Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File:                     CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier:          qE0HwYCE4Gf/HITgzBdJ1C5THD09tHf7DSJYibiJp0Y=
Subject key identifier:   2B:F5:14:26:32:E7:EB:AA:73:CF:28:FB:39:8B:F4:2E:BC:B2:A3:0E
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer:       /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial:       01901BFCEB0F8001FDD575C0E2196661A413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number:          04BD
Signing time:             Sat 15 Jun 2024 13:01:18 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:18 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:18 +0000
Files and hashes:         1: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: ovZTjoP9J+fI6oE+OnUEDS5Lv0QlMMqgZbq6SQ1LLQY=)
                          2: a15lA5D1OLi34X1OMtCk0WVlPLk.roa (hash: UIn8uAzaSigNOyDqUMWlXhx3m4Rpkc8kOYoLnoeBanw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:eb:0f:80:01:fd:d5:75:c0:e2:19:66:61:a4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
        Validity
            Not Before: Jun 15 13:01:18 2024 GMT
            Not After : Jun 16 13:01:18 2024 GMT
        Subject: CN=2bf5142632e7ebaa73cf28fb398bf42ebcb2a30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:6e:e7:5b:f9:26:9c:0f:af:bc:ee:13:87:
                    79:40:ee:31:d4:b3:5c:b7:64:ce:aa:36:a8:30:af:
                    d0:d2:16:0c:b9:dc:57:aa:1f:17:b1:a6:ac:2d:c1:
                    27:03:d7:72:bf:38:a2:46:da:5a:6b:6f:4b:23:54:
                    c9:9d:1b:7f:fb:11:d3:d4:03:46:bd:5c:df:1a:de:
                    98:d4:3c:e8:8d:5f:f2:17:91:4f:6d:ad:18:b1:ae:
                    0e:82:64:34:a5:02:b0:93:08:69:f0:25:4b:92:ce:
                    3e:7f:85:e9:3f:19:d4:f0:cf:0a:18:6f:ff:0a:f7:
                    ae:e6:7e:0b:e3:66:94:00:f3:31:ed:f9:5e:cb:38:
                    ec:d7:fe:b9:5b:b9:5e:aa:86:e9:6a:1d:ce:20:20:
                    12:e6:39:26:07:f5:c0:19:1f:e1:f2:13:33:8d:96:
                    b4:ba:5f:5f:f0:77:53:93:1b:a4:f4:ae:56:79:f7:
                    ca:22:12:1d:5f:e1:4a:2e:81:03:5c:6c:63:b0:3c:
                    d3:7b:ad:75:87:df:80:fd:9b:b8:2e:ec:ee:56:00:
                    27:a4:15:dd:db:cb:f1:bc:91:f8:ce:dd:e2:b4:71:
                    ae:2a:98:3a:9e:47:73:f7:ff:13:31:7d:c3:2d:db:
                    01:c6:eb:dd:0d:78:f2:b1:45:cd:2b:1b:94:44:05:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F5:14:26:32:E7:EB:AA:73:CF:28:FB:39:8B:F4:2E:BC:B2:A3:0E
            X509v3 Authority Key Identifier:
                keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:18:d9:48:ef:fe:d2:31:4a:79:8e:df:a7:7d:07:5b:7d:92:
         1d:33:f1:64:45:bd:e9:8e:20:49:cc:63:95:e9:fb:44:d4:c9:
         bf:1b:9a:e2:78:8e:86:21:28:ed:db:b3:b9:87:b6:5f:26:a6:
         7e:42:9c:35:6b:f6:85:b4:be:b0:e3:42:92:cc:74:f4:a1:df:
         9f:4d:7a:70:7d:ae:c8:22:12:d2:f2:03:6d:49:f4:43:67:b6:
         c0:24:81:39:da:55:6b:4d:01:ca:9b:67:1e:27:1e:c3:2b:5f:
         de:f0:1c:62:ed:04:2d:c0:1b:01:ce:9a:90:da:46:05:ca:07:
         92:6b:11:61:47:70:0e:ae:89:1c:12:57:d8:9c:ba:40:ca:bd:
         f7:42:9f:51:03:4e:52:c9:6f:96:f5:ae:57:77:0c:16:05:80:
         2e:1f:c1:91:31:c9:ec:1b:68:88:12:29:a0:94:f7:26:cd:d4:
         d4:67:e1:91:a0:81:b0:58:08:f7:8d:d0:b3:c0:66:c3:3b:c4:
         65:0b:4f:aa:83:1b:eb:69:b3:86:73:86:cf:9d:76:e8:b3:74:
         5a:d1:e6:99:7e:8e:23:18:2f:85:08:26:8e:76:bc:24:c0:f8:
         8d:d1:a4:fc:52:71:fc:01:a8:d7:fa:12:85:95:38:dc:94:25:
         6d:51:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:51:39 2024 by rpki-client on console-ams.rpki-client.org