Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File:                     d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier:          Tt9S6kJbaXjG+m6W3zO9d5Y6BhYqJPWn7ZFPvStRueY=
Subject key identifier:   0D:71:A5:DE:AE:11:92:A9:83:89:54:5F:24:34:71:47:C2:82:2B:30
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer:       /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial:       018F874AED1ECC26BA5E64061B1D77C57BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number:          0A49
Signing time:             Fri 17 May 2024 16:03:05 +0000
Manifest this update:     Fri 17 May 2024 16:03:05 +0000
Manifest next update:     Sat 18 May 2024 16:03:05 +0000
Files and hashes:         1: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: usj5o1rFX+C5bNzKD5wDyemQVqfcaCglY4Gvdc9onjo=)
                          2: ytsMBJdU5uJ1LHAaLBtyryc0aGQ.roa (hash: k90qDiuYOLgqw5A8na9uYFSeCS49UjlFHLbTGE8vT64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ed:1e:cc:26:ba:5e:64:06:1b:1d:77:c5:7b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
        Validity
            Not Before: May 17 16:03:05 2024 GMT
            Not After : May 18 16:03:05 2024 GMT
        Subject: CN=0d71a5deae1192a98389545f24347147c2822b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:d5:cb:08:fd:d7:d6:eb:ba:c3:2e:fc:32:
                    01:0c:6d:09:f0:d8:2c:27:27:70:86:60:dc:c5:5b:
                    83:37:70:20:38:ef:9d:fb:94:42:1f:bc:33:f9:d3:
                    4f:e8:2c:f7:55:e8:ec:53:2b:45:d5:52:db:b8:18:
                    d2:3f:6d:99:94:52:55:e9:3f:57:e7:23:84:34:4d:
                    cf:b4:aa:a7:1e:3b:80:5f:fa:7c:8f:26:cd:84:90:
                    cd:60:58:7e:dc:95:a6:c2:e3:c8:77:a7:80:ea:0e:
                    11:fb:26:a6:37:ed:1e:d4:0d:aa:fa:80:2d:7e:d1:
                    b5:1e:be:8b:ff:22:ce:ee:90:1d:ba:80:20:5f:1a:
                    c0:22:3f:36:a6:73:2c:63:a3:c0:9a:72:8a:60:29:
                    ae:18:db:4e:61:d0:10:43:86:ea:4f:5b:2e:30:3c:
                    4a:ef:cc:11:d6:a4:b1:71:bd:58:42:0c:f1:32:e2:
                    fc:ea:e8:76:69:05:fd:47:fe:df:ce:9c:80:44:d0:
                    82:35:5b:a2:1f:1c:b1:63:58:4c:7a:4e:aa:85:89:
                    31:9f:ea:1b:3b:37:e6:ea:85:e1:e1:df:d2:bf:70:
                    0f:4f:5b:7e:23:a0:f2:f1:cf:81:86:6b:82:d1:e1:
                    9f:45:b4:ec:66:a9:f3:8b:20:8f:f2:da:c6:c1:09:
                    22:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:71:A5:DE:AE:11:92:A9:83:89:54:5F:24:34:71:47:C2:82:2B:30
            X509v3 Authority Key Identifier:
                keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:a1:44:52:29:83:26:8a:4d:59:12:ea:a7:32:73:81:dd:
         3a:27:a0:ae:04:5a:01:30:d0:de:9f:4b:96:6f:b4:a8:1b:5e:
         46:1c:dd:bc:65:ba:80:69:05:20:29:5d:22:7c:f9:c9:ea:11:
         5d:3c:01:a1:61:67:7a:d6:72:91:51:c8:59:26:68:aa:69:17:
         a0:4e:e4:1f:6e:50:83:20:12:b0:d9:42:05:cb:60:45:76:ec:
         35:6e:b4:50:f3:01:d4:e3:6b:ea:4a:0b:4a:c5:31:3a:a1:38:
         df:8d:ee:95:b3:e5:36:33:e1:b8:67:73:10:84:1b:06:07:f9:
         b3:2e:28:90:af:c7:a7:97:24:93:84:98:4d:03:2a:58:9c:79:
         14:aa:d4:99:d6:d9:c5:eb:04:60:9e:69:58:2b:f3:64:dd:5d:
         16:20:6d:7b:c5:4b:1b:c0:65:db:b4:b8:bb:09:19:8d:36:a2:
         3a:3a:80:80:2e:99:76:8c:ea:af:0b:80:40:c1:34:da:45:91:
         a9:f6:96:db:13:4f:91:58:71:e5:5a:ad:54:84:1e:63:29:0b:
         54:3e:64:db:44:48:44:52:3c:f0:43:34:68:bb:87:a4:3c:a2:
         26:41:06:54:d7:e8:e7:ca:32:85:78:f5:01:23:91:34:7f:a0:
         a9:14:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:35 2024 by rpki-client on console-fra.rpki-client.org