Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File:                     i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier:          TrFZgrsWLxw4Kk/e2AW6egdB0SQgLtAISp4753fnRD0=
Subject key identifier:   2A:ED:F3:69:B3:98:34:1D:25:4B:71:8C:47:55:33:D1:97:19:49:B0
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer:       /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial:       01901A7BB9BDCBC9685418A1F3BF113A1A78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number:          05D1
Signing time:             Sat 15 Jun 2024 06:00:34 +0000
Manifest this update:     Sat 15 Jun 2024 06:00:34 +0000
Manifest next update:     Sun 16 Jun 2024 06:00:34 +0000
Files and hashes:         1: Z9_XzS0tSxM-2rtjcuEnaWksjm4.roa (hash: G9n2GkKJFprTWShacGF+7lBTjRpLFAzNrih76j1fVRQ=)
                          2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: 2dMYQb1kJEhuzMQD1huWABeoUAgB9ydMILGImuVgybw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1a:7b:b9:bd:cb:c9:68:54:18:a1:f3:bf:11:3a:1a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
        Validity
            Not Before: Jun 15 06:00:34 2024 GMT
            Not After : Jun 16 06:00:34 2024 GMT
        Subject: CN=2aedf369b398341d254b718c475533d1971949b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:97:61:76:1d:c1:9c:af:72:99:be:07:41:
                    9c:f3:6d:54:05:00:e6:3a:f5:01:f3:66:f3:4d:7c:
                    ae:4a:5c:15:01:46:15:6b:af:d8:cb:ef:48:65:31:
                    31:c7:88:f6:c3:5e:fe:d8:f7:41:fb:b5:8d:d7:36:
                    5f:60:34:32:85:fb:1c:c3:63:8c:6a:09:ac:07:00:
                    cc:9a:bc:33:45:68:1f:a6:9d:85:6d:2f:4b:dc:6f:
                    b9:eb:e6:74:7e:cb:90:93:98:42:be:d5:9f:d0:e7:
                    97:aa:93:10:1a:04:e6:a0:8c:c2:4e:6d:96:d9:bc:
                    65:4c:3a:97:ed:bf:38:14:99:3e:f1:00:3a:2e:73:
                    8f:54:76:69:c6:2e:d3:bd:c5:0c:86:45:5d:b0:a6:
                    c4:99:2e:d2:69:1e:75:74:10:73:3f:7b:33:70:6c:
                    16:1c:38:b7:b5:44:e2:78:cb:ca:4a:0f:01:1f:85:
                    66:65:51:f2:a9:f2:e8:e9:e1:95:78:56:c7:4a:11:
                    2a:be:d7:f6:c3:fc:db:bb:11:d4:86:bf:e4:3d:8a:
                    6e:5a:46:3a:8e:7e:40:cd:cc:e7:24:dd:a1:1d:26:
                    d9:04:47:8a:a2:7c:68:84:3f:97:a6:40:77:2c:ae:
                    97:a0:66:41:41:0a:4e:84:67:77:dd:89:65:d9:06:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:ED:F3:69:B3:98:34:1D:25:4B:71:8C:47:55:33:D1:97:19:49:B0
            X509v3 Authority Key Identifier:
                keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:5e:4b:b9:b0:6c:d3:03:42:9e:56:58:09:d4:12:53:1c:
         0c:bd:aa:76:65:5a:c5:a3:59:86:e3:9f:9b:a8:be:1e:51:57:
         f9:4a:97:ab:6f:93:d8:08:d9:77:97:33:03:dd:d5:8a:f4:00:
         fc:cb:77:32:57:89:29:53:df:b9:4a:95:c6:6a:78:a8:de:24:
         aa:4e:26:4e:d6:46:65:98:34:d4:99:31:32:75:45:05:48:6f:
         b0:f8:b9:b7:ba:5a:8a:32:e9:d4:a2:34:79:db:1a:b2:b4:c1:
         c1:18:38:6a:e1:aa:ad:3b:16:b1:61:f3:05:8d:c2:83:1b:b1:
         4a:0d:09:e1:be:c2:57:74:6c:e6:42:71:87:3e:a5:57:40:3c:
         0d:79:ff:c4:32:8d:71:98:6d:97:2f:b6:f5:29:5b:ce:97:fe:
         6e:b5:98:df:45:03:73:f5:cc:26:b3:9e:fd:05:dc:5d:e5:e3:
         0a:42:79:97:b7:ae:96:67:77:12:78:46:b0:09:e2:84:a0:db:
         91:6c:ab:5f:d1:ee:12:fb:fe:c9:a3:2c:83:0e:53:29:2a:dd:
         43:fb:63:c6:eb:fd:7d:6f:6c:4c:17:9f:ed:74:83:91:de:97:
         b3:7b:ff:d9:63:7c:92:73:f8:f3:30:26:3a:8e:db:04:21:89:
         8a:06:51:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:27:16 2024 by rpki-client on console-fra.rpki-client.org