Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File:                     dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier:          n+QNHLL1kpxK+CtR1QG15p0bg35/mzrvyJVZtmVVwsM=
Subject key identifier:   B0:AE:E7:76:B0:B0:E1:C0:93:84:5E:6E:57:98:B3:C0:A0:59:2D:65
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer:       /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial:       018F6A52D1DE2C716982DCCC327362D86484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number:          116F
Signing time:             Sun 12 May 2024 01:02:43 +0000
Manifest this update:     Sun 12 May 2024 01:02:43 +0000
Manifest next update:     Mon 13 May 2024 01:02:43 +0000
Files and hashes:         1: Pkh9Gq5RtL3DJ7LKJyHpMSbW8Wo.roa (hash: +EFcCzSSPEHdejmzwh6R4E0f2/7MJ93UUlD5525RfZ8=)
                          2: S9_aEzIET9Tl2hp9m5pRg183KsU.roa (hash: 9m6tHjFEEuvSIfG+FMLnPi7J/36F9zimXFG5478uO0I=)
                          3: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: skrCHRrrCWtO12TWHeVnnbspPANPr/A30yoKx6E7N1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6a:52:d1:de:2c:71:69:82:dc:cc:32:73:62:d8:64:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
        Validity
            Not Before: May 12 01:02:43 2024 GMT
            Not After : May 13 01:02:43 2024 GMT
        Subject: CN=b0aee776b0b0e1c093845e6e5798b3c0a0592d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:0a:e7:14:92:63:e2:77:59:fc:fc:8a:ee:
                    15:73:1b:50:0a:c9:12:7f:4c:22:06:5c:8e:39:3e:
                    d7:c0:2d:fb:d7:b5:eb:d1:03:99:29:1f:08:69:1b:
                    2e:dc:c4:70:61:46:17:a1:42:c2:81:77:e5:0e:d9:
                    39:e8:73:93:1f:49:1b:83:e4:a9:34:c9:9d:6b:a8:
                    d5:c1:24:c0:d8:5e:cf:3f:cb:53:21:9f:6b:6b:b8:
                    19:70:49:8a:63:cd:3c:e2:d6:78:9e:3c:9e:16:bd:
                    09:8e:f6:36:d2:57:0e:c0:1d:e1:e4:e8:76:6a:be:
                    91:0c:4f:5d:64:2a:a1:40:b8:d5:2f:c5:88:b1:b8:
                    24:f2:93:78:54:36:c7:07:6f:94:25:c1:67:a3:a6:
                    d1:0d:6c:fe:15:18:d3:31:b9:fc:bc:0b:2c:67:a2:
                    2c:8b:a3:02:b8:06:0f:50:1b:6d:ec:60:a5:b9:4f:
                    e9:65:8b:ec:83:84:44:d6:73:de:2d:4a:39:86:66:
                    c9:b0:6b:11:56:e5:09:a7:0d:80:e3:c7:29:bb:63:
                    74:81:cc:ca:06:a6:3c:b2:d8:b4:c1:1c:6d:b8:83:
                    3f:81:2f:bc:39:fa:4b:a1:50:15:16:68:fe:4b:cf:
                    2a:e7:40:f0:81:d0:f4:4f:80:8f:54:de:35:31:78:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AE:E7:76:B0:B0:E1:C0:93:84:5E:6E:57:98:B3:C0:A0:59:2D:65
            X509v3 Authority Key Identifier:
                keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:83:a0:f4:de:2f:02:50:3a:ff:d6:00:88:10:4b:d3:99:a4:
         dd:db:48:ef:2a:83:79:84:41:fe:ed:1b:65:87:3e:a6:09:da:
         f2:97:26:30:eb:19:92:8d:4c:49:b2:40:d4:26:3b:3f:63:96:
         a7:0f:44:f7:7f:bb:1b:a0:a9:8c:4e:24:dd:9c:9a:35:23:1f:
         1c:86:a7:a9:f6:37:37:8d:18:72:89:bd:ff:cc:69:d2:cc:a3:
         6f:d1:f6:f5:cf:8f:1c:22:09:ff:d9:d4:91:4e:78:cd:a3:69:
         f0:3c:a2:1d:da:4d:d6:2e:6f:d6:b1:25:de:bf:48:98:b8:21:
         e1:90:7b:18:4d:7f:d1:75:c1:1f:4f:c8:48:80:57:e1:c9:a0:
         56:75:0f:90:41:df:40:3f:f6:2a:a1:e0:a4:41:a5:89:e9:25:
         dd:fd:88:b3:f5:72:04:65:7b:e4:32:aa:00:e6:bc:c0:98:0d:
         d5:e3:56:27:c7:e5:b9:f1:ec:7f:06:f8:03:c6:ee:b0:c4:eb:
         4a:b7:c7:37:7e:a8:98:ba:ad:50:b1:58:76:3b:94:48:fe:42:
         b3:1b:80:c8:e5:93:52:2e:0c:e6:73:22:b8:24:a5:58:de:56:
         fc:fe:a7:3b:2f:fb:6d:b3:b8:1a:3f:79:da:1f:40:81:1f:c9:
         63:f8:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 03:35:14 2024 by rpki-client on console-ams.rpki-client.org