Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File:                     _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier:          OSMEnHoFh1SF0GgzjY1WF0tmlZxlPVAoojHk8uMM5y0=
Subject key identifier:   17:BC:AD:FF:B5:43:CB:9B:78:B7:BE:E3:00:8B:28:73:5F:F1:B9:CB
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer:       /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial:       018F889268F9E874232D511C6BCEBCB7F64A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number:          9E
Signing time:             Fri 17 May 2024 22:00:47 +0000
Manifest this update:     Fri 17 May 2024 22:00:47 +0000
Manifest next update:     Sat 18 May 2024 22:00:47 +0000
Files and hashes:         1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: X8JXHmvEvZ8TjdWOAT84+uztgFxu/X/U2XABa+/LXgE=)
                          2: xdABHfqjRO5DE-_iIe4kLygAtRc.roa (hash: LXSuaviocyfQevICQKDjKPj95wCpGLm7j893kLUbChI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:68:f9:e8:74:23:2d:51:1c:6b:ce:bc:b7:f6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
        Validity
            Not Before: May 17 22:00:47 2024 GMT
            Not After : May 18 22:00:47 2024 GMT
        Subject: CN=17bcadffb543cb9b78b7bee3008b28735ff1b9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:ff:63:8f:89:10:44:df:2f:3e:76:f2:af:
                    1a:0d:48:d2:4f:c2:33:b6:a7:bb:20:b0:dd:aa:73:
                    35:2d:4d:61:67:fd:97:28:39:77:09:64:2b:dc:01:
                    ba:ee:18:14:24:e4:82:8c:79:53:c7:f5:7a:6b:31:
                    31:7c:1c:f7:1d:80:34:77:c9:6f:b8:41:ee:aa:72:
                    93:71:a3:2a:08:a8:7e:fd:fb:2c:6e:2a:8f:cf:2c:
                    ad:c6:5b:e0:27:84:05:a0:05:c4:33:5c:4e:ae:98:
                    26:09:14:3b:1c:40:ce:8c:1b:7e:69:bf:39:06:9d:
                    9f:42:32:0e:3e:19:2f:2b:28:ca:16:df:25:1d:12:
                    1b:01:ae:de:3b:e6:46:b2:b4:93:8b:91:04:1c:4f:
                    48:cd:4d:a7:a2:bd:34:d2:58:7c:11:28:7f:27:b0:
                    3f:f7:55:a2:58:0b:8d:fd:6d:c4:d9:b4:d3:75:88:
                    2c:81:e3:77:3d:b7:3a:aa:e0:65:dd:5a:e0:30:44:
                    07:3a:aa:44:d6:7c:64:85:24:e1:d7:4d:b2:1c:5f:
                    e2:ea:76:9c:47:41:45:f9:02:26:80:aa:7f:86:56:
                    5f:fb:1d:bb:89:d4:ac:f5:7e:fa:27:e2:db:c1:84:
                    11:79:0b:58:fc:ca:53:00:ac:d2:e8:e8:99:47:c9:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BC:AD:FF:B5:43:CB:9B:78:B7:BE:E3:00:8B:28:73:5F:F1:B9:CB
            X509v3 Authority Key Identifier:
                keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:62:aa:2f:71:89:02:38:42:3f:43:ce:a1:00:04:8c:3d:e0:
         12:03:19:5a:b4:d4:ed:68:31:12:22:31:05:49:fa:ba:24:96:
         c1:f3:0f:35:a6:fc:c9:be:80:3b:b2:b2:aa:66:59:30:47:fa:
         d4:c2:44:86:4c:4b:80:b7:da:66:fd:26:d3:df:6d:3b:f7:30:
         c2:7c:c2:4a:7b:c6:3a:10:31:e2:19:b9:6e:65:6e:b8:55:f4:
         e3:2f:34:11:04:6d:a2:6d:b3:2f:8c:eb:82:17:82:a7:5f:b8:
         9b:96:0c:f0:f3:26:5f:53:11:26:2c:2e:b1:a1:52:30:45:ed:
         86:f0:96:a4:48:da:a3:93:76:7d:4b:73:b0:88:ae:e8:e3:bd:
         d8:d9:c8:48:8f:a2:bc:6b:ec:e3:2c:73:53:4f:5c:45:25:e2:
         d4:99:1d:81:98:04:30:7c:e3:15:dc:47:66:da:0a:a7:6c:ab:
         2a:64:22:01:2b:c8:37:ed:1b:80:01:36:83:a8:d6:7b:fe:fc:
         02:e6:a8:4f:85:61:2a:61:12:50:59:fa:b2:5c:dd:cc:35:05:
         f3:f7:4c:40:5f:3f:80:4e:45:8a:71:bd:5c:a7:ea:6d:7c:56:
         f2:ad:6c:f3:3b:24:21:ba:e1:75:22:b5:3e:43:17:c5:9d:b2:
         9d:99:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:27:52 2024 by rpki-client on console-fra.rpki-client.org