Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File:                     MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier:          3Bu5v7/jyfLjTHx0SQ896BAy9500nmlYENA6JIu9F8E=
Subject key identifier:   30:92:40:E4:28:92:61:3E:F1:E5:80:F7:51:C2:D5:0C:63:02:3D:4B
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer:       /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial:       018F87493B452002383F8935E8F1673D8FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number:          0B51
Signing time:             Fri 17 May 2024 16:01:14 +0000
Manifest this update:     Fri 17 May 2024 16:01:14 +0000
Manifest next update:     Sat 18 May 2024 16:01:14 +0000
Files and hashes:         1: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: BW01NGFxxq9sQvaNCxUpC+gxVv4orZXg5PPgyNwX/KY=)
                          2: yUyDMb6cwez1T92T9dY3ck3Rc-s.roa (hash: w9dU0AbssHRAg90Z40VKWU/fttxtn95TeGRSC+zPBfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3b:45:20:02:38:3f:89:35:e8:f1:67:3d:8f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
        Validity
            Not Before: May 17 16:01:14 2024 GMT
            Not After : May 18 16:01:14 2024 GMT
        Subject: CN=309240e42892613ef1e580f751c2d50c63023d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:61:1d:36:3c:05:71:d5:fd:4d:d3:18:4d:
                    3c:07:a6:66:10:bd:9f:e9:56:20:21:4f:aa:88:a9:
                    9b:4b:79:d2:64:b9:3e:59:c7:03:7c:ca:31:15:25:
                    a1:76:38:49:01:7a:93:f6:5d:a2:41:fc:8e:2a:13:
                    d3:42:91:77:43:59:c4:0d:eb:1f:87:f0:fa:11:43:
                    31:7c:b3:9f:38:67:cb:c2:2c:40:79:25:99:48:cc:
                    c9:e9:ec:c2:17:c5:e3:50:0a:9e:21:99:ee:2b:6c:
                    22:3e:d7:1f:e1:ab:69:6f:43:10:d0:47:22:7e:30:
                    89:27:50:a1:a9:e0:b2:a9:c5:6c:70:85:5b:64:b6:
                    2f:59:9a:bf:28:e4:73:99:46:d6:66:09:0f:ec:cd:
                    24:94:08:6e:23:b7:44:85:f3:7f:27:99:e7:8a:f6:
                    ed:4d:ee:fe:fa:25:c3:1f:be:22:90:81:57:02:a9:
                    64:ab:98:18:71:9e:23:a2:c7:f1:86:8e:0d:71:ed:
                    37:5b:6b:96:a2:86:fc:61:39:33:c8:18:25:e1:92:
                    85:83:c7:42:bd:95:48:1b:66:cc:ad:c2:4c:62:3e:
                    31:b0:c3:05:92:5f:2c:9e:6d:fd:3e:57:22:00:9d:
                    9b:d9:36:d7:09:c2:cd:bc:9d:a2:c3:fe:3e:ef:0e:
                    2c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:40:E4:28:92:61:3E:F1:E5:80:F7:51:C2:D5:0C:63:02:3D:4B
            X509v3 Authority Key Identifier:
                keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:cc:a7:d6:4d:8a:00:be:89:b1:8a:11:87:72:68:b8:ff:
         07:eb:01:78:68:06:7a:d7:fd:23:1d:61:8d:49:e0:60:cb:73:
         1b:07:83:cf:36:76:35:3e:c3:dc:86:54:4d:43:65:da:7e:92:
         3e:67:c1:2f:f0:c4:4b:dc:a0:64:17:7c:28:76:91:7c:ab:a5:
         51:f6:3d:da:32:8a:48:bb:c7:ab:a7:39:ca:f4:0b:c2:c2:62:
         14:dd:4e:cb:76:a9:74:3d:0d:27:c0:db:57:71:13:53:9d:90:
         99:49:e1:d2:c6:c1:d4:c6:56:7f:e0:39:4e:3b:b4:76:8e:d5:
         dd:ca:59:f4:4f:43:10:06:a8:d6:b8:0c:4f:de:07:be:8b:51:
         15:e6:e7:5e:bf:ff:8f:be:f2:7d:cb:a9:2a:11:2a:32:58:b7:
         3d:b7:32:fa:c6:60:a0:9f:9f:5b:c8:60:90:9a:59:34:05:a1:
         be:81:17:41:a7:b3:20:67:0c:d2:b9:b8:97:ef:e2:b4:ca:fb:
         62:1c:61:6c:63:af:38:02:d4:ff:3a:6e:23:61:fe:b1:51:c7:
         20:ac:91:67:5a:67:59:b4:fe:f3:c5:ac:66:cc:18:60:cf:77:
         3b:05:89:33:14:0d:8b:67:33:08:f3:e7:37:50:3a:5b:2f:a6:
         35:19:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:43 2024 by rpki-client on console-ams.rpki-client.org