Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File:                     F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier:          eYmJVewX3VevH/3e0QyAR0rLCYErKC86pbYP8SmzUCo=
Subject key identifier:   FA:1B:0B:F9:1C:76:F4:B7:67:3B:A3:F9:EB:CB:1C:8F:8E:8C:B0:83
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer:       /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial:       018F18592892E19F5B8D1AE34ECF8D8E8B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number:          0E66
Signing time:             Fri 26 Apr 2024 03:00:47 +0000
Manifest this update:     Fri 26 Apr 2024 03:00:47 +0000
Manifest next update:     Sat 27 Apr 2024 03:00:47 +0000
Files and hashes:         1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: pcHDSgsu/5OZogH8AUFFtnDrTytpAQIQAP6mDdScGew=)
                          2: Zk-CfAeqpKqIe-yXwktoNQUuyhQ.roa (hash: MvCxL972eg3ZhgcPKccz830Cny+DSdtnouhfyKAwcmM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:18:59:28:92:e1:9f:5b:8d:1a:e3:4e:cf:8d:8e:8b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
        Validity
            Not Before: Apr 26 03:00:47 2024 GMT
            Not After : Apr 27 03:00:47 2024 GMT
        Subject: CN=fa1b0bf91c76f4b7673ba3f9ebcb1c8f8e8cb083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:df:7e:b0:8e:fb:14:06:da:04:de:5e:0f:
                    34:37:b9:67:7c:e4:37:50:de:34:ce:d9:7a:b1:8a:
                    0f:b9:0d:11:84:3e:71:4f:52:7e:cd:23:13:fd:98:
                    c6:2c:32:16:67:c9:99:e8:6f:24:38:9e:da:e2:18:
                    c9:9a:71:b4:80:fc:ee:9b:0f:5c:01:3f:2d:2c:3a:
                    b6:63:b6:95:ee:cd:67:fe:32:d8:dd:f4:53:99:7e:
                    3b:6c:39:eb:a7:52:66:bd:c6:46:ec:88:6b:87:e9:
                    17:fc:16:36:0f:2d:7b:5f:d5:a9:98:57:bf:0f:d5:
                    c6:ba:08:74:93:a3:68:fc:43:1c:fe:de:b8:96:4f:
                    91:78:44:7c:7b:97:33:52:a9:86:61:cf:7b:99:0e:
                    6d:a2:db:76:91:bb:8b:33:d0:ee:61:f8:bd:7d:85:
                    47:75:97:8e:27:c3:6c:47:f8:49:36:94:9e:79:da:
                    1a:85:01:ca:2a:db:9a:4e:28:ae:c9:45:57:b9:e1:
                    96:2c:3e:88:96:b8:5d:2c:53:89:88:e2:d4:54:2e:
                    61:29:04:57:3a:f4:33:12:a6:d6:05:ef:1f:53:dc:
                    6c:b0:00:e5:5d:46:44:94:0c:19:f2:fb:1a:dd:b5:
                    0e:f0:2e:e6:04:65:a1:ee:54:ae:93:97:13:dd:26:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1B:0B:F9:1C:76:F4:B7:67:3B:A3:F9:EB:CB:1C:8F:8E:8C:B0:83
            X509v3 Authority Key Identifier:
                keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:12:11:62:91:6d:cb:0f:60:0d:bc:81:0d:fb:d8:4f:d6:c8:
         71:d9:2d:19:91:64:40:2a:dd:31:ad:f5:66:02:68:06:d7:f9:
         e1:5d:68:83:8f:d8:4d:a0:bc:2e:0e:b8:1e:cc:bf:7a:4b:86:
         69:f2:ad:c6:2d:33:fe:38:23:75:35:0e:a5:2e:30:23:ec:13:
         f7:12:29:9e:c0:4c:e2:90:d9:15:9d:77:1d:c6:35:d5:92:21:
         76:0f:bc:91:1b:70:11:84:53:42:d0:28:ff:1d:85:a3:de:5a:
         86:d1:c4:30:82:16:b6:c8:bd:19:b7:7d:46:d6:eb:c2:fd:6a:
         63:0c:22:42:69:92:00:60:f4:4b:e9:e6:e2:14:f0:59:75:64:
         20:cb:81:97:25:93:de:e6:7f:20:6f:d4:6f:65:96:ea:b5:25:
         7d:2f:65:75:bb:f0:a9:ee:cf:54:94:4d:db:30:1f:c6:f7:fb:
         3d:73:87:17:74:41:94:7d:3a:32:44:19:42:cb:4a:e5:da:d9:
         14:79:9e:6a:d7:39:c4:5a:98:47:cc:fe:a9:14:3f:94:c6:c6:
         c5:0f:d4:db:63:5b:e7:f7:3c:78:90:33:c7:cf:31:74:30:5b:
         7c:1d:7c:25:66:42:f8:f3:79:46:16:03:d2:3c:fe:7c:50:56:
         9f:e5:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:28:04 2024 by rpki-client on console-ams.rpki-client.org