Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File:                     CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier:          lu/As0hQYJ542UR6olHdBB/oip5/ElVhoDXOOnjHUv0=
Subject key identifier:   22:45:17:BE:87:75:BF:07:C3:99:5E:1E:B1:E3:73:4A:62:30:8E:76
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer:       /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial:       018F47FCA89A943F47D784240D9B976F8ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number:          0C87
Signing time:             Sun 05 May 2024 09:01:31 +0000
Manifest this update:     Sun 05 May 2024 09:01:31 +0000
Manifest next update:     Mon 06 May 2024 09:01:31 +0000
Files and hashes:         1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: KA0sY6Ljh3/lD9FZKbimETS9/CwReOClJsDKOFu6QbY=)
                          2: km9tLek0zvYwuUXNwBpmIAxeIME.roa (hash: 8ok4LK4wYi/aUVmvyUxG+WG0c2pSSdCz7xY6Qozo1vc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:fc:a8:9a:94:3f:47:d7:84:24:0d:9b:97:6f:8a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
        Validity
            Not Before: May  5 09:01:31 2024 GMT
            Not After : May  6 09:01:31 2024 GMT
        Subject: CN=224517be8775bf07c3995e1eb1e3734a62308e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:68:18:77:25:aa:4b:1e:1e:bd:e6:d7:cb:
                    c8:35:4f:f2:94:69:ad:51:d2:64:1e:f8:a8:e0:47:
                    b3:ef:9a:59:0a:1d:39:1c:f5:4b:7f:ae:e8:8d:89:
                    12:f7:e3:b5:25:44:99:24:4f:84:74:32:54:cf:6c:
                    c4:a7:30:1b:24:36:bc:c0:29:d4:a0:dc:d6:9b:8a:
                    7c:27:fc:72:bd:3c:68:d5:a4:fa:2e:ee:8e:fc:17:
                    92:e1:b9:d0:e6:01:9a:ed:9c:4c:24:d8:2f:e2:73:
                    bc:83:e3:18:73:17:0e:c7:97:3d:6b:83:a3:29:3c:
                    bf:0b:ce:1a:c1:bf:ca:87:36:50:7a:eb:ff:e9:e9:
                    ed:d8:ce:ac:44:50:f6:98:4f:ef:8e:20:20:1b:ef:
                    9e:94:b1:95:c9:0f:3d:b0:1f:bf:34:30:38:98:53:
                    f2:0f:6b:01:2b:e2:8d:ca:69:03:ad:9f:7b:80:62:
                    d6:3f:a2:28:3b:7a:4e:27:87:a8:8f:5b:30:60:5a:
                    74:8b:5c:72:bf:b0:56:b6:e7:59:13:0b:c1:40:08:
                    2e:a0:63:f9:1e:55:fb:04:ba:1e:b8:dd:46:fd:ac:
                    92:ee:da:b5:27:21:48:07:07:a7:8d:66:c9:2f:36:
                    de:a8:4d:a5:87:65:af:a5:39:40:93:58:f4:c0:e2:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:45:17:BE:87:75:BF:07:C3:99:5E:1E:B1:E3:73:4A:62:30:8E:76
            X509v3 Authority Key Identifier:
                keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:be:0d:79:54:93:ff:5b:5e:cb:71:db:2a:34:c7:4f:bc:7e:
         99:c3:eb:30:88:7b:68:37:f1:db:d3:3c:e0:5e:e8:04:d2:22:
         1f:1d:47:3d:bb:b7:cb:81:29:35:39:c2:7b:c0:1d:52:0d:2f:
         7f:74:b9:12:63:db:1f:6f:5d:a6:d1:08:ea:84:af:d2:36:03:
         df:ae:f3:81:94:86:ef:ed:32:f8:82:a8:80:8a:32:b4:a7:5e:
         0e:f6:53:b6:a6:2d:5b:4a:53:ea:88:7a:1d:10:ad:d4:6f:7d:
         50:7b:4f:5b:58:2d:0a:e4:20:e4:f2:47:94:e0:14:99:76:85:
         a6:08:84:83:da:8c:ea:07:aa:e7:aa:51:c4:c5:9c:97:38:56:
         bf:78:d7:12:5c:1e:71:b1:32:04:55:d8:ea:8f:57:c8:ae:f8:
         86:fa:67:a6:ff:c6:b6:71:29:c4:1b:ff:a7:23:18:c2:92:01:
         f7:a3:2a:a8:e0:41:d1:db:de:6a:11:f3:06:cb:89:c4:71:a8:
         2c:b0:50:1e:53:80:c0:b9:8e:5a:bd:75:e1:15:08:1a:bf:06:
         d7:9e:d5:53:44:bc:f0:99:00:84:96:90:a2:f0:3e:ba:0c:66:
         cc:a9:e6:43:01:a8:9e:0a:57:35:e1:fd:08:de:d2:e4:22:16:
         ef:ab:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:07:51 2024 by rpki-client on console-fra.rpki-client.org