Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File:                     9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier:          bz/1mjoO7V7F0bhPh4/qlkvjTSyoEeyjrLc1dzRveGk=
Subject key identifier:   EC:16:B4:41:9E:E9:EC:5A:31:9D:8D:67:D3:06:43:08:55:51:64:64
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer:       /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial:       018F441F7AEE7BE6D502AC5AC0ACABB87BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number:          0D39
Signing time:             Sat 04 May 2024 15:01:04 +0000
Manifest this update:     Sat 04 May 2024 15:01:04 +0000
Manifest next update:     Sun 05 May 2024 15:01:04 +0000
Files and hashes:         1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: KLXgk6BIvPsIqz7NMcvwykwfZ9VhKPhAnE2rroKA7yg=)
                          2: Wo2pidpt1F1BnZzTAH-vnRXPi_U.roa (hash: F7dNQzPw0pZt0eBcJ+Em7GCG1v39jCHMM+xDF/09mhA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:1f:7a:ee:7b:e6:d5:02:ac:5a:c0:ac:ab:b8:7b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
        Validity
            Not Before: May  4 15:01:04 2024 GMT
            Not After : May  5 15:01:04 2024 GMT
        Subject: CN=ec16b4419ee9ec5a319d8d67d306430855516464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:59:b9:ce:91:9c:3c:1b:47:ab:b1:6c:8d:
                    7b:47:41:e7:21:48:15:a6:f5:8f:fd:1d:0e:6c:73:
                    6e:c5:f8:6b:5d:c8:5c:aa:a1:85:33:9d:86:83:f0:
                    a6:ee:3d:0f:f6:5a:54:2d:02:79:aa:24:88:80:13:
                    c0:be:d2:29:dc:f4:0e:ed:50:79:c1:bd:0e:4f:93:
                    74:5a:d3:a1:9d:a2:cd:40:34:d2:d0:8f:ec:c2:3b:
                    9f:89:8a:36:0a:e8:53:b9:e6:7e:14:25:8e:da:ac:
                    7a:df:50:4a:ef:09:70:95:ea:90:5c:4b:fc:a4:1e:
                    85:02:08:04:18:37:28:2b:8e:fa:88:93:45:94:ed:
                    ef:43:d2:d3:8f:21:51:c7:b4:24:ea:a0:66:74:77:
                    e2:b1:71:d7:95:47:c6:2c:dd:eb:1e:09:6d:22:ec:
                    b1:7e:9e:12:06:f9:34:b1:9d:5b:23:e0:42:19:a2:
                    1f:f4:bf:1e:19:32:6d:e7:e9:5a:6d:16:72:45:ae:
                    d4:d5:9a:83:b9:3b:73:49:40:6b:82:69:e2:a9:be:
                    8d:3d:35:70:e9:de:a5:50:c4:a1:ce:4e:6a:47:b5:
                    48:c6:e4:e2:d2:70:e2:f6:31:e1:99:5c:e7:29:bf:
                    25:13:5e:bc:e2:d9:5f:03:5f:0c:b5:3f:29:dc:83:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:B4:41:9E:E9:EC:5A:31:9D:8D:67:D3:06:43:08:55:51:64:64
            X509v3 Authority Key Identifier:
                keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:cd:2d:0b:db:7b:e0:85:bc:62:65:10:ef:0f:44:c3:e2:
         fd:55:23:af:49:22:f2:5f:b3:c0:31:59:3b:d5:e5:0a:dc:61:
         84:6e:73:90:bf:b9:6a:c9:bc:29:70:c2:4c:7d:9b:f3:f7:4a:
         92:b5:48:9c:0e:8e:4f:6c:46:87:45:46:c4:70:33:b6:5b:8f:
         df:1f:f0:41:7d:d4:92:aa:0e:77:49:4d:88:7b:02:33:0f:b6:
         50:83:3c:10:40:80:9f:c3:99:1b:45:8e:e8:71:58:97:5c:c1:
         8c:f5:bd:4e:df:0e:8b:ab:a3:60:fb:af:23:35:db:02:d0:13:
         3d:ba:43:32:71:43:11:f4:64:08:ae:8d:cb:46:30:01:0a:dc:
         d2:1e:0c:1f:8b:90:56:e6:0c:77:93:48:9e:6a:ed:fb:2e:92:
         8b:f5:c2:25:89:90:46:d5:6d:6d:4f:ee:19:70:53:8e:da:0b:
         7d:b1:31:45:c7:15:0d:2f:8e:b9:a3:6b:84:7c:da:3c:17:f2:
         78:f9:af:72:dd:10:d5:29:cb:cf:c1:b4:ee:31:2b:78:04:19:
         9c:99:71:ea:b5:8c:d6:46:31:ac:a1:87:ad:62:62:41:20:52:
         e8:ec:3e:7d:0b:27:2d:21:58:01:c4:4d:77:57:b9:f8:55:e6:
         89:e7:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:41:00 2024 by rpki-client on console-ams.rpki-client.org