Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File:                     siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier:          D4SK2CythDYkTFYuRNryjsfAKw6pfVLIYJyTTzHyMNI=
Subject key identifier:   B6:F6:6B:54:E0:87:44:A9:1E:10:BB:78:EE:AD:31:3F:26:2E:A8:B9
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer:       /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial:       018FB4222F242A272F9CA08958BB05C984E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number:          A6
Signing time:             Sun 26 May 2024 09:01:30 +0000
Manifest this update:     Sun 26 May 2024 09:01:30 +0000
Manifest next update:     Mon 27 May 2024 09:01:30 +0000
Files and hashes:         1: LBbvLSAUlEuG01rn5vP0JXY9KXY.roa (hash: ha+9ZI2lrny2NKu+Mi6OEqV8WZ3Wr1xJK3RHW0oAa/4=)
                          2: M5avupBoG4ZnMItchDzfP1XNufs.roa (hash: 00Yc8FeK5s++MrLFXhqwsNitSHhHTgpK5QgWnPs/mCo=)
                          3: YuMXvy_LCmr_ye1cim7RQj7lOKI.roa (hash: DVH4Y32ek8o9A73j4/n91w2wrdS5sz4XtEeISxuj8vs=)
                          4: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: lORtfAw4EArdefJQd4aVdWyAL51atIU0IXNhL4XDNnw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:22:2f:24:2a:27:2f:9c:a0:89:58:bb:05:c9:84:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
        Validity
            Not Before: May 26 09:01:30 2024 GMT
            Not After : May 27 09:01:30 2024 GMT
        Subject: CN=b6f66b54e08744a91e10bb78eead313f262ea8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:07:47:68:66:f6:06:1a:27:ec:91:72:cc:
                    a8:4e:8b:f0:d4:d8:e1:54:44:73:85:9d:80:35:82:
                    ba:fe:f4:10:22:a3:65:7f:ca:3b:2b:dc:cf:55:f9:
                    23:be:43:5d:4c:d7:f5:b6:03:66:83:77:a0:f3:56:
                    9a:16:f6:05:0e:14:87:55:48:1f:b9:79:32:c5:7e:
                    25:0b:13:8a:77:10:0a:9f:32:9f:06:ec:7c:77:16:
                    fa:6d:e2:8f:40:7c:88:68:4b:e3:84:9c:d6:50:2e:
                    b6:1f:d1:09:b4:ce:ed:f2:b3:d7:d7:5f:bf:17:bf:
                    7d:37:45:80:a6:d7:0e:72:64:60:1d:e9:21:4f:12:
                    6f:5c:2e:44:2d:fb:31:a3:c8:56:a6:0e:7f:6e:30:
                    41:21:47:40:ae:92:9f:a5:52:54:af:dc:81:57:ae:
                    d6:d6:0e:fb:f5:8a:c4:aa:44:bb:1b:d6:6d:94:60:
                    f8:d5:ec:a0:f5:6d:2c:bc:07:23:89:f3:82:93:fb:
                    5c:fd:a4:94:08:9e:52:9f:06:2c:31:82:7c:86:7e:
                    3b:92:50:72:c2:53:7a:70:14:81:fd:a6:0a:1d:e8:
                    ad:f3:29:37:60:47:b1:44:18:a9:24:29:aa:96:95:
                    12:58:f7:20:a1:1a:04:7b:ad:f4:83:cf:5b:81:d5:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F6:6B:54:E0:87:44:A9:1E:10:BB:78:EE:AD:31:3F:26:2E:A8:B9
            X509v3 Authority Key Identifier:
                keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ce:bf:7b:a1:25:65:63:a1:5d:f9:16:1b:cd:49:ef:fa:cc:
         79:ac:58:81:09:4f:94:73:86:60:89:f8:cf:cd:ec:f3:f3:74:
         fb:62:ba:09:35:86:0a:f4:90:05:e4:c8:5a:4d:5d:c8:fe:bc:
         06:dd:c0:b4:9b:d2:74:64:d0:d0:8e:a0:a8:c9:3e:dd:03:b6:
         a9:58:d6:09:80:98:b6:b0:ef:7c:19:a7:e7:59:79:41:f9:7f:
         71:55:df:5a:3e:42:f6:6b:52:3d:1f:4c:5a:c5:fb:51:2a:a1:
         34:68:73:a6:65:58:23:ca:d7:f1:a3:39:53:2b:e5:78:7f:ba:
         52:b1:19:f6:51:61:1f:77:8f:d4:58:14:e8:69:2e:a1:c4:00:
         16:86:3f:31:d2:a5:fe:6d:b3:f5:2c:61:27:8b:65:8d:8c:a0:
         47:b2:34:f9:dd:00:8f:3d:d3:03:ab:62:ac:b5:b0:3e:fa:3d:
         f7:b1:3b:43:8c:e3:e1:90:91:24:e5:a8:76:6c:8b:9a:19:65:
         0e:15:a5:04:74:f7:7a:0e:c7:1b:d2:3c:84:eb:bc:88:b6:76:
         0a:ee:68:f3:0f:20:63:bb:e8:be:0c:e5:68:e0:71:6b:06:9e:
         52:ed:47:af:d7:3f:61:b5:5d:2f:3b:3b:26:68:c0:54:8e:0d:
         aa:54:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 12:47:37 2024 by rpki-client on console-ams.rpki-client.org