Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
File:                     66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json)
Hash identifier:          6bWJpsFwoxzbEZf0CCRBIZnTrrzOzke8RlUc5Db4zac=
Subject key identifier:   33:C4:BF:F0:36:04:1A:62:B4:12:F8:AB:52:DD:EB:1A:2A:9E:3C:87
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Certificate issuer:       /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial:       018E82932DA0591C298F26EBBC92F1CCD7F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
Manifest number:          0BD0
Signing time:             Thu 28 Mar 2024 01:01:07 +0000
Manifest this update:     Thu 28 Mar 2024 01:01:07 +0000
Manifest next update:     Fri 29 Mar 2024 01:01:07 +0000
Files and hashes:         1: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: jfdGUky1LNMC4dGtBjvRYyZbXvzre/oTJG6+gWNJrMY=)
                          2: LZNDq-2SOXvqcoBdWjULuiOs8zI.roa (hash: JOIloMcllUdwg1LynA2pV+jXAxFMM1XN69Q0ezfexas=)
                          3: OX4RsI4c1HdlfaUGxa-gfIVDiAE.roa (hash: eK0NWtIgPAjlXGUeQ52N+rAyXp+KHTufRU3q5yGoUaU=)
                          4: d3wlbD-a3J3oyZqFo7lNFtb3XEk.roa (hash: mXXJG7jpyflr5QLtUYJ5fXRBE/s/+Eawnw4lMaOvAlg=)
                          5: ltsCCiPj4hWKYtdvTPs2xct1Zvg.roa (hash: 3LFRvB9i1uRqLf8xV43IC0Kb7ITeQL0UgZiBFQOZG1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 Mar 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:82:93:2d:a0:59:1c:29:8f:26:eb:bc:92:f1:cc:d7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
        Validity
            Not Before: Mar 28 01:01:07 2024 GMT
            Not After : Mar 29 01:01:07 2024 GMT
        Subject: CN=33c4bff036041a62b412f8ab52ddeb1a2a9e3c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:7e:21:f7:76:d3:12:64:55:f9:27:66:47:
                    2b:ac:be:7e:d6:0f:6d:94:bc:1c:19:d8:a4:2d:ee:
                    06:5a:76:f5:a4:6e:fa:2a:e2:33:79:6a:6a:e2:83:
                    cd:ad:b1:78:54:44:f9:69:f7:60:4b:b4:38:e6:01:
                    87:8c:7d:4e:6a:0c:f2:a5:4d:e6:85:7f:7d:79:23:
                    b9:a0:6a:75:b5:72:a7:c5:39:5a:44:27:1b:59:95:
                    12:de:76:a4:bf:b3:0d:ae:0d:7a:0a:7c:13:b6:fd:
                    0c:98:dc:5a:46:31:dd:fa:e1:60:ca:6e:4b:fc:a7:
                    57:d6:43:6c:a7:a5:40:86:16:59:a3:ad:47:26:0e:
                    1f:e5:c1:e8:3a:08:9c:e9:83:f4:07:89:07:ce:77:
                    06:dc:f3:a4:5c:83:c9:18:80:40:08:2e:d6:9e:1c:
                    76:e8:d9:97:b8:c3:7c:ee:31:4c:21:11:38:bb:fb:
                    bb:81:fc:f9:0e:13:aa:bc:5d:51:06:fb:4a:25:e0:
                    17:5a:f2:f3:05:17:e8:01:6f:d8:03:fd:be:69:97:
                    c4:1f:c5:1d:4c:99:e6:3e:8b:51:f0:0c:31:63:a4:
                    93:e7:64:f9:92:a0:de:cc:c7:35:6f:ee:0b:d7:86:
                    cb:62:0a:a7:0d:89:ee:92:da:97:ca:92:bd:c0:d3:
                    42:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:BF:F0:36:04:1A:62:B4:12:F8:AB:52:DD:EB:1A:2A:9E:3C:87
            X509v3 Authority Key Identifier:
                keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:8c:e2:09:d4:f1:ef:e4:28:5c:a8:46:69:b1:ff:10:d0:b1:
         84:9d:c1:8a:b7:23:37:cd:b1:ec:56:bb:23:13:af:e9:a8:59:
         74:0e:6b:65:44:03:06:62:94:6b:81:bd:82:c3:58:90:30:cd:
         d6:4b:41:c2:cc:a6:71:88:e0:86:7d:c2:64:c3:59:e2:a2:df:
         3e:56:1f:c0:b4:c7:57:db:5b:1e:d4:dd:f6:e5:9f:40:d5:7a:
         96:26:20:6e:47:78:89:98:df:f0:13:f7:d8:05:f7:82:7f:0e:
         67:f3:41:cc:b7:4d:ae:0d:ef:e9:9f:b8:32:42:33:94:3f:0f:
         a3:7e:25:34:3c:f4:5f:d0:f3:c4:bb:9d:ea:23:12:1c:a3:ec:
         19:25:18:da:01:ae:08:78:3c:70:c6:d1:cb:ec:c3:6f:a6:f2:
         d1:44:bf:0a:d9:4c:82:48:60:3d:a5:6e:c2:5f:3b:08:2a:58:
         72:ed:89:30:1e:0e:27:4f:c4:17:30:64:ad:15:46:ed:e8:19:
         43:6e:29:f4:19:3d:f2:55:2b:30:76:0e:34:f9:60:15:62:65:
         54:eb:3f:1d:47:6f:ff:db:e8:6d:98:c3:bb:90:74:0c:0f:c2:
         1f:58:1b:0d:5e:b0:35:b6:89:d8:7d:2f:84:d5:7a:7b:f4:07:
         a1:08:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:38:14 2024 by rpki-client on console-ams.rpki-client.org