Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File:                     2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier:          SnPHcD2QN56GhQwbplZ99MN8m8FohY20+baweXiIvME=
Subject key identifier:   15:5F:83:5F:9A:14:99:5C:F1:74:69:80:F3:73:16:51:D2:74:FB:F5
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer:       /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial:       018F6C40BB4B9A524F403F86DD7D7DD0945F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number:          0DE3
Signing time:             Sun 12 May 2024 10:02:12 +0000
Manifest this update:     Sun 12 May 2024 10:02:12 +0000
Manifest next update:     Mon 13 May 2024 10:02:12 +0000
Files and hashes:         1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: hABQ83QCJDaxpJqbTl0IrOzaRzMT/m5N5TbpIGo22ik=)
                          2: 4WMythd9byBtqHogySXdhHFy3iM.roa (hash: MLR1uRnn9jfmRgg1amYygQazEQrjo8CGsQ/Kf/rY4vA=)
                          3: V4R2nTTMB6rGbAF8z-KKeIcZpYE.roa (hash: +XK/EBMxwK+S8ygW09GODch4jO4BmPRcT0+LlX4ffGU=)
                          4: tg1WgEL2be2tmGPA1bOittOVxSw.roa (hash: iEBcZiM5E4ohZ069nfHkq2lC3a5s8X+y8PQsOHNWXgY=)
                          5: vpKsNwxiB_lLYGbWT-Fv720XNpY.roa (hash: EHx5CV6Ugyva/iOpJgKyEELm267LcWT3sT31VUPGw7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 10:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6c:40:bb:4b:9a:52:4f:40:3f:86:dd:7d:7d:d0:94:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
        Validity
            Not Before: May 12 10:02:12 2024 GMT
            Not After : May 13 10:02:12 2024 GMT
        Subject: CN=155f835f9a14995cf1746980f3731651d274fbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ab:fb:be:dd:01:5d:9e:f1:7c:fc:5c:f4:d4:
                    6b:6c:75:5e:e2:c4:ad:c2:49:fd:e3:05:dc:b4:ae:
                    c6:50:30:c0:a1:5e:90:ab:97:01:91:37:4a:21:da:
                    63:bf:c9:86:2b:35:49:4c:27:8f:dc:4c:21:dd:29:
                    83:1a:39:0e:b8:38:28:19:fb:dc:b6:c3:a4:08:44:
                    ed:d1:c5:6c:b9:52:7c:be:c7:b0:85:05:78:ef:df:
                    d6:b7:5c:69:03:6a:07:d1:56:41:49:74:ff:af:01:
                    b8:9f:ef:6e:fd:7c:37:f3:46:6c:8d:f7:e1:26:b1:
                    b8:f2:d6:26:7e:7a:71:3c:1b:98:e0:88:c3:e2:c8:
                    71:b7:cc:08:fa:55:97:d5:3b:70:cc:bf:60:60:94:
                    12:7f:ec:da:a4:7e:db:c1:cc:72:56:2f:45:62:86:
                    36:8b:b2:f7:d5:42:73:12:6a:9a:64:04:14:91:f2:
                    86:6f:b1:f3:41:fb:ff:43:5f:c6:23:58:b4:22:a5:
                    f6:d6:63:7c:42:71:3c:5a:f6:41:98:53:92:79:9f:
                    14:80:c3:c4:c9:13:50:d1:57:90:44:e5:80:92:db:
                    3c:f5:16:fa:8b:59:12:17:5d:56:e5:d9:a3:02:cd:
                    3a:03:87:70:08:b8:d5:54:27:a1:da:d9:a2:bf:04:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5F:83:5F:9A:14:99:5C:F1:74:69:80:F3:73:16:51:D2:74:FB:F5
            X509v3 Authority Key Identifier:
                keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:41:9d:c3:92:cc:12:1a:be:91:d8:f8:2b:f0:b8:4c:23:7d:
         5f:91:b4:97:b2:a9:9f:68:4d:e3:d2:43:3b:6f:de:5a:f4:a0:
         eb:73:f1:1b:5c:18:89:90:6a:38:2e:67:14:30:f4:09:67:2e:
         7b:be:c6:8d:b4:f6:14:44:47:5b:74:e6:04:06:66:3d:3e:50:
         2b:30:de:67:a7:56:d4:04:54:3c:56:9f:fe:64:fe:74:0e:d4:
         ae:03:16:47:53:5a:4c:42:f5:82:0a:bf:cf:0c:60:8d:2e:e5:
         a7:30:20:77:75:41:1c:92:e5:c0:54:d0:94:2d:59:83:45:13:
         d9:70:b6:ff:9c:4d:db:e3:be:cc:1f:d1:f2:68:5f:53:d2:b9:
         ce:9b:d0:ba:31:d5:55:fb:3b:58:3a:e0:ef:af:cf:fe:fd:6c:
         8e:ad:19:c7:51:e9:3e:a7:26:40:10:be:f9:c8:10:5f:8c:8b:
         f7:74:18:86:5c:44:68:0f:62:40:73:28:63:99:d5:12:3f:df:
         46:5c:a6:7d:ae:28:6b:31:a6:d5:06:4f:da:71:be:61:3c:4d:
         28:01:c1:0e:56:de:40:ef:fe:ab:be:94:6f:ae:eb:be:96:59:
         3c:78:e0:b0:51:28:6e:2c:29:28:a5:31:0c:d6:ca:57:5f:71:
         9c:89:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 16:31:21 2024 by rpki-client on console-fra.rpki-client.org