Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          A+vGALjQfdnCdU6L2VH4JH18YjK/aVvfOXVwnL2LDT8=
Subject key identifier:   1B:DA:6E:BB:D5:EB:32:59:2D:83:B9:AE:CF:6B:BA:07:FF:D6:62:F8
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       018F467C17406DC7D44C3D3E7533B1004C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          05CC
Signing time:             Sun 05 May 2024 02:01:28 +0000
Manifest this update:     Sun 05 May 2024 02:01:28 +0000
Manifest next update:     Mon 06 May 2024 02:01:28 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: C4o+JfTnij7FwiaQY6y2gAErao5W4acq1/D8dhIhsgA=)
                          2: fcrjA77Rjtd3qiNk2eZGX2SFvxQ.roa (hash: hltEPcBt9T94ZcNpv7aNsyaK+WPqLkLNnJYM269S4uM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 02:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:7c:17:40:6d:c7:d4:4c:3d:3e:75:33:b1:00:4c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: May  5 02:01:28 2024 GMT
            Not After : May  6 02:01:28 2024 GMT
        Subject: CN=1bda6ebbd5eb32592d83b9aecf6bba07ffd662f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:10:65:88:43:22:9f:55:f2:8d:55:3b:e9:
                    bc:34:3f:06:03:88:89:15:98:c1:71:2f:74:e8:cf:
                    c4:04:0b:73:fb:3e:9f:6b:5e:21:89:2d:7d:fc:30:
                    2c:22:eb:f8:73:ba:d5:2b:34:69:af:4a:5a:8e:a9:
                    dd:cc:c8:9b:1a:d2:95:0f:05:41:20:ae:63:6e:8f:
                    c2:6a:03:7f:36:b5:41:e4:af:06:5c:51:14:91:39:
                    91:a5:63:10:2b:b0:81:4a:c3:fb:b8:5c:76:cc:e5:
                    a4:52:08:f0:a7:8f:b2:3d:08:81:0c:55:15:12:57:
                    42:0d:7b:26:cd:4b:12:23:36:d1:f7:10:aa:b9:63:
                    2c:0e:02:f6:55:91:99:1a:54:cc:da:65:c4:7a:44:
                    e9:c7:60:8a:7b:b0:91:94:5d:07:1e:b9:17:5f:2b:
                    c3:c2:ae:04:ab:da:96:55:2e:ea:b2:ec:0c:36:6c:
                    c4:a2:8e:9b:a7:f0:26:38:54:d2:60:a4:7d:ea:2f:
                    d5:47:76:5b:1b:50:9e:cd:76:13:e9:79:0e:6b:21:
                    bd:45:c8:9f:78:c8:49:35:ff:66:05:03:3b:3c:82:
                    3a:7c:87:aa:dc:7b:25:be:82:99:d8:08:d6:59:60:
                    e3:74:ae:7e:c9:da:00:14:1d:63:74:6b:34:a0:e6:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DA:6E:BB:D5:EB:32:59:2D:83:B9:AE:CF:6B:BA:07:FF:D6:62:F8
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:77:8f:82:48:ad:d4:bc:a1:42:58:65:e3:4b:ed:18:c0:96:
         2f:80:84:ab:89:2e:ef:28:33:c6:ea:b5:30:19:0f:94:04:5a:
         72:5c:37:49:17:10:d9:3d:4d:07:31:01:77:3f:87:09:4c:fa:
         22:ad:81:63:17:8c:42:69:f3:b5:ed:5a:c9:eb:71:f8:6c:f1:
         4c:87:b0:d7:30:63:79:17:f7:22:08:b9:3f:70:c5:21:20:5d:
         bc:22:81:5d:e2:13:02:39:f4:b9:9b:67:60:e2:30:39:c4:e8:
         c0:f6:3b:10:ed:b6:18:70:68:f6:09:f0:c9:97:24:7b:29:df:
         73:1d:94:5a:68:9c:bc:19:58:38:e6:c5:1a:50:51:c5:1b:d4:
         79:d9:0e:ff:cb:d2:61:8e:ff:3f:73:5e:da:f8:8c:d6:82:75:
         ca:f4:57:c8:0c:ed:28:e5:85:3c:00:b3:7d:64:cb:f1:0f:fc:
         18:15:9a:2d:12:f3:f2:c9:df:7e:03:b3:a3:4f:e0:96:70:3b:
         43:ad:a6:51:b8:fc:fb:e4:c8:9b:d9:fd:f1:5c:06:72:d0:ba:
         b1:4b:37:d1:38:6b:4b:cb:25:b7:f6:c9:bd:97:ae:6f:67:d3:
         a9:e2:08:11:dc:4b:86:2c:d0:8d:21:e1:b9:04:6a:a9:d1:25:
         b1:ad:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:48:25 2024 by rpki-client on console-ams.rpki-client.org