Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.mft
File:                     M1Ul9eUbYi_f7nMM2ozaMRtEAN0.mft (raw, json)
Hash identifier:          Uf8HmFyrzVcWi3VwnBP4/eGmqdMBziIa+/wZL8hdFZs=
Subject key identifier:   4B:56:2A:5C:37:D6:EF:70:1B:21:EE:71:23:32:97:EC:54:0C:84:55
Authority key identifier: 33:55:25:F5:E5:1B:62:2F:DF:EE:73:0C:DA:8C:DA:31:1B:44:00:DD
Certificate issuer:       /CN=335525f5e51b622fdfee730cda8cda311b4400dd
Certificate serial:       018F87B62326D6F4BBB905D9A79491399AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.mft
Manifest number:          0C92
Signing time:             Fri 17 May 2024 18:00:11 +0000
Manifest this update:     Fri 17 May 2024 18:00:11 +0000
Manifest next update:     Sat 18 May 2024 18:00:11 +0000
Files and hashes:         1: M1Ul9eUbYi_f7nMM2ozaMRtEAN0.crl (hash: hG/10aL+bKPyNMIkeFd5+LtWIzXXJv2h+SAzwDLf5K0=)
                          2: gy9B-YTVou1lA7o-iY7fVa3s69k.roa (hash: dpyNEoOkVBt+26I1bEcjr/52W7c0cPIoh6B3guizo7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:23:26:d6:f4:bb:b9:05:d9:a7:94:91:39:9a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335525f5e51b622fdfee730cda8cda311b4400dd
        Validity
            Not Before: May 17 18:00:11 2024 GMT
            Not After : May 18 18:00:11 2024 GMT
        Subject: CN=4b562a5c37d6ef701b21ee71233297ec540c8455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:15:4b:7a:f8:ea:0c:e2:c8:8c:bf:0f:a6:
                    09:25:8f:3e:55:43:3e:49:d5:4a:19:3a:fa:22:94:
                    88:0f:5b:de:74:ee:32:e3:f4:2e:87:da:94:72:17:
                    ea:c6:86:ba:17:14:38:ab:83:b2:18:8b:ab:e1:eb:
                    ac:9f:cc:59:d6:6c:20:80:ff:f1:5b:f6:11:a6:34:
                    f1:d6:a2:0c:5c:cf:6b:77:b8:86:c3:76:a8:12:91:
                    e4:0a:70:35:78:02:3b:80:43:cd:ce:1e:b6:22:d6:
                    63:48:4e:60:1a:c0:a7:7f:36:f3:27:f3:f8:58:a9:
                    33:d2:4b:d8:a6:9a:1d:b8:3e:94:43:49:d4:f8:81:
                    4a:1e:f2:3a:5f:7a:c9:43:a7:b0:fd:6b:1d:a7:58:
                    bc:7d:a5:95:78:a0:28:20:4b:b8:86:df:47:a3:ba:
                    16:bd:1c:5f:26:cf:07:7c:4e:4b:35:23:e1:b6:12:
                    2c:86:54:72:23:95:73:0f:c4:4d:b7:08:f6:9c:1f:
                    df:b1:cd:5c:dc:cd:44:7a:d5:27:0d:48:8b:c1:47:
                    6f:fc:e1:a6:fa:3f:ab:70:29:69:22:b0:a1:49:4d:
                    4c:9d:23:0c:d2:2b:ff:3a:8e:8e:86:cc:66:f7:77:
                    54:84:4c:be:b4:25:af:d3:1d:b9:b9:f9:41:62:29:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:2A:5C:37:D6:EF:70:1B:21:EE:71:23:32:97:EC:54:0C:84:55
            X509v3 Authority Key Identifier:
                keyid:33:55:25:F5:E5:1B:62:2F:DF:EE:73:0C:DA:8C:DA:31:1B:44:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3040df-768d-4c70-9aa0-011ba072f42c/1/M1Ul9eUbYi_f7nMM2ozaMRtEAN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:32:22:4e:d2:92:4a:4e:06:5f:06:bf:76:5f:ba:f4:ad:8a:
         09:8f:c3:07:03:63:82:37:ab:71:1f:23:24:df:7b:3d:cf:bf:
         28:75:d8:7d:6f:01:0e:f0:1c:44:a3:a7:82:76:d2:98:81:81:
         1d:ef:a1:ae:e3:86:2b:fc:a1:5e:ca:63:7d:4e:a5:f3:9a:84:
         54:2b:22:10:87:f3:00:2d:8f:c4:5d:46:98:a1:58:fe:8b:00:
         13:20:c8:86:54:94:0a:23:32:19:95:90:71:6b:40:e9:b8:3c:
         0d:24:18:10:2a:fb:00:7e:19:7c:69:4f:47:64:b0:ec:7c:66:
         ed:7c:5e:da:41:a4:e9:c0:a0:cd:32:a0:16:be:79:1a:21:af:
         22:5a:45:1e:d9:e9:f4:00:aa:4a:7e:7b:bd:68:0e:cd:3c:89:
         59:ed:35:96:5b:76:35:41:93:80:af:64:82:16:01:0c:bc:94:
         0b:24:c0:f5:d7:45:d4:df:7d:2f:cb:38:4e:1a:7c:da:4b:96:
         bb:72:27:fd:ed:b7:6a:ab:28:ec:6e:20:46:3b:64:dd:36:f2:
         ae:52:99:89:f5:af:b5:4d:e8:e5:0a:08:b2:ce:76:96:6b:d2:
         b7:af:d6:e3:84:48:6b:9d:45:6e:ce:ac:82:3a:28:7d:e1:a1:
         ff:62:b1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:51 2024 by rpki-client on console-fra.rpki-client.org