:37:05:71:
                    e5:52:e8:29:ba:19:49:a3:cb:56:54:4c:52:17:7d:
                    bb:19:97:9d:9a:81:e6:bd:c3:d7:b9:f3:b4:30:f6:
                    b2:24:74:4d:0c:11:93:c8:1c:53:e3:0f:8d:18:46:
                    2a:7b:af:57:df:d6:7a:bc:60:ce:4d:ec:54:ad:28:
                    e6:2b:bf:3e:13:7b:cd:e6:34:ca:a5:3f:fd:b4:16:
                    78:f5:d3:42:7b:76:d8:5a:7d:d8:b1:03:cc:f3:1d:
                    0d:0e:71:2a:92:d5:81:ce:6d:60:cb:0d:ad:45:a1:
                    95:63:fb:0e:59:c0:37:d6:48:fd:31:29:ef:f5:88:
                    1d:a0:21:36:c1:dc:1d:d9:bf:5b:95:71:1d:ca:55:
                    4d:68:4c:1c:3e:c3:4a:94:83:d3:32:a1:96:5e:ec:
                    7b:c3:6a:9b:49:43:7f:5d:64:a4:65:61:d2:ed:86:
                    df:0b:59:d6:27:9f:80:28:9d:c0:6d:15:16:ff:4c:
                    89:6a:00:17:f2:06:72:76:71:d3:47:22:f1:ef:2d:
                    c7:65:a6:53:08:15:dc:09:de:de:c2:4c:9b:4e:bf:
                    81:c8:dd:de:32:07:2f:2a:aa:3a:d4:d5:f9:0b:93:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B7:A8:DD:D0:DF:70:78:DF:75:EA:F1:62:F5:1B:B0:CB:E0:28:7B
            X509v3 Authority Key Identifier:
                keyid:D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:a1:a1:d3:ae:73:72:fa:14:1d:15:62:1a:ab:38:ce:34:
         10:5d:c0:f6:cd:ae:ac:fa:a9:c8:de:29:66:80:41:79:a6:d4:
         07:69:01:e9:66:96:59:bd:ab:c7:af:44:66:b5:92:58:18:36:
         99:0a:17:d7:4f:6b:18:aa:ae:b7:76:ad:85:29:dd:b3:b0:3a:
         2c:0a:7e:07:c7:d3:ac:83:6c:d6:e7:f9:41:6c:e0:8c:14:c3:
         7e:d2:fc:a9:88:43:87:97:0e:ba:64:2c:bc:8d:05:6c:c8:3c:
         82:74:59:c3:c4:3e:90:66:f6:82:c0:47:9f:14:ca:de:05:39:
         9f:d4:93:61:9c:51:59:45:57:89:26:6f:3e:bc:22:bf:36:b3:
         f0:cc:bb:6d:56:f6:e1:8d:4a:20:21:9f:22:65:0b:30:2c:bb:
         03:0a:36:84:56:2e:2a:45:56:a7:7d:90:10:62:7b:6e:6a:b7:
         ff:97:b3:09:49:b2:53:8a:64:70:e4:20:26:7d:04:d1:26:eb:
         6e:e8:2e:a8:2d:d1:8d:b9:49:47:55:7c:7b:82:07:8d:07:4a:
         6e:c2:e4:9d:3c:37:88:7c:cf:a9:17:31:f2:b4:ba:83:64:37:
         e6:ab:52:3a:39:19:ab:ec:4d:c8:85:4c:76:b2:a7:50:5d:2a:
         23:32:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:33:36 2024 by rpki-client on console-fra.rpki-client.org