Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File:                     fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier:          qrYN5MsjwI5rEMe9SQmNFiqR1DZYc4/1smqRBKivLno=
Subject key identifier:   4E:CF:19:CA:C5:B4:83:DE:B7:67:85:6B:86:12:AC:3E:6F:06:B1:41
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer:       /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial:       018F8749B6940509B70ED567D585B0825722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number:          09D1
Signing time:             Fri 17 May 2024 16:01:46 +0000
Manifest this update:     Fri 17 May 2024 16:01:46 +0000
Manifest next update:     Sat 18 May 2024 16:01:46 +0000
Files and hashes:         1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: 8ja63s5YYlSeP4kKNgwleewZZqAcr+fBcasfKR5AhoQ=)
                          2: kQ1BLPglwFg0KsZl0O8q7aNzqqk.roa (hash: pLdDvvXaXd9yNGAvHhVEPOdJHfvSGpKPNp0JoGL37m4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b6:94:05:09:b7:0e:d5:67:d5:85:b0:82:57:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
        Validity
            Not Before: May 17 16:01:46 2024 GMT
            Not After : May 18 16:01:46 2024 GMT
        Subject: CN=4ecf19cac5b483deb767856b8612ac3e6f06b141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ab:ed:ca:c6:30:6c:eb:47:63:c6:ce:f1:a2:
                    ce:51:fc:d5:26:e2:95:25:80:88:87:a8:1c:43:02:
                    ea:d7:bb:65:ad:18:9b:07:8b:33:24:c6:22:af:e4:
                    dc:5b:d0:53:de:5c:05:08:e3:12:45:4b:4c:36:63:
                    91:4b:a8:db:6b:0f:e5:2d:43:a1:da:a3:d1:93:92:
                    9d:1e:15:18:4c:75:e5:cd:e4:1b:1e:a2:93:0e:81:
                    7b:39:55:ea:d1:94:27:3d:1e:01:84:b6:6b:3b:cc:
                    cc:34:e7:55:7a:6e:3b:40:b3:d3:47:4c:72:7f:94:
                    00:af:1f:a4:bb:30:28:76:73:2b:e2:fd:d2:25:a0:
                    63:03:d0:81:35:f0:e9:5a:17:81:6f:4a:0f:ad:5f:
                    26:41:c7:9d:a1:11:1a:b0:04:09:9f:4a:04:a5:61:
                    a3:96:65:27:8f:6c:c6:36:b0:4c:fe:e5:50:5e:10:
                    b4:6e:17:70:8e:61:4d:1e:ed:56:b4:a5:44:bf:2b:
                    47:48:81:d7:6a:fa:f3:20:b3:88:54:f7:08:aa:95:
                    95:af:f4:40:0c:b3:70:06:f7:d4:6a:a2:91:58:28:
                    aa:25:d9:97:0c:79:27:0c:6c:01:c2:ad:5f:dd:83:
                    ff:1b:95:de:4c:b8:e9:89:68:41:28:21:08:37:31:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CF:19:CA:C5:B4:83:DE:B7:67:85:6B:86:12:AC:3E:6F:06:B1:41
            X509v3 Authority Key Identifier:
                keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7a:48:42:49:7a:bf:08:8d:b7:b1:5e:1b:3a:b9:6f:4c:c9:
         f1:7c:83:85:a6:83:33:fa:75:43:d5:72:da:c8:c2:dd:ff:cf:
         ee:a1:d4:26:4c:4a:69:2a:43:94:f4:04:d7:b3:1f:c5:76:e3:
         a8:97:e2:f0:e6:7c:2f:2b:b9:8f:30:fd:c4:9b:7f:3e:d8:5c:
         c6:66:bd:ab:64:71:5c:df:14:68:be:9d:ac:03:6c:cf:f2:a5:
         02:7e:aa:47:33:04:91:99:c5:dc:e7:c3:60:e4:f9:4c:2f:da:
         b5:11:22:ff:1c:aa:58:30:17:c7:0a:83:3f:5c:38:7c:8f:d2:
         c2:b0:b0:20:60:23:fd:d7:b3:26:6e:44:98:00:31:e3:c3:c6:
         1a:1c:5b:61:43:15:e8:26:fb:a2:85:92:46:52:53:50:4b:08:
         49:fe:09:46:a0:40:af:41:27:4f:94:a3:a0:f2:49:1a:87:4a:
         7a:2e:b8:a2:01:a0:c8:90:6c:b5:b3:e2:8f:4f:c4:f1:4c:a0:
         f5:75:68:a9:0b:5f:c6:b8:73:1d:45:9b:71:58:7c:da:8e:6f:
         71:80:59:aa:97:51:23:22:08:ac:a3:94:d0:ae:35:22:06:a2:
         8f:ca:b7:16:e2:23:02:53:2b:4c:39:3f:48:fe:97:65:91:6f:
         fc:3c:5e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:09:21 2024 by rpki-client on console-fra.rpki-client.org