Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File:                     2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier:          K7i79RMsvS6s+n5UrMgT5O4AUYgOniFA7r2GfBLNPeM=
Subject key identifier:   33:07:97:07:E0:18:9E:7D:2D:73:F8:2E:D9:09:36:7B:AB:28:6D:28
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer:       /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial:       01901F34CFC3E857812EA27717048C8BDD28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number:          0DB9
Signing time:             Sun 16 Jun 2024 04:01:13 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:13 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:13 +0000
Files and hashes:         1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: AATqvP4ZIhL7y2BB6T8K3unT3bCHKMHtTrtRV6k0fBI=)
                          2: z52VXDGyTEUV4divpmluQ7zXz3g.roa (hash: TfsnREbXLycGRMqsq/0Z2beUA3wAI+++BgyyGIFXCr0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:cf:c3:e8:57:81:2e:a2:77:17:04:8c:8b:dd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
        Validity
            Not Before: Jun 16 04:01:13 2024 GMT
            Not After : Jun 17 04:01:13 2024 GMT
        Subject: CN=33079707e0189e7d2d73f82ed909367bab286d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:68:54:9c:ea:74:d7:bd:cd:86:3d:c4:c2:
                    a3:6b:a6:f8:e5:88:0f:1e:83:1b:29:e0:cc:f9:87:
                    16:19:c0:12:84:ca:5a:71:06:06:be:40:f0:c7:5b:
                    10:24:f7:6a:bd:15:57:da:5c:df:e1:06:f6:21:ef:
                    4a:b4:56:63:f2:52:a3:34:86:97:6f:4a:31:d9:61:
                    b5:03:1b:49:c0:42:43:0d:ed:d8:de:bd:e0:c9:02:
                    22:3b:aa:d3:78:ec:f7:98:15:ed:b4:0d:53:e8:94:
                    13:5d:1e:7f:6e:dd:27:1f:e1:c5:22:a1:88:e3:f2:
                    54:7c:52:6d:64:5e:66:ff:54:4f:bc:d4:6a:dc:6e:
                    82:0d:2b:3b:5b:42:1f:18:3f:ce:8a:c4:3b:75:b8:
                    39:8e:13:c8:98:16:f0:37:1d:ea:5a:43:61:a7:f7:
                    84:1b:21:cf:90:b9:32:d0:ad:c0:f3:39:5f:95:9d:
                    4c:e1:3d:84:c5:e7:2a:1c:c7:50:4c:4e:31:ba:53:
                    67:79:5b:e8:e3:fa:bf:40:6b:ec:25:57:15:04:32:
                    8f:37:ab:c0:e4:34:15:aa:ea:31:9f:cb:b0:8b:75:
                    21:56:36:0a:50:cb:ba:4e:2c:1f:f6:e0:7b:65:ad:
                    65:44:19:0c:e1:bb:d6:29:e5:fe:ff:00:ed:7a:60:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:07:97:07:E0:18:9E:7D:2D:73:F8:2E:D9:09:36:7B:AB:28:6D:28
            X509v3 Authority Key Identifier:
                keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a7:0a:68:de:df:57:44:8c:de:56:bb:01:d4:2d:eb:bb:62:
         d3:9d:e1:37:41:ff:b9:16:8e:a7:30:05:b5:23:ae:7a:2e:d6:
         d3:44:6a:59:43:33:68:8d:93:0b:d9:fd:25:97:06:ac:54:d7:
         dd:5b:92:7d:e8:8c:0a:0f:37:75:8b:db:a5:8c:78:9c:49:60:
         8c:40:0f:33:66:96:21:23:44:58:1e:c5:fc:e3:89:29:4b:71:
         66:c2:80:f4:69:e0:a0:5b:31:5e:04:05:8e:0d:0e:0a:6e:b0:
         ce:dc:9a:25:84:eb:e8:40:7c:70:2b:91:b0:cc:80:50:d2:65:
         8b:ee:b6:5d:c2:38:41:5c:c1:2c:c7:2a:aa:e3:6b:5c:bb:c7:
         77:e4:e4:64:7b:ed:1a:db:75:86:bf:b6:5e:97:fe:1d:b3:5d:
         8b:31:51:35:fe:09:68:45:f2:86:b1:98:5a:08:5a:d8:13:f2:
         58:52:af:f0:b4:18:eb:74:f9:66:89:c0:43:3b:54:79:6d:bf:
         53:12:8d:0d:a7:3a:6d:a6:40:9a:41:41:40:b7:b2:aa:f0:24:
         7f:98:29:6a:ff:50:9c:e3:e4:d3:d1:a5:f6:1c:50:07:8c:a8:
         91:fa:10:ba:4a:38:01:c6:00:eb:a7:13:a1:be:6d:fc:31:ac:
         37:78:cd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:35:22 2024 by rpki-client on console-ams.rpki-client.org