Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File:                     2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier:          U6HpHzc6z+5x/Q3suFh7Oqh9BjKJCQCWQap6DjBNVUo=
Subject key identifier:   63:4B:BA:30:44:0D:3E:F8:91:08:C7:AA:02:D9:14:33:4C:4A:6C:99
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer:       /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial:       018F3BFA0E29E3549B86842D8A876D2E1BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number:          072F
Signing time:             Fri 03 May 2024 01:03:14 +0000
Manifest this update:     Fri 03 May 2024 01:03:14 +0000
Manifest next update:     Sat 04 May 2024 01:03:14 +0000
Files and hashes:         1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: 5bIEu1pQiFT778eWj6YHsZ8p5iDHQioa/MG+ODJ5tR8=)
                          2: in1yhgF-cCERXcu2NtwiBt_jW4s.roa (hash: GMjBFvLWdmCaksTRyAmJKx/Zh0CbDg/GYjnYc/8Tcbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:0e:29:e3:54:9b:86:84:2d:8a:87:6d:2e:1b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
        Validity
            Not Before: May  3 01:03:14 2024 GMT
            Not After : May  4 01:03:14 2024 GMT
        Subject: CN=634bba30440d3ef89108c7aa02d914334c4a6c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:7e:e9:40:8b:a1:85:c6:1c:4f:82:b7:11:
                    4d:72:0d:e0:5f:9b:df:0a:71:48:c8:19:84:02:a1:
                    f7:72:8a:8c:15:5a:bd:a3:72:66:f9:7f:b2:2d:52:
                    49:52:f2:c7:6a:9a:21:79:80:94:2e:ae:db:d7:e9:
                    12:0b:4a:fc:8e:2c:b9:fd:d5:87:2c:eb:c6:01:ad:
                    78:69:c4:02:06:61:67:c1:58:9d:57:9e:97:b8:fa:
                    3d:76:b3:19:a2:aa:d2:fa:0c:61:53:57:7e:c4:ab:
                    db:49:12:89:7f:a0:a2:86:80:8d:b4:bd:98:74:d7:
                    2e:cb:dc:34:fe:ce:c5:2d:c7:17:25:14:b0:17:23:
                    25:b0:9a:64:ef:57:f6:c5:b7:8a:b6:49:5b:c6:80:
                    61:9f:f2:bc:ef:52:c1:c5:10:06:3f:9d:5f:95:21:
                    b9:d4:75:40:dc:48:60:39:d5:25:20:d0:e1:06:bc:
                    3f:ae:86:d9:43:a6:40:a8:7e:e4:17:47:57:21:85:
                    fd:89:c4:b5:8f:43:26:3f:d3:a6:85:90:40:30:61:
                    4d:93:2b:a2:3a:a9:73:98:50:2c:77:13:de:26:5d:
                    08:e5:01:62:ba:7b:7c:ee:48:0c:9d:16:4f:17:05:
                    c9:01:73:1a:38:f4:92:46:69:8d:3f:e4:d5:e7:a5:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:BA:30:44:0D:3E:F8:91:08:C7:AA:02:D9:14:33:4C:4A:6C:99
            X509v3 Authority Key Identifier:
                keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:f3:4e:2c:a2:78:5b:05:1c:8f:66:ad:d5:db:ee:5c:cc:
         c6:2f:04:a8:78:8e:c6:15:2a:b5:58:e7:61:98:20:d0:cd:a2:
         ff:61:e3:84:55:66:54:51:33:34:93:4d:0c:8f:d6:92:a1:45:
         30:72:17:52:92:c5:cf:26:6a:32:6e:3f:46:ab:0d:d8:3d:9a:
         0b:94:ff:f3:58:e3:b7:c8:c2:80:8a:d9:0a:55:e6:54:f7:d6:
         8e:26:b2:d1:72:55:7b:d5:2f:a9:17:c6:c7:d2:c9:ef:45:77:
         d3:fa:2b:3b:ec:4d:a1:18:99:af:18:62:f6:70:b9:43:61:ec:
         a6:48:05:82:8e:cc:49:5f:67:d4:3b:7d:bb:5a:13:bf:98:ae:
         b6:9a:44:d3:a4:cb:96:66:05:49:32:00:98:30:95:81:99:35:
         4f:37:3e:3b:ee:c8:b4:9b:70:7b:0c:e8:23:06:1a:26:6e:d4:
         88:72:0e:68:2b:bf:41:7c:57:8e:57:85:2b:79:3a:4a:12:60:
         fa:70:f6:c8:7d:f9:f6:22:00:31:ab:e7:80:09:d4:7a:1b:f4:
         0a:11:eb:69:28:53:35:98:82:08:af:bd:82:cb:0d:ba:17:64:
         4d:53:f3:14:e8:fd:2d:a3:b2:83:37:47:c5:de:49:4e:50:8a:
         6b:f5:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:17:55 2024 by rpki-client on console-fra.rpki-client.org