Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File:                     B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier:          MglxSe73evZ9o7t1W0bGpo3iRmipWjBmsnWAMq/uXA8=
Subject key identifier:   C9:61:28:85:B7:62:42:B1:D7:FD:BF:C9:34:4E:FC:44:74:5B:5C:AB
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer:       /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial:       018F3EC2A142797470E508AB7FD5668671D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number:          1027
Signing time:             Fri 03 May 2024 14:01:33 +0000
Manifest this update:     Fri 03 May 2024 14:01:33 +0000
Manifest next update:     Sat 04 May 2024 14:01:33 +0000
Files and hashes:         1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: tEZJmABUSpi/Iz3R2EETCwhWs/w3VrBXFnSRK/kSK3k=)
                          2: NA5CfdVRavGyvzIuYB1AUg3kKpM.roa (hash: Rl4FmtBt7MmKjplOwNH5ZXEShJZYLw4dWDlTu3bAJ5Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:c2:a1:42:79:74:70:e5:08:ab:7f:d5:66:86:71:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
        Validity
            Not Before: May  3 14:01:33 2024 GMT
            Not After : May  4 14:01:33 2024 GMT
        Subject: CN=c9612885b76242b1d7fdbfc9344efc44745b5cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:16:01:fd:0d:00:66:25:3d:a8:7e:dd:c6:
                    07:a2:bf:9e:d6:77:96:e6:45:c2:f3:ef:f8:ac:8e:
                    46:b2:fc:f5:af:4f:61:12:cd:95:08:03:a0:e8:e0:
                    0c:7b:4d:6d:65:e2:75:af:9b:0c:e9:2d:07:88:48:
                    21:22:66:52:7c:01:3e:9e:74:e4:4e:76:c8:71:03:
                    83:f5:f2:59:72:86:72:61:7e:7a:99:1b:93:be:22:
                    0c:f2:89:9b:1c:f6:45:36:66:43:9b:fd:bc:0e:bc:
                    c6:47:07:ce:91:b5:ec:59:f0:4a:05:2e:c0:10:59:
                    96:b4:8b:53:e1:69:f6:4a:0d:ac:d0:48:7f:7f:ea:
                    59:c6:89:51:ce:54:ce:5e:30:a8:33:7b:ea:dc:e5:
                    00:d1:ad:af:6f:1f:35:42:00:6a:71:f1:7d:39:6a:
                    2c:b6:a9:51:60:46:33:f4:81:35:66:69:97:70:9f:
                    75:4b:24:b0:ed:c3:ea:1d:95:96:9b:d7:41:a6:aa:
                    9f:80:55:a6:1d:ab:cc:89:38:68:47:11:59:f8:43:
                    25:3a:63:3c:b8:4d:0e:d7:b3:ee:56:8e:c3:6c:bf:
                    5a:2e:c5:5f:7c:7c:c1:fa:9b:e3:9b:ff:9d:51:eb:
                    74:53:38:43:75:b7:70:6f:f1:b1:43:2e:16:ee:85:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:61:28:85:B7:62:42:B1:D7:FD:BF:C9:34:4E:FC:44:74:5B:5C:AB
            X509v3 Authority Key Identifier:
                keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:95:2a:18:e4:f0:d1:76:a2:f7:ec:c5:ac:66:78:a7:1b:
         2e:88:94:a9:3b:d9:4f:56:3f:1a:a6:70:42:36:4d:36:c6:65:
         8d:62:d7:da:f9:a1:7b:77:8b:3d:a6:cb:a4:5c:a4:19:82:3b:
         8d:31:99:ed:6f:db:aa:0b:1a:dd:d8:da:8e:7c:8a:07:e9:19:
         3f:f4:e8:a6:86:34:2c:98:49:1c:b4:9a:36:53:20:f5:55:42:
         2c:69:05:f2:59:31:43:97:ff:d0:e5:17:09:32:18:2f:70:6a:
         75:89:66:e0:2d:a7:0b:72:43:3f:2c:4b:7f:00:91:ae:34:4e:
         c5:11:dd:a0:55:34:e9:b6:36:1d:b2:8a:52:96:ca:b7:de:39:
         7c:36:ca:80:71:fc:2a:b8:d5:4c:67:28:e8:ac:c1:3b:1e:00:
         11:91:82:af:8d:7d:f1:60:5e:a4:f4:42:e0:de:99:42:d3:a2:
         4f:c5:76:b1:70:43:e6:9b:8c:97:95:d1:fb:a6:56:9b:cb:b5:
         ab:f3:e8:92:be:1a:f4:ec:cc:5e:93:10:46:16:75:1d:30:95:
         c2:f8:22:29:d8:d4:de:89:04:06:e3:8c:4b:a1:d5:98:97:4b:
         e1:b5:a6:d2:53:fc:c1:2c:93:52:9d:8b:5d:5e:22:d3:67:ea:
         2a:42:8f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 19:33:09 2024 by rpki-client on console-fra.rpki-client.org