Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File:                     D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier:          MiDtnZZcz0+lfBt1nsb6n9WzHAtStaG9s6Y2YhPC1HM=
Subject key identifier:   68:E0:CD:93:15:6D:26:2D:59:20:92:D5:08:55:7F:9C:CB:28:9B:CC
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer:       /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial:       018F87B66F765A4FE7DEF7E7F1F84BD0504B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number:          0283
Signing time:             Fri 17 May 2024 18:00:31 +0000
Manifest this update:     Fri 17 May 2024 18:00:31 +0000
Manifest next update:     Sat 18 May 2024 18:00:31 +0000
Files and hashes:         1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: 6CjIR8QlPZBOZZs6eRgshmgy+P6pf6JafEc4YYb+GKI=)
                          2: Hq_pdPc2CoEIk4mjErvugV9x19E.roa (hash: ROtwHZ0YKy5p5eqZSn1JYG2x9d2l7n2JKZBY5HSJdz8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6f:76:5a:4f:e7:de:f7:e7:f1:f8:4b:d0:50:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
        Validity
            Not Before: May 17 18:00:31 2024 GMT
            Not After : May 18 18:00:31 2024 GMT
        Subject: CN=68e0cd93156d262d592092d508557f9ccb289bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:15:b2:ea:de:0e:60:40:df:d0:11:6d:fc:
                    05:9d:98:43:0b:f7:d1:c0:76:62:f7:79:d7:e6:e8:
                    8d:ba:c4:f5:f2:ed:44:4c:f2:db:53:ad:c5:fd:a4:
                    2a:db:4a:d8:79:6d:42:45:28:d4:7e:f0:96:66:61:
                    35:d5:99:5f:ba:6f:8f:1a:e2:6c:58:a6:65:c0:32:
                    02:a3:97:81:c6:2f:a5:5a:00:6b:58:06:5d:60:4e:
                    05:37:9e:35:48:d5:e7:d6:13:6c:2a:0d:14:84:40:
                    48:26:52:e8:89:f3:26:4e:f0:35:8e:2c:aa:9d:98:
                    0e:61:78:49:88:85:c8:5c:39:fe:3e:ee:9e:e2:bd:
                    cf:3e:2c:f9:70:47:96:2a:f8:9b:19:15:ac:6e:d8:
                    3f:4a:1d:f0:af:3b:f2:63:20:76:2c:99:6b:ad:7a:
                    10:d2:e2:1b:f3:c6:a2:f3:be:95:4b:ba:b8:1b:45:
                    a3:9b:ce:90:96:e8:e6:bc:ff:0a:cb:5f:8c:80:6b:
                    35:8f:06:c1:4c:60:4b:57:49:76:a3:4b:96:f2:6d:
                    b8:f1:ce:d1:c5:6a:c3:d8:8a:cd:68:83:2b:c6:c9:
                    83:2c:a9:a5:f6:15:4a:23:d2:c0:be:8b:06:e8:09:
                    53:20:c1:f6:37:6f:11:70:e2:9e:da:49:95:07:c7:
                    66:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E0:CD:93:15:6D:26:2D:59:20:92:D5:08:55:7F:9C:CB:28:9B:CC
            X509v3 Authority Key Identifier:
                keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c6:a7:03:45:a8:8f:e7:dc:0b:52:6c:97:26:ea:26:29:f4:
         3c:44:9c:da:41:c9:27:2e:f5:bb:c1:f5:a4:36:86:e4:a9:ab:
         a5:84:bf:2b:4d:31:08:90:1d:34:fa:28:b3:62:f1:bb:3c:c5:
         31:89:24:f9:06:a2:2f:f6:bc:17:9e:b0:fb:ae:20:5f:c2:14:
         4b:c1:9a:42:d5:eb:5b:59:95:73:17:95:77:20:20:53:9e:37:
         60:71:d3:ff:67:58:3b:08:ee:72:12:41:16:7a:15:aa:96:49:
         ea:e1:3d:95:72:8a:55:bc:1a:55:54:de:ff:a3:2a:97:0e:7f:
         48:38:41:cd:f5:14:3f:6b:69:29:e1:e3:81:b6:4d:dc:74:5e:
         71:fb:23:37:b5:37:aa:7f:ff:c1:6e:74:ba:c0:3c:47:fe:9a:
         79:28:72:11:2d:2b:0f:d6:2f:4b:5e:4e:23:04:d8:11:e5:e1:
         d5:ba:83:38:c8:67:10:e6:b5:05:d1:81:6d:77:8b:13:44:90:
         59:f3:d5:42:03:27:cf:b1:d2:2c:7e:76:15:e9:a3:1a:7a:4f:
         02:d8:c4:7f:3a:1a:9e:16:00:b7:ee:d2:3f:87:cb:f8:b3:8d:
         e0:c9:ab:ee:08:75:d4:47:44:d8:e7:06:d6:b2:38:2c:f8:cf:
         37:4f:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:47:32 2024 by rpki-client on console-ams.rpki-client.org