Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File:                     Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier:          5M5BnE7meBpUX8p+SK7UP3Evl4ylUticBWvLSYi3oj4=
Subject key identifier:   D3:3D:D1:C9:A7:20:7F:8C:ED:E2:60:01:61:D6:4C:06:2D:EF:68:5B
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer:       /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial:       018F4A5863AF57F7B3BF2607D2E44895156C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number:          05EC
Signing time:             Sun 05 May 2024 20:00:57 +0000
Manifest this update:     Sun 05 May 2024 20:00:57 +0000
Manifest next update:     Mon 06 May 2024 20:00:57 +0000
Files and hashes:         1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: /XQjVMSewl+utxv/Q8S1gZ8pZ/YtFyz9Mq/IBbBq1jM=)
                          2: Nou2v65yKwZmGWmAI2ONLFJ-kXY.roa (hash: 2SF5ZuTx0XWoiUlz1Xvuzp0dqQx1rPJI5GYLE0yvi7Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:58:63:af:57:f7:b3:bf:26:07:d2:e4:48:95:15:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
        Validity
            Not Before: May  5 20:00:57 2024 GMT
            Not After : May  6 20:00:57 2024 GMT
        Subject: CN=d33dd1c9a7207f8cede2600161d64c062def685b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:4b:cc:5f:f9:c3:56:80:7e:7a:ce:c1:20:
                    f3:6f:66:a9:2f:fc:d3:72:e2:b1:5d:aa:44:ed:e4:
                    95:f8:c1:49:6d:9e:01:0d:a9:b7:2c:ba:80:fa:94:
                    7e:41:38:c6:9d:03:98:79:94:3e:18:5e:44:ce:4a:
                    bc:a8:d6:0c:d4:b2:c4:31:c4:07:a5:94:00:4a:b3:
                    9a:d9:17:09:8c:7f:c3:79:13:72:6e:d1:b0:b5:36:
                    c5:e9:5a:57:b7:98:88:c1:b0:ea:a9:aa:d6:b3:ed:
                    a2:19:5f:71:c0:f8:a6:33:3e:c7:f5:be:07:c1:40:
                    22:80:69:87:8a:39:3e:81:36:ac:74:36:b1:24:ef:
                    96:1f:43:13:9a:d0:cb:b3:48:47:96:3c:8a:5f:a2:
                    28:9f:cd:a6:20:ef:46:40:f4:1a:43:8c:e9:57:f3:
                    5a:08:ae:8c:4b:6a:c5:15:53:44:da:8e:8f:af:38:
                    fa:70:36:a0:ea:e4:19:f0:ab:9e:64:d9:64:17:f9:
                    87:45:22:a2:db:a7:f5:e0:11:e7:21:4c:fe:a6:80:
                    ba:43:a2:8a:ba:e0:c4:02:2e:70:d1:fe:78:eb:66:
                    2f:4a:e8:49:2e:4c:c5:74:5c:03:5a:b1:13:4d:42:
                    38:6e:c3:81:37:52:9b:a9:11:f2:8e:e9:91:64:1a:
                    e0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:D1:C9:A7:20:7F:8C:ED:E2:60:01:61:D6:4C:06:2D:EF:68:5B
            X509v3 Authority Key Identifier:
                keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:cb:1e:80:1d:b2:e0:74:87:55:04:f7:ce:ff:3f:38:52:e6:
         ec:cf:df:c8:03:68:21:71:84:23:91:34:59:71:4e:99:17:50:
         46:b9:2d:c5:b5:59:21:2a:f9:da:52:ef:be:18:36:3f:91:2c:
         a0:45:5e:48:2f:36:e8:2c:c6:8c:ca:32:5b:26:61:52:3d:c7:
         b2:31:cb:72:32:33:2d:23:a0:59:af:3b:61:e9:11:7e:19:0d:
         9f:01:e2:90:49:be:76:d9:78:39:a9:46:2d:b8:14:d1:d2:17:
         8d:c7:46:0c:2a:64:fa:35:a2:2c:e6:dc:4b:71:0a:c6:1e:4b:
         00:ef:47:6a:08:7a:ca:d1:44:a0:dc:7c:57:08:bd:26:7c:e3:
         03:44:bb:60:b6:b1:46:56:07:74:c2:d5:f0:c7:6f:ed:1c:87:
         e9:6a:29:b3:72:b9:81:21:9e:2e:43:fd:3e:35:85:0b:4e:d7:
         86:ed:7a:4e:6b:bd:ec:aa:19:18:95:b1:34:8a:c0:5d:a9:99:
         3f:19:a0:14:bb:91:97:eb:65:96:31:2a:42:b8:59:49:65:92:
         48:c0:01:14:56:31:ee:f1:b1:a0:2f:5e:84:a5:1c:04:93:bf:
         63:7d:f0:b7:09:de:ca:f1:c1:7f:f7:f0:47:15:20:56:09:6e:
         fb:2a:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:24:35 2024 by rpki-client on console-fra.rpki-client.org