Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File:                     1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier:          17P1lPMXOevELdbth9u/jYchrx48hA0ZAOwGeNQdwoo=
Subject key identifier:   F5:C2:C1:D8:0C:CD:B0:9D:66:D3:3B:82:53:69:BC:B5:DF:01:5F:35
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer:       /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial:       018FB3EAB73CC931583702BA77E408D00BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number:          01CD
Signing time:             Sun 26 May 2024 08:00:54 +0000
Manifest this update:     Sun 26 May 2024 08:00:54 +0000
Manifest next update:     Mon 27 May 2024 08:00:54 +0000
Files and hashes:         1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: +zmuSF4k9eTNxFZ2yWchIkRbIqNH+cJ0f1H99uEC86Q=)
                          2: KtolpF3Jwpsic9Ab9A4AZVQYjZg.roa (hash: 5NR2w9qDu7FVpCsMMTMcB8KJgp/Sir1HR9RnAAfDVM0=)
                          3: nP-Tw-ovdTCq15B3-QBJKF11GrU.roa (hash: zifZCLNLSjbaLEQmzHOtEwS992VvBh2c0lTkmk8jRwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:ea:b7:3c:c9:31:58:37:02:ba:77:e4:08:d0:0b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
        Validity
            Not Before: May 26 08:00:54 2024 GMT
            Not After : May 27 08:00:54 2024 GMT
        Subject: CN=f5c2c1d80ccdb09d66d33b825369bcb5df015f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:ab:1d:87:64:12:72:79:12:f8:5d:99:d6:
                    6b:c7:98:be:9c:ce:59:a8:38:94:22:e8:59:09:77:
                    c2:2f:0f:a9:d7:6f:57:3a:ca:21:33:80:30:89:95:
                    b6:6c:44:bb:b2:2a:50:04:b7:6e:50:0a:c9:43:5f:
                    47:3e:51:18:bc:8d:10:ce:ca:7e:37:37:71:17:24:
                    d4:61:f9:05:2f:f7:7e:60:a9:be:e8:50:26:bc:e5:
                    2f:69:dd:e7:57:3c:d8:9f:66:00:81:19:20:0f:3a:
                    2c:bd:7f:e5:87:e3:85:ff:e9:ad:5d:1a:29:8f:76:
                    2f:fe:35:79:15:e8:36:b6:cd:7b:a6:04:1a:6b:a8:
                    d5:ea:5d:29:5e:5d:71:6e:32:3d:ce:01:0e:64:63:
                    b0:56:c6:dd:ae:fb:79:d9:79:4e:fb:a3:e4:18:a3:
                    9b:95:9b:6a:c1:da:1d:ec:9d:e5:c6:f0:75:07:0e:
                    ef:3b:c2:f2:9a:2f:0c:e1:3a:82:22:70:89:31:fc:
                    cc:ce:ea:7a:4c:fa:ea:c9:53:40:98:9d:11:8e:0d:
                    a2:51:3d:60:77:3d:0f:65:10:5b:e2:82:37:16:1b:
                    46:df:90:ec:ed:c2:9c:3c:cb:e0:a3:ba:f8:cc:a6:
                    b3:73:01:28:b9:f1:ef:9d:2f:cd:aa:9b:99:21:c3:
                    e7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C2:C1:D8:0C:CD:B0:9D:66:D3:3B:82:53:69:BC:B5:DF:01:5F:35
            X509v3 Authority Key Identifier:
                keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:30:09:4c:ab:41:c8:3f:fd:bf:20:e0:f5:45:e3:31:eb:2c:
         a0:a6:59:07:a8:66:ca:53:7c:0f:12:a6:b8:d4:25:97:1e:ce:
         25:e0:5c:92:f9:51:27:65:ba:f1:c7:f9:67:58:ce:17:7a:d5:
         ea:5c:9f:97:fb:4e:c1:80:79:57:7d:0c:18:00:10:23:28:3c:
         1b:cf:4c:4e:84:b8:79:54:c8:37:bd:80:33:30:10:c1:8e:ba:
         3c:3b:59:04:5a:a0:7b:f1:2b:4d:ce:5c:11:34:85:16:b5:c9:
         56:67:c9:73:fb:55:c8:8f:4e:2d:e0:9a:fe:09:b4:a7:08:74:
         23:70:a3:14:0b:b4:91:83:4d:bf:f7:36:70:9e:3a:66:71:4d:
         d8:8b:78:b3:c2:b3:14:8d:79:4e:20:3b:6d:aa:11:36:32:79:
         2d:1a:8a:44:b3:ff:7d:5f:98:2f:fe:f1:80:ee:80:7d:13:4a:
         a8:0b:3b:18:2c:21:60:2e:b5:33:5b:15:46:e7:bd:d0:ff:55:
         12:9e:d6:f4:bb:22:49:24:37:5e:9b:99:f2:82:2d:a4:2f:d4:
         f6:4c:fe:41:95:21:9b:27:2f:81:d8:07:71:00:26:eb:78:49:
         fb:b8:d2:3f:92:db:23:e0:6f:ee:48:f0:00:42:02:64:7e:c8:
         71:ae:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:50:00 2024 by rpki-client on console-ams.rpki-client.org