Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.mft
File:                     2h4hJZezrgCcAW3OGC21RJF4ccY.mft (raw, json)
Hash identifier:          /s+U8bU4R7E10ZTqLA5nW58EQ8ibfqe56e+Iyi93jn8=
Subject key identifier:   F1:3F:01:58:B7:A5:38:42:B8:9D:9F:A1:3D:80:5C:9F:4F:29:93:B7
Authority key identifier: DA:1E:21:25:97:B3:AE:00:9C:01:6D:CE:18:2D:B5:44:91:78:71:C6
Certificate issuer:       /CN=da1e212597b3ae009c016dce182db544917871c6
Certificate serial:       018F8E5D9C77ECB6CBAF7CEF2BD316DBFFF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.mft
Manifest number:          0A0D
Signing time:             Sun 19 May 2024 01:00:50 +0000
Manifest this update:     Sun 19 May 2024 01:00:50 +0000
Manifest next update:     Mon 20 May 2024 01:00:50 +0000
Files and hashes:         1: 2h4hJZezrgCcAW3OGC21RJF4ccY.crl (hash: ZV7qt0UXKWuOIypDVVWvCosvWSal5YSQm4siupmJOiU=)
                          2: GWdOkSKrO6Bgk0E9HlJ3Pkx3UoM.roa (hash: dSeiJcD0FlmBidYA0GPHShbRg2MT63O4CTyys5CHgYo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:5d:9c:77:ec:b6:cb:af:7c:ef:2b:d3:16:db:ff:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1e212597b3ae009c016dce182db544917871c6
        Validity
            Not Before: May 19 01:00:50 2024 GMT
            Not After : May 20 01:00:50 2024 GMT
        Subject: CN=f13f0158b7a53842b89d9fa13d805c9f4f2993b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f8:77:12:ac:96:bd:30:03:5b:1a:6a:45:eb:
                    17:30:fc:8e:8c:c5:b1:83:02:28:6d:07:4d:21:0b:
                    6d:fb:e4:3a:df:55:f6:df:f9:98:e5:a4:29:66:92:
                    56:2e:c9:04:6d:31:29:27:a1:23:01:4d:ec:3a:81:
                    44:d3:eb:ef:dc:3a:e6:53:f8:4a:ac:e5:16:07:16:
                    84:40:3a:45:63:05:1b:15:35:e4:67:df:81:7d:85:
                    a0:b0:b2:16:20:3b:b1:37:e0:59:ab:54:cb:5b:e0:
                    65:5e:45:da:cc:91:30:31:12:89:e9:cb:54:f0:0d:
                    97:73:8e:63:b7:51:f2:2d:9b:ec:d2:3d:26:31:b3:
                    f6:5e:91:17:d8:1f:93:45:d3:c5:8d:52:44:c3:26:
                    7d:6f:2f:ca:09:f0:7c:bc:52:51:d9:9d:32:7d:bf:
                    ac:d9:97:1f:71:cf:a4:6a:c4:39:3d:75:c2:36:d2:
                    51:a3:b4:39:54:60:fe:ea:50:eb:8a:8c:e7:e6:6f:
                    c8:4c:af:c0:48:fe:28:b6:3b:c2:21:33:ee:70:6e:
                    dc:3d:34:78:8f:82:1c:00:bf:57:a5:40:4e:6e:91:
                    a2:1c:5f:13:b1:e0:fc:e1:6e:ef:4e:1f:9e:56:6f:
                    61:5c:0b:c8:e9:9c:1c:8a:0f:10:ef:82:6d:e7:b8:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3F:01:58:B7:A5:38:42:B8:9D:9F:A1:3D:80:5C:9F:4F:29:93:B7
            X509v3 Authority Key Identifier:
                keyid:DA:1E:21:25:97:B3:AE:00:9C:01:6D:CE:18:2D:B5:44:91:78:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ba:cd:07:db:f2:42:11:93:df:7e:98:4c:de:32:31:3e:cd:
         d6:15:5a:a9:f8:17:bc:d7:40:98:e9:2f:35:ae:a3:c5:e4:ca:
         ea:bd:25:5c:85:76:d6:2a:64:b3:05:ce:ab:b0:de:40:89:67:
         b5:61:c2:52:d9:5b:6b:a4:e3:ce:00:f4:a3:69:21:47:ad:c2:
         bd:a2:e5:e7:cd:fe:b9:12:9e:e1:59:fa:cd:16:aa:96:6f:d9:
         2c:03:90:ad:a0:4a:30:7a:77:b1:a6:12:10:77:4b:85:26:f6:
         8d:6f:50:e3:91:02:7b:a6:00:06:73:af:e7:14:59:d3:d9:e4:
         b7:34:75:71:ff:70:70:cf:69:20:7e:56:a4:e2:51:22:c7:16:
         79:4b:ee:db:41:d5:58:6d:48:74:ef:b6:ef:45:91:a6:14:3e:
         f3:6a:a6:2f:21:87:64:c5:ea:08:8c:49:66:4b:34:90:02:de:
         5e:e9:ec:89:b4:98:99:fa:d3:34:d6:1a:46:28:2e:cc:13:36:
         8a:93:e5:3b:41:69:79:f9:70:a6:47:0d:39:55:fd:55:88:39:
         ee:51:ef:3b:a8:12:25:a9:7b:fb:0b:0c:a5:0e:2e:0e:fb:7f:
         4a:2a:9f:ab:c2:d5:cd:59:54:3e:34:03:b5:51:ed:9b:06:81:
         2b:28:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:59:16 2024 by rpki-client on console-fra.rpki-client.org