Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File:                     D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier:          H3Mg7M+e3INFfzoSTjhZjJjJs4ivRHt8EnFWYoauYbI=
Subject key identifier:   80:1E:4C:A2:D9:E2:10:12:77:BA:EE:9E:BF:DC:4D:B6:02:75:84:D2
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer:       /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial:       018F5437DD29159839904D24AB3F7BFDEB67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number:          0B58
Signing time:             Tue 07 May 2024 18:01:38 +0000
Manifest this update:     Tue 07 May 2024 18:01:38 +0000
Manifest next update:     Wed 08 May 2024 18:01:38 +0000
Files and hashes:         1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: tNQSP/LS6CgsMA97IeV6GndTLou83MwlSuBZPD/LXdA=)
                          2: vDJkmnQWeh0rQLv8tpU5wEmh3GM.roa (hash: ZBFH3NMHr+6wdOu/wad/9xyUrdMZk4Ie7CHAPyqufVk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:dd:29:15:98:39:90:4d:24:ab:3f:7b:fd:eb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
        Validity
            Not Before: May  7 18:01:38 2024 GMT
            Not After : May  8 18:01:38 2024 GMT
        Subject: CN=801e4ca2d9e2101277baee9ebfdc4db6027584d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:7c:86:16:b5:f9:c8:ec:b5:eb:93:4e:70:
                    ac:5e:e2:59:ef:d8:82:18:0b:9d:8e:37:2d:5a:32:
                    c2:99:7b:05:54:17:be:e1:c5:70:0a:88:2e:11:83:
                    5a:7d:2b:60:8a:32:e1:80:99:b8:7f:f0:b1:82:f9:
                    24:a6:07:8d:33:26:84:6f:d3:42:a5:a9:3a:5e:7e:
                    2e:4b:91:58:d1:fe:51:7b:43:c0:7a:b3:ea:76:05:
                    d6:6f:c4:87:9b:8a:c5:b8:fd:e9:6b:f6:f9:18:05:
                    c2:10:0a:f8:3c:2e:5d:dc:a5:c3:db:d9:8c:c0:d1:
                    f9:97:89:9c:b1:f9:af:2c:b0:08:ea:b5:95:e7:8b:
                    f4:b6:3d:90:54:6b:2c:76:ba:0e:1b:49:3d:f0:4a:
                    3f:48:a6:56:c1:38:1a:14:80:63:84:f8:85:fc:a4:
                    6f:45:ff:13:3d:67:bd:e4:07:a5:c8:af:c0:55:9d:
                    90:c1:0f:a6:a1:be:96:80:12:81:87:fd:7d:5f:86:
                    a5:89:dd:fb:f6:6d:da:62:69:72:11:8c:13:79:9e:
                    45:43:f4:36:d6:6b:7c:09:d3:f6:39:45:bd:9a:66:
                    24:3f:f9:3d:e3:73:2c:cf:25:78:53:91:1a:62:60:
                    bc:7b:ed:93:f1:b6:50:43:ba:01:0e:d0:27:4e:17:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:4C:A2:D9:E2:10:12:77:BA:EE:9E:BF:DC:4D:B6:02:75:84:D2
            X509v3 Authority Key Identifier:
                keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6f:6d:1c:c7:fe:2a:73:37:75:34:43:3c:37:a3:5d:16:fc:
         86:65:39:a0:12:8a:57:67:d5:c1:2b:64:29:fb:c4:2b:5a:32:
         fc:89:1a:4b:9c:e8:1a:3f:1b:b5:76:08:71:14:1d:4a:fc:d9:
         97:58:82:07:b5:46:07:70:9d:e7:75:8d:5f:f0:cc:fa:d2:4e:
         98:01:b3:9c:dc:0f:82:06:b8:3a:2e:f2:17:ce:40:0d:03:60:
         7f:b4:19:bd:76:22:8f:ca:99:b1:2e:d1:5d:b2:e6:c1:d7:e1:
         54:3f:42:0c:17:95:a9:65:b9:19:4b:8b:0c:9e:a1:96:e3:bd:
         19:44:c0:2a:78:be:11:e7:fd:b7:34:64:65:3f:3e:32:d4:55:
         a6:55:09:c1:10:be:38:a4:c4:31:4d:12:38:a5:74:68:bf:1c:
         85:54:9c:14:d8:8c:41:cd:2e:43:01:92:04:36:19:08:99:31:
         af:d6:6f:b0:a1:e1:0c:73:29:cc:92:8b:17:8c:4d:9d:5d:6c:
         21:7e:be:31:fe:7c:e7:e8:82:2f:52:59:c0:ad:47:ac:de:29:
         da:13:0e:1f:49:7c:75:4d:ec:95:c2:c7:cf:e8:e5:53:6b:1a:
         22:cf:5a:96:4b:d4:47:43:58:53:e7:f7:0e:e7:6e:d3:04:f9:
         7c:5f:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:26:03 2024 by rpki-client on console-ams.rpki-client.org