Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File:                     52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier:          8JITmgs8Ji9hLHR90ZRecyhdkXe2TOgeTFh8xppGaco=
Subject key identifier:   6B:7F:56:83:EF:8F:56:D9:6E:8E:17:90:E6:24:F6:C8:79:89:00:FD
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer:       /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial:       018F478E54213DB1AAC15CFBE804577A0E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number:          044F
Signing time:             Sun 05 May 2024 07:01:00 +0000
Manifest this update:     Sun 05 May 2024 07:01:00 +0000
Manifest next update:     Mon 06 May 2024 07:01:00 +0000
Files and hashes:         1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: +E1Dgw2gRB5JMZvjHtQRXiHePwIswPOoSm1+ghOLnOI=)
                          2: AXlInJ1WPCB7IRiiooDTi3v-M4g.roa (hash: HmcZNmMLQ7Hsy76UF4pJbiL7EGATkXG06w6iGdOCvu0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8e:54:21:3d:b1:aa:c1:5c:fb:e8:04:57:7a:0e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
        Validity
            Not Before: May  5 07:01:00 2024 GMT
            Not After : May  6 07:01:00 2024 GMT
        Subject: CN=6b7f5683ef8f56d96e8e1790e624f6c8798900fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:48:bc:53:53:e3:4e:83:c6:99:63:8d:ce:
                    87:46:71:7a:6c:87:e7:af:bc:a9:66:6b:df:9d:e8:
                    cd:79:58:fa:e2:ca:67:85:4d:75:8f:d5:c7:10:2f:
                    ca:19:91:0f:84:b4:22:f6:21:d0:57:9d:af:9c:58:
                    a2:e2:53:f4:e7:56:83:0b:71:38:dd:3b:b1:10:c2:
                    88:8f:47:a3:af:37:51:81:9e:59:59:55:ce:66:a2:
                    49:c8:cf:16:0b:aa:43:08:45:3a:cc:4c:5c:d3:c3:
                    fa:f6:7c:7e:13:b8:49:cb:09:a0:6d:f8:5e:45:67:
                    fb:6c:ad:1e:ce:64:b1:88:cc:0f:36:60:28:01:f4:
                    e6:f4:18:57:81:94:2c:cd:a8:55:65:bf:8d:27:05:
                    50:19:e5:7a:ce:6c:48:bd:22:a3:ba:c8:76:84:9d:
                    c6:21:08:4a:39:4a:95:81:5f:dd:ec:24:22:6d:b4:
                    90:8e:be:d4:fa:cf:f1:79:22:26:d3:16:02:43:1a:
                    bb:6e:42:af:a2:f0:40:9f:1e:d4:b4:10:cb:38:a2:
                    52:4f:bd:fb:b2:37:3a:a7:ac:59:4f:b4:45:67:5c:
                    ce:d9:28:d1:b9:77:ee:57:36:80:a0:e7:4b:1c:5f:
                    31:78:2c:6b:43:94:bd:85:8e:ca:f5:a2:32:c6:9c:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7F:56:83:EF:8F:56:D9:6E:8E:17:90:E6:24:F6:C8:79:89:00:FD
            X509v3 Authority Key Identifier:
                keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:4e:85:60:bf:b8:fe:e2:d6:ae:c1:79:0f:1a:87:ba:15:
         e6:e4:e4:fa:a7:61:c8:6c:ea:c7:44:18:02:98:e3:ef:de:f0:
         bc:04:b4:5f:20:e6:e1:a3:33:76:84:ab:af:e3:c1:a6:d8:d9:
         6b:36:98:59:ed:70:dc:66:ad:59:02:ce:1a:95:19:af:b2:5b:
         16:bc:c7:60:9d:60:58:a0:3f:53:00:68:9e:54:18:c1:51:07:
         a5:4a:61:33:39:06:58:e9:1b:d4:23:87:1b:56:2a:85:2d:4d:
         3a:07:c9:e5:ec:33:d2:21:5a:6f:d0:8d:c9:b2:ff:1d:e2:85:
         ca:74:85:18:2e:07:0e:ce:7b:19:d4:24:22:b1:22:41:37:9a:
         77:b0:1c:f4:0b:27:65:5c:ba:15:eb:a3:37:2c:97:e7:02:41:
         3b:8c:a1:06:df:df:5a:68:eb:12:ef:71:14:91:ed:1b:7c:f0:
         52:4f:ca:09:75:16:08:b1:6e:71:63:7f:b3:6d:ce:9a:c0:a9:
         b2:72:6f:88:e4:f2:90:1f:12:64:fc:9e:c2:cd:dd:59:5b:f3:
         d7:b7:d5:d0:64:77:30:9f:91:60:9b:9b:ad:3c:87:70:b6:5d:
         97:9d:d0:6c:4d:60:3b:9d:61:4e:fd:22:32:a4:46:c4:d2:9a:
         b9:c6:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:49:02 2024 by rpki-client on console-ams.rpki-client.org