Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File:                     4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier:          WG0ttDGxo6FEZRLcVdmlot1gXBh6cDy/soym+EbiRUY=
Subject key identifier:   95:69:5B:73:43:A1:9A:31:AF:82:1C:BB:D5:18:3A:9E:0C:E6:9A:E9
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer:       /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial:       018F445689ECA90B937A425CBEAB2F992EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number:          06AC
Signing time:             Sat 04 May 2024 16:01:13 +0000
Manifest this update:     Sat 04 May 2024 16:01:13 +0000
Manifest next update:     Sun 05 May 2024 16:01:13 +0000
Files and hashes:         1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: YN/uag+W2d8om/sR2yR7yednOXH9X3gWXvfeFs78UEA=)
                          2: uHZHF5SOv4mkngsLmM1WfhLopNs.roa (hash: Q1s3JFP8soFsbAN/fVoJyypTC6P4T7Uxyscx7k+6muI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:56:89:ec:a9:0b:93:7a:42:5c:be:ab:2f:99:2e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
        Validity
            Not Before: May  4 16:01:13 2024 GMT
            Not After : May  5 16:01:13 2024 GMT
        Subject: CN=95695b7343a19a31af821cbbd5183a9e0ce69ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:53:eb:c2:a7:fc:73:e3:c2:5d:52:52:f0:
                    f3:71:4c:bc:e0:eb:e5:e5:37:eb:a6:6b:87:81:f6:
                    80:f0:88:22:a9:c4:4d:b1:9b:71:0d:7e:23:f4:42:
                    8d:b3:33:66:ec:b5:0c:6b:49:b9:45:aa:ee:e6:93:
                    fe:be:be:27:bc:4b:b2:03:c2:7f:48:f3:34:ce:df:
                    30:e2:05:b2:60:8a:14:92:36:9a:64:21:05:00:d8:
                    db:bf:52:5b:8b:79:21:7d:e0:64:f1:6e:90:3b:d4:
                    47:2f:f9:b3:6d:3c:23:75:00:bd:8e:b4:fb:27:3c:
                    60:8f:ed:fb:59:fc:0f:8a:58:1d:39:c9:ee:8a:f9:
                    24:bb:83:22:c4:a5:93:37:5f:8f:94:19:45:ce:6c:
                    8c:94:2f:a5:58:51:68:f0:e0:37:aa:9d:f7:ce:b4:
                    94:df:36:dd:97:a3:01:a3:ff:9f:16:bd:39:4e:30:
                    1b:d0:48:19:83:06:ea:31:8d:84:06:33:99:4c:0c:
                    f3:d1:f1:4c:01:70:42:96:b0:9d:d1:8a:9c:a2:5d:
                    3a:d8:b6:5f:96:6e:2f:ce:ee:5e:cd:a0:5b:cc:3f:
                    b8:b5:40:07:ec:b0:37:30:bd:42:76:c3:86:19:3c:
                    2c:c1:bc:2c:ce:c9:cd:a7:64:84:64:d1:cc:1c:bb:
                    ea:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:69:5B:73:43:A1:9A:31:AF:82:1C:BB:D5:18:3A:9E:0C:E6:9A:E9
            X509v3 Authority Key Identifier:
                keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:44:8e:f4:45:98:7a:96:d0:e2:bc:92:28:e8:67:43:de:c1:
         6a:4f:6c:68:05:51:fd:20:b6:ec:a4:2a:c9:36:36:e2:43:b0:
         89:f1:3c:09:ba:19:60:d7:4a:51:4a:7a:83:22:78:79:a0:21:
         56:a4:ce:0b:30:39:c7:ad:a0:d1:6f:4e:6d:31:df:72:e3:8b:
         cb:95:3a:0c:a9:d9:ed:08:da:6e:66:0d:50:a9:11:a6:86:5a:
         3e:db:d5:4e:cd:33:de:9c:31:8c:aa:9b:a5:6b:f5:78:32:54:
         0b:ac:a7:d9:06:10:f1:43:12:e4:a8:f0:da:7f:04:ab:f9:e8:
         2c:75:4c:30:0e:55:16:0a:bd:f3:0a:97:2b:5b:d8:ed:40:0e:
         28:b6:d7:bc:de:3f:43:a5:29:f5:39:46:45:5d:7c:f9:dd:fe:
         00:cc:d4:59:c8:f8:b8:4c:13:e0:9e:92:83:60:f0:ac:40:69:
         85:32:0f:7c:65:63:41:49:7b:d2:f9:04:04:bb:ae:c8:57:18:
         bc:d9:52:7f:1f:5c:d5:6b:9c:78:51:82:f4:2b:3a:e6:75:6b:
         ed:73:d2:86:2f:3f:cb:a0:f7:2a:a5:96:80:17:8b:f1:c7:b6:
         70:0a:4c:7b:4e:f4:cb:97:c4:85:70:9e:33:65:8c:17:08:e1:
         e1:36:8c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:51:39 2024 by rpki-client on console-ams.rpki-client.org