Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
File:                     dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft (raw, json)
Hash identifier:          Yxv8imrcz9u4uQQlhggObb5LpBCdnKsLKtxRU/mi8UY=
Subject key identifier:   5A:F2:C1:3E:CB:4E:90:C9:52:19:BF:35:9C:F8:28:B9:38:93:47:F5
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Certificate issuer:       /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial:       018F874B0B6917607D76E1DB54E077FCCD84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
Manifest number:          04D2
Signing time:             Fri 17 May 2024 16:03:13 +0000
Manifest this update:     Fri 17 May 2024 16:03:13 +0000
Manifest next update:     Sat 18 May 2024 16:03:13 +0000
Files and hashes:         1: MMlB3yj0I6dudWlxPEfy2C6E-o8.roa (hash: /x+hnjmC2deiLkDU2OJQe28cT+OVRHLNi9CNObugNB4=)
                          2: So1IWIPJNExxI6BKopLOyum4KOk.roa (hash: v8Cos1DPB2uBdZlmisS1AxYmhoswQsmhdG8rb9w8yIc=)
                          3: dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl (hash: 3d0oMdyHCp8qnlqcJ3/HLR3tOcPq9Z4xf76S6JJe5P8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:0b:69:17:60:7d:76:e1:db:54:e0:77:fc:cd:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
        Validity
            Not Before: May 17 16:03:13 2024 GMT
            Not After : May 18 16:03:13 2024 GMT
        Subject: CN=5af2c13ecb4e90c95219bf359cf828b9389347f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:ef:c1:88:f8:0f:33:41:84:48:79:37:5d:
                    75:6e:1f:70:3e:78:88:5f:0c:a5:7b:4e:4e:d8:21:
                    13:79:b1:70:ef:11:42:b3:92:d8:6f:ff:c0:71:5e:
                    0f:0b:02:bd:db:09:a4:93:ef:bf:2a:4a:13:63:de:
                    6b:72:4a:1a:c7:80:ed:1b:cd:63:b2:4c:05:c9:1b:
                    c8:6d:8e:33:d2:4d:d0:04:7e:cc:39:ce:2c:e3:ce:
                    44:87:0b:1b:3c:39:05:9e:83:03:b9:a8:47:f8:9d:
                    55:bd:43:d6:2c:57:16:b7:9b:2e:8f:79:1f:d7:01:
                    62:58:29:83:13:06:94:5f:32:e8:d5:b1:10:e1:5b:
                    0b:e6:33:e8:4f:63:b4:1e:22:79:0b:9a:b8:ed:ea:
                    10:26:a4:87:ad:c6:19:9e:f6:b7:0e:65:71:12:e4:
                    81:53:80:94:8d:91:72:e7:87:83:88:21:c4:41:d0:
                    78:20:57:e6:a3:af:0b:88:ca:85:af:82:97:83:37:
                    cc:c5:8b:b4:f0:7c:7e:21:d7:54:c2:da:96:e3:4b:
                    c6:99:64:49:5a:f7:31:75:0e:2a:ee:33:41:db:04:
                    92:69:fa:6e:4e:c4:1e:dd:e8:d0:fe:94:9f:ab:61:
                    55:c2:e5:95:a9:f7:18:91:bd:c1:c1:94:be:dc:98:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:C1:3E:CB:4E:90:C9:52:19:BF:35:9C:F8:28:B9:38:93:47:F5
            X509v3 Authority Key Identifier:
                keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:63:d6:04:27:92:55:72:3b:73:db:c5:08:5a:32:62:c0:
         7b:5f:91:31:b4:4a:7a:b5:09:43:0c:7b:5f:57:6c:01:7d:c3:
         be:56:05:7d:bc:db:c2:ba:74:e9:5b:17:3f:d9:e6:8d:8b:aa:
         8f:e9:6e:85:dd:4a:12:82:eb:b0:f4:a8:b9:10:6a:d2:03:75:
         ee:20:2d:99:fe:e9:c8:a2:ea:bd:ad:d3:04:15:27:e6:8e:a6:
         2f:4e:26:70:f3:26:87:2b:3a:3c:b9:6f:27:c0:5d:c1:1b:97:
         58:bf:23:5d:bd:f7:b0:39:f7:de:7b:46:57:2c:2b:3b:af:27:
         26:c1:f9:1a:c7:68:9d:30:3b:16:f9:25:a4:92:ad:e5:0c:35:
         32:c1:13:a0:83:82:af:aa:4b:ea:c1:66:dc:8e:a0:be:cb:ca:
         f9:c2:2a:cd:65:55:70:fa:9b:78:3c:85:21:70:af:1c:f7:15:
         41:4a:3e:e7:9e:85:76:35:8e:84:c3:8f:6c:e6:57:f9:a1:c9:
         19:39:64:80:f7:bf:4b:b5:0d:2f:f5:85:1d:0a:23:24:7c:07:
         54:45:69:f6:fe:7b:9f:aa:ce:b5:ba:e0:12:79:ec:8e:bc:c7:
         c0:08:ee:39:49:41:82:02:b4:4e:26:ef:96:6c:b1:1c:59:5f:
         f7:4c:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:37 2024 by rpki-client on console-ams.rpki-client.org