Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File:                     R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier:          3o4uT6D879it//36RYaeD09Tua7kkwbPrs8JGfL4vp8=
Subject key identifier:   71:16:2C:F4:C2:90:49:5A:C5:BE:B8:94:75:8F:34:C4:0B:C1:33:94
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer:       /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial:       018F8DB81F98B2CAC1923FBACE12E510A377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number:          117A
Signing time:             Sat 18 May 2024 22:00:05 +0000
Manifest this update:     Sat 18 May 2024 22:00:05 +0000
Manifest next update:     Sun 19 May 2024 22:00:05 +0000
Files and hashes:         1: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: XccK6A4dhsWi6p8FYvSYdG6UQ/j90LA3C4cpfMAvZzI=)
                          2: kqBsLfAuQksoTU1sXHPywER1BJI.roa (hash: 6b0J4RHnrGFv1Ah6foZ4jSV4ZBVNC6n4VPUpasjfUUk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:1f:98:b2:ca:c1:92:3f:ba:ce:12:e5:10:a3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
        Validity
            Not Before: May 18 22:00:05 2024 GMT
            Not After : May 19 22:00:05 2024 GMT
        Subject: CN=71162cf4c290495ac5beb894758f34c40bc13394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:93:19:53:50:51:74:2f:6f:15:2a:7b:a3:
                    f7:3e:39:35:32:2c:9d:ba:ae:97:b5:2b:d1:e1:51:
                    0e:88:9f:00:f9:86:a2:cc:c8:b7:86:b3:14:cd:60:
                    3a:5a:f4:0a:1f:62:19:e1:9d:04:23:ac:7d:4b:da:
                    d8:5a:9b:4c:7b:90:27:50:03:5f:2c:c9:59:e7:08:
                    d7:e6:39:39:2a:32:47:91:92:f2:81:3a:68:7d:d4:
                    8c:19:3f:5b:b9:c7:c9:2e:f5:ed:bf:ad:3d:0c:3a:
                    57:2b:8b:91:3d:df:d5:99:d0:9f:cf:d5:7e:ac:5d:
                    82:18:43:05:6b:c5:c3:90:0b:e1:4d:43:1b:30:4e:
                    5b:8d:7d:90:f5:92:82:4f:86:ad:6e:31:07:0f:d2:
                    ae:10:aa:38:2d:b9:79:3b:a7:da:f7:18:f2:c3:ff:
                    6d:5d:bb:2d:84:73:7c:27:f7:54:b4:39:64:c6:95:
                    24:20:cf:89:58:61:5d:cf:12:ff:4c:aa:4a:c5:90:
                    3e:6c:ed:e8:cc:76:15:1d:df:e2:86:74:b0:01:48:
                    ab:a9:c1:e8:18:0d:5a:86:82:93:46:fa:f1:b2:a3:
                    db:87:7b:3d:bc:e3:6a:43:14:b2:e4:cd:3d:59:c4:
                    a9:b8:39:24:4b:96:ff:00:28:5e:4a:5a:43:01:9c:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:16:2C:F4:C2:90:49:5A:C5:BE:B8:94:75:8F:34:C4:0B:C1:33:94
            X509v3 Authority Key Identifier:
                keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:d9:8d:b9:5d:dc:db:cd:14:f3:ce:1b:fa:0f:d0:eb:30:
         0b:8f:31:e8:30:b8:aa:d2:b2:5d:a9:e9:dc:b8:fc:96:5c:30:
         3e:d8:c5:22:49:2b:7a:82:fd:52:25:d6:f6:8f:78:f0:16:d1:
         10:da:fb:df:0f:50:d9:24:74:61:9e:01:5d:52:41:a4:3f:c8:
         0b:de:e8:c0:2e:62:65:c5:b1:65:88:de:35:9a:3b:7a:49:52:
         3a:8c:5c:ee:73:48:2c:88:9c:80:ce:6f:2b:d2:2f:75:a0:c0:
         d5:72:c6:fb:70:a4:3a:10:d3:1d:cc:08:05:ab:bb:38:71:0a:
         c9:ef:bc:1f:6b:0a:3d:62:90:94:a6:7b:4d:a7:0b:f2:75:3c:
         b5:cd:bc:02:cb:b2:47:0f:90:f7:ad:fe:57:3d:e8:b1:9b:c7:
         38:94:94:2d:a0:da:7b:c4:c3:8c:fd:77:e2:61:86:dd:4e:0d:
         f6:51:ac:95:63:f5:cf:45:1b:7c:21:2d:74:8d:9f:c8:38:58:
         d6:5a:8d:96:f0:e6:87:05:87:1f:58:90:ed:47:96:d5:b8:c7:
         c0:98:12:5b:21:b9:dc:e5:8e:65:e9:2d:3e:b6:9b:ac:c5:0a:
         85:6c:e3:0d:bd:9c:40:a1:78:66:6d:9f:1b:05:cc:1e:27:61:
         46:8b:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:42:15 2024 by rpki-client on console-ams.rpki-client.org