Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File:                     D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier:          +3PAykueUWam1XkejUSLHWyxNhiibvCSj2ORefUjQGk=
Subject key identifier:   96:E1:74:14:65:39:25:AC:4C:08:50:83:8D:12:96:76:FA:BF:C1:F5
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer:       /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial:       018F4C7DB21A5E1B4A56F1490733DF184EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number:          1037
Signing time:             Mon 06 May 2024 06:00:56 +0000
Manifest this update:     Mon 06 May 2024 06:00:56 +0000
Manifest next update:     Tue 07 May 2024 06:00:56 +0000
Files and hashes:         1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: ZEfNOtTBAufGzrUOkr5pBDpY5d2gWUcE0OV6MMvofu8=)
                          2: bOntjlufwx7fXskK-v7-QRhNAdw.roa (hash: 2HHoADx4q9Bnzi3PpawLbKRg0kYzfgofRmousErULRw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:7d:b2:1a:5e:1b:4a:56:f1:49:07:33:df:18:4e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
        Validity
            Not Before: May  6 06:00:56 2024 GMT
            Not After : May  7 06:00:56 2024 GMT
        Subject: CN=96e17414653925ac4c0850838d129676fabfc1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:9b:a0:ee:ef:9c:49:aa:b2:a9:c4:97:3a:
                    6e:4d:e5:9b:22:be:da:cd:d1:c1:4e:6f:6c:d0:8c:
                    8e:99:81:9b:5e:b6:ce:c0:fb:72:bc:69:1f:c1:09:
                    95:bb:38:bf:66:69:48:72:b9:39:a1:78:f1:8d:10:
                    10:30:f7:24:4f:ce:76:0c:9e:54:9a:67:21:87:56:
                    04:b9:b9:bf:8c:6f:d4:3f:be:de:cc:bc:c6:d1:a0:
                    1a:70:43:ee:8e:fb:aa:e6:1c:5c:9d:bd:3b:68:97:
                    1b:b6:ae:36:2b:c3:ca:a2:fa:bc:81:ec:a9:63:c1:
                    8b:f8:82:33:69:9a:e1:7a:bb:3f:e9:31:7d:74:57:
                    e7:08:90:75:9f:2c:3a:63:67:6c:94:b4:f5:2d:25:
                    c7:9a:e5:af:0c:18:e3:af:c8:39:d9:ee:b9:3b:c1:
                    ed:36:8f:dc:40:b0:68:9f:0e:17:20:a2:a5:90:3b:
                    64:46:a0:4d:9b:d1:a3:54:60:42:4f:9a:be:30:d4:
                    fa:13:3e:ae:be:af:cf:73:31:09:63:fc:f0:09:5c:
                    c4:21:62:6e:ae:81:74:d9:12:2d:2a:f1:c5:8f:88:
                    11:0f:0f:45:53:94:8d:82:80:e8:22:6a:79:52:77:
                    73:95:6a:eb:6a:d8:ae:92:a2:8c:84:98:8f:e8:96:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E1:74:14:65:39:25:AC:4C:08:50:83:8D:12:96:76:FA:BF:C1:F5
            X509v3 Authority Key Identifier:
                keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:88:7f:1f:e6:20:94:db:3b:7a:7e:90:76:d9:49:6a:dd:41:
         a5:01:4b:09:c2:29:79:09:06:59:18:d6:fe:e5:f2:72:0b:9c:
         60:1c:ce:07:e5:87:45:2c:4a:f7:5c:83:88:56:52:7b:98:6e:
         5e:13:da:9b:7f:4b:c6:6a:92:b1:3b:38:ff:4c:ce:06:4f:15:
         e9:77:68:a2:6f:80:7b:76:dc:5e:cb:63:09:f2:df:90:d0:13:
         8b:d0:b0:7c:e4:11:fc:09:a9:34:80:5e:22:e2:06:c0:03:39:
         e5:4a:37:55:a1:14:74:21:09:4d:f9:5b:8e:c4:b8:41:c5:26:
         54:da:79:0d:a5:00:4e:94:e7:82:79:f9:76:42:c2:62:b7:72:
         c7:9b:f8:32:36:27:13:5d:84:f3:c0:f6:16:62:1e:f9:df:23:
         43:c8:d8:15:4e:bb:b0:dd:72:a2:7e:2f:e1:7d:98:bb:31:02:
         1f:2b:9f:ba:a1:7a:b4:d3:ca:bc:a1:13:9a:4a:44:5b:94:9f:
         ee:e3:63:8f:27:42:20:02:d0:d7:aa:03:64:bc:4f:d3:80:a1:
         a0:f8:90:bf:66:ba:55:bc:e7:ce:ca:41:05:b9:f8:ea:80:28:
         23:33:ed:32:40:00:76:14:37:4a:73:a8:13:55:79:46:61:93:
         9c:7e:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 11:35:20 2024 by rpki-client on console-ams.rpki-client.org