Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
File:                     RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json)
Hash identifier:          YGBjH4hiR/eIptyoe6qeZa4mHLbG4hWp3BTSTGVfrhE=
Subject key identifier:   3A:6E:23:32:E8:E0:DA:1D:83:DB:81:45:31:44:F5:3F:0B:88:AB:B9
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Certificate issuer:       /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial:       01901D45EC4B7C4026B5E4EE226412CBE55E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
Manifest number:          05D2
Signing time:             Sat 15 Jun 2024 19:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:40 +0000
Files and hashes:         1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: oHe0PWBHvwlnWjOuRC06U1FCo8or5BNbmc7DZ+LXQ8Q=)
                          2: gcvCpbE4khZXi9z_8xfPnNSvkmk.roa (hash: RDYX4HENu4pVoDvX9fJGmpKPRburQx/t/S1MMBLGq4Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:ec:4b:7c:40:26:b5:e4:ee:22:64:12:cb:e5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
        Validity
            Not Before: Jun 15 19:00:40 2024 GMT
            Not After : Jun 16 19:00:40 2024 GMT
        Subject: CN=3a6e2332e8e0da1d83db81453144f53f0b88abb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:fe:82:03:38:78:c2:cc:69:f9:04:a6:82:
                    ba:24:f2:ef:04:6c:f5:13:97:59:64:9d:f1:c3:30:
                    38:d9:42:2d:f5:ef:81:e1:8a:da:e1:1a:39:75:38:
                    74:65:85:47:94:ce:e8:42:56:b4:7c:97:3e:7e:84:
                    33:33:d4:42:67:fe:b2:ea:b0:d6:a7:39:ce:b8:27:
                    6b:f1:6e:72:2e:e3:94:27:27:65:24:83:e7:19:89:
                    29:15:51:78:08:a6:73:5c:12:18:01:9f:5a:f4:c5:
                    8b:a5:28:62:d1:50:58:56:cc:9b:50:06:4a:62:3c:
                    99:49:3a:fe:c7:35:27:e5:18:61:c3:b3:c4:a1:fa:
                    24:8c:50:9d:ac:d6:dc:bc:04:02:ec:89:c2:c1:d3:
                    cf:39:68:8a:89:55:c1:3d:0a:cb:56:0f:c0:64:85:
                    db:00:c6:1e:79:97:c8:5b:f5:f5:34:7e:83:e4:87:
                    ea:15:fd:9e:ad:2c:f1:22:3f:6e:3e:a6:10:95:72:
                    e6:03:d2:8c:0b:d9:68:a1:84:0f:60:d8:f6:94:be:
                    f9:d9:a8:32:56:19:77:4d:ca:81:60:6c:2f:ec:83:
                    52:08:0e:f4:c0:5a:c7:c9:88:90:4b:6d:6d:d4:a6:
                    1a:98:97:5a:c7:51:13:06:44:4e:44:b7:2e:77:a9:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6E:23:32:E8:E0:DA:1D:83:DB:81:45:31:44:F5:3F:0B:88:AB:B9
            X509v3 Authority Key Identifier:
                keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:18:59:f8:43:8c:fc:ba:62:34:d2:13:95:f4:2f:1e:72:62:
         07:0c:15:c8:2f:2f:4c:0b:41:e2:40:74:62:21:1a:c6:44:6b:
         77:25:ba:05:9c:f7:28:c1:aa:59:f7:16:5f:05:b3:1a:e5:6c:
         33:51:ae:12:04:b8:64:4d:f6:03:17:01:a0:06:ad:bb:78:e8:
         6f:1f:dd:44:2a:5d:c4:81:60:f3:7c:bd:40:49:1b:e8:e0:5c:
         91:9d:d4:0d:98:22:ce:95:9e:26:73:cb:c1:83:44:c1:fb:0d:
         5d:92:db:6e:bd:1b:56:6a:bd:1d:ca:04:59:ef:16:1c:fb:b0:
         3a:18:9c:d3:8a:0f:c0:9d:2f:7b:87:27:a0:19:4c:d1:2f:88:
         b2:7b:b2:3a:9f:ed:26:e2:95:d5:90:18:66:38:4b:c8:83:d7:
         78:c1:a2:38:ad:66:ea:27:ff:6e:19:df:87:7a:66:08:4e:34:
         b4:6a:93:ad:0f:86:87:12:62:6e:06:c9:d0:22:f5:21:16:a9:
         55:20:81:23:07:49:73:2b:9b:09:9f:cf:80:dc:b9:73:4e:24:
         e2:fe:c9:46:28:55:3c:e1:5c:44:fc:00:e0:2b:c1:ec:d7:3a:
         87:ea:0e:ec:03:a8:e9:29:41:3f:a5:9b:11:dd:65:1b:06:6b:
         ba:e1:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:16 2024 by rpki-client on console-ams.rpki-client.org