Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File:                     skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier:          musINZGjQSE9cbdzLkOJKjyHDJkp77GfunITu1wbsV0=
Subject key identifier:   3C:82:AF:3D:4E:E8:49:8C:94:27:C5:6C:B4:D9:2C:1E:B8:30:D2:1D
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer:       /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial:       018F87491C1A64A052D234434BBF1767886C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number:          065B
Signing time:             Fri 17 May 2024 16:01:06 +0000
Manifest this update:     Fri 17 May 2024 16:01:06 +0000
Manifest next update:     Sat 18 May 2024 16:01:06 +0000
Files and hashes:         1: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: RwKY6URn+1vhhzrhm8YqIyMspNTpHZV4bxH0axESTBk=)
                          2: uZlahCMaC8cwLCm05kPj-SfmKdQ.roa (hash: wWvfLCQJUaXCEyn5kp86QLSu2tL7sX6GeTM8FzbJ0uE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:1c:1a:64:a0:52:d2:34:43:4b:bf:17:67:88:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
        Validity
            Not Before: May 17 16:01:06 2024 GMT
            Not After : May 18 16:01:06 2024 GMT
        Subject: CN=3c82af3d4ee8498c9427c56cb4d92c1eb830d21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:9b:75:c7:70:c0:cf:b3:c8:82:0f:be:12:
                    ab:a7:f7:e7:54:e8:19:11:0e:70:2a:b1:5e:f5:3f:
                    5e:2f:07:fe:e4:46:df:4b:a0:11:ea:c3:33:12:d0:
                    73:80:0e:7c:2b:98:4d:bc:7c:f0:08:af:5a:7a:88:
                    b7:cf:98:49:fa:ee:32:4a:b1:e1:3b:ca:03:82:de:
                    81:7a:76:b8:bc:50:a3:43:36:a3:51:d7:64:5f:5f:
                    bf:30:50:7d:65:87:81:65:f5:08:99:e5:6b:ae:ee:
                    0c:f8:1a:fb:39:84:18:72:ec:c0:90:7f:35:69:19:
                    9b:94:cf:fa:53:18:db:a0:c3:92:a9:da:94:aa:ad:
                    40:de:75:e2:52:41:9c:6a:3d:5a:25:0c:83:c4:08:
                    49:89:d9:7d:9d:e5:ab:8f:f2:1d:e6:dc:19:bf:aa:
                    59:af:4c:18:bb:6c:2f:8a:ed:a9:93:da:a8:92:ea:
                    49:b3:c5:09:f7:cd:92:fe:ce:81:2f:2e:62:d6:28:
                    99:53:4a:7b:0f:b8:58:6a:38:12:9a:a5:0c:95:b2:
                    dd:e2:f4:b7:4c:e9:4c:79:a8:13:cb:7e:86:46:16:
                    2c:02:68:5b:b4:a9:6d:60:3b:80:34:1a:3c:69:85:
                    e5:11:07:10:80:df:90:3f:be:33:59:12:ec:19:fc:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:82:AF:3D:4E:E8:49:8C:94:27:C5:6C:B4:D9:2C:1E:B8:30:D2:1D
            X509v3 Authority Key Identifier:
                keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:6c:6e:c4:25:1a:ef:8d:53:9c:d9:59:a6:ae:d3:79:60:
         f0:c9:9d:e8:b0:48:e9:61:7b:17:dd:30:6a:ac:8e:c5:5f:f8:
         de:94:c6:10:93:ff:cf:d6:ad:9c:68:6f:d7:b8:e4:89:0d:a8:
         d5:2a:20:5d:7f:01:65:c8:f2:a6:da:4d:75:37:44:21:bf:cd:
         87:1d:c6:bb:9a:74:c6:99:84:26:5f:41:be:5b:e7:c1:c0:f5:
         12:e7:40:04:30:43:51:ff:cc:13:b7:bb:84:bb:42:c5:e7:99:
         38:3b:18:a2:7f:92:cd:8b:03:d1:69:a6:4e:b7:e1:a0:25:79:
         c4:fc:61:f1:2e:be:f9:0d:13:81:a7:89:b0:93:4a:bf:96:2b:
         ce:c2:03:44:c2:a6:1e:45:04:24:61:12:ba:8b:38:a2:0c:ce:
         1f:e4:51:fc:f3:e4:66:e0:51:dd:98:f9:8f:33:b1:85:c5:72:
         f6:03:4c:ea:cf:c2:b1:52:52:0c:15:2e:da:67:40:3d:0c:ee:
         73:e2:5a:4f:02:ee:66:10:7e:6a:91:e2:f6:d5:f3:73:b6:5f:
         46:f5:f2:fe:6e:9f:a0:90:9a:8b:01:7a:72:d5:cd:04:0f:a1:
         a0:33:13:e6:62:b8:dc:4b:27:52:5f:06:47:5e:98:40:a2:b9:
         32:d0:d2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:04 2024 by rpki-client on console-ams.rpki-client.org