Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File:                     0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier:          ilSaoROXkqE0ATEdhd5R6TKkwpKAvow8P9zPRx0Zvt8=
Subject key identifier:   22:E8:08:08:7B:C2:2B:F0:2A:1F:E8:E5:DE:C5:3A:4B:01:D5:7B:7E
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer:       /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial:       018F3C9CCF2C4F3BEECF11FDA9307A6C063E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number:          0554
Signing time:             Fri 03 May 2024 04:01:00 +0000
Manifest this update:     Fri 03 May 2024 04:01:00 +0000
Manifest next update:     Sat 04 May 2024 04:01:00 +0000
Files and hashes:         1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: r7Bi6M70HIx/+wmO3jjdisgJ0vHtz8n3EwLM15zWabA=)
                          2: q6m7NK6FK0sB-sCvgtch4Ed6hLg.roa (hash: DERyLKP5VNG6isDvq1+Dptn/M33LMn5to41DaPS8E8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9c:cf:2c:4f:3b:ee:cf:11:fd:a9:30:7a:6c:06:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
        Validity
            Not Before: May  3 04:01:00 2024 GMT
            Not After : May  4 04:01:00 2024 GMT
        Subject: CN=22e808087bc22bf02a1fe8e5dec53a4b01d57b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:9c:ac:ee:d8:4b:21:65:1d:33:06:f8:f3:
                    2f:67:46:bb:cd:fc:9b:24:07:c0:26:7a:f4:91:bb:
                    cc:ea:58:a3:35:97:ad:93:8e:4d:10:a3:0d:d8:b2:
                    75:2e:35:49:9b:20:85:86:05:5e:b5:0e:66:57:b5:
                    a6:0f:b2:11:cd:55:41:29:1d:ac:c8:0b:9e:a0:60:
                    c2:f8:3b:a6:4f:4f:f1:9d:cb:b6:91:14:d7:1d:ef:
                    2e:56:b6:27:47:97:db:38:e1:f4:fe:9c:61:d5:08:
                    56:bd:c8:21:11:38:f3:85:9a:c8:53:13:9d:28:03:
                    13:c0:d7:bd:44:49:2d:d6:12:41:57:b3:43:4d:26:
                    10:27:8d:28:7f:37:45:d6:37:7b:df:7b:da:cf:f2:
                    7a:73:de:a1:75:51:62:5e:7b:a0:a8:5e:ba:7b:06:
                    0f:54:78:ea:bb:8d:b2:8a:11:a0:47:c8:06:03:5b:
                    c8:55:40:e6:f3:88:1b:10:60:0f:ba:a6:8c:1a:70:
                    07:82:97:15:ac:93:f3:96:d6:c5:0c:28:b4:e2:21:
                    56:5a:51:b0:89:3a:90:4f:4a:d9:5f:85:c1:64:88:
                    17:01:cc:0c:2b:58:18:42:4c:c8:08:b4:8b:72:e7:
                    13:bc:2d:ed:f1:e6:bc:e7:d0:e3:7f:83:34:63:ce:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E8:08:08:7B:C2:2B:F0:2A:1F:E8:E5:DE:C5:3A:4B:01:D5:7B:7E
            X509v3 Authority Key Identifier:
                keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e0:3c:61:54:df:93:f6:ff:c1:a1:2a:f6:de:38:9c:fb:c5:
         ec:27:15:51:8d:34:4c:0c:90:07:2d:7f:3a:f5:90:76:fb:72:
         34:09:47:96:ad:ee:5d:ec:9d:e7:50:2f:ad:5b:49:96:4b:94:
         05:52:83:34:f3:29:0b:65:bc:d0:98:75:44:3c:59:e2:da:ad:
         8f:d3:1c:70:c2:8a:72:9a:22:d9:77:3a:8b:59:b0:e6:12:41:
         55:51:05:77:54:82:b5:30:51:ce:02:6a:e3:4f:50:3b:cd:99:
         80:86:47:00:e3:28:ad:54:20:23:95:24:b0:29:0e:26:86:ed:
         d7:55:3b:b0:ca:1c:f3:c2:1d:57:42:1f:59:75:09:62:bc:01:
         68:d8:5d:d6:09:07:b0:f9:54:27:34:a6:70:de:de:4f:c8:d0:
         de:17:f2:6f:ae:a3:be:06:5a:4c:0a:f7:8f:67:c4:4e:05:4c:
         9c:2c:c3:7e:2e:dc:01:9c:41:8c:a3:89:09:a1:0a:7d:3e:c4:
         6b:fb:22:bd:cd:23:df:7b:03:06:a0:b7:90:57:53:a4:60:8a:
         02:87:cb:e7:91:24:df:fa:85:2b:08:d2:ec:23:13:d7:64:b3:
         53:9f:22:87:41:74:56:00:c3:01:d2:0f:9e:5c:04:be:05:80:
         b3:8e:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:45:20 2024 by rpki-client on console-fra.rpki-client.org