Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File:                     bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier:          Rmukt6fHOcte4MuqEpDB+gITQetgMZSR2fFr4LcCruA=
Subject key identifier:   36:20:2F:D5:7C:68:F9:51:50:22:F3:76:F3:22:74:09:0E:82:FA:B7
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer:       /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial:       018F866CB5AECD6BAC1EEDD5128C42DDC85F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number:          0EE2
Signing time:             Fri 17 May 2024 12:00:22 +0000
Manifest this update:     Fri 17 May 2024 12:00:22 +0000
Manifest next update:     Sat 18 May 2024 12:00:22 +0000
Files and hashes:         1: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: qhr0JPMrC5a96iexe64YNhr5+5w9GpNMGrYEYvNeo+8=)
                          2: yeeuhXUV56ipS-Jq9ln0Q8NEnMg.roa (hash: EA+ojy9RXNITvFGzmDiTS3c/JR79aePr64hapgB6Ds0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:b5:ae:cd:6b:ac:1e:ed:d5:12:8c:42:dd:c8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
        Validity
            Not Before: May 17 12:00:22 2024 GMT
            Not After : May 18 12:00:22 2024 GMT
        Subject: CN=36202fd57c68f9515022f376f32274090e82fab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:67:cd:1d:a8:81:22:06:e1:b9:72:4e:11:
                    7d:26:84:60:60:3a:ed:1e:89:6a:dc:d8:06:10:ad:
                    0e:57:07:82:9d:42:40:7d:05:91:ae:4e:ed:42:93:
                    44:83:47:21:35:aa:12:a7:47:49:ea:5d:d4:1b:27:
                    e1:f9:18:fd:67:4a:88:46:0f:ab:46:e4:00:fa:7e:
                    3b:2d:71:6f:2b:e4:7c:dd:a2:61:28:51:e1:de:99:
                    a6:55:4f:56:13:fa:08:f6:b2:ef:ac:c2:fe:e3:ab:
                    cf:35:27:2b:d3:4a:e7:ac:67:3a:08:ad:43:8b:ca:
                    c6:78:7c:48:b1:f0:4a:e3:02:74:e5:88:b0:11:6f:
                    8f:75:50:d8:aa:45:9b:19:4e:19:d8:e4:55:a6:e5:
                    85:26:b6:fe:13:d7:62:39:54:a9:36:ff:5e:9a:ba:
                    9f:10:a2:6c:ae:53:c9:3e:e8:bb:4c:d2:2f:50:6d:
                    ce:7f:e2:51:3e:6d:55:9b:22:4b:06:33:3b:7e:3c:
                    bf:75:17:c8:0b:a1:76:b2:4a:8e:c9:f8:98:57:36:
                    d7:b0:86:05:ed:e7:32:1c:04:d4:68:08:1d:84:14:
                    d3:75:73:62:a6:77:60:5a:b5:2e:d6:a7:08:5b:d1:
                    d4:7d:7d:6a:10:64:29:ca:2e:bd:31:f5:6d:76:c8:
                    4f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:20:2F:D5:7C:68:F9:51:50:22:F3:76:F3:22:74:09:0E:82:FA:B7
            X509v3 Authority Key Identifier:
                keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:b9:86:9d:bb:81:82:0b:0f:b6:7a:55:71:c5:7f:7a:78:
         83:97:c1:8e:79:a1:0f:e8:c9:51:fe:4c:6b:98:7b:69:ab:2b:
         63:ad:15:09:49:f1:87:79:67:6d:e4:6a:bc:6c:eb:2a:d8:f6:
         8b:09:4e:1d:22:7f:fd:ef:5e:ca:f1:95:5f:2d:35:91:fd:ff:
         ca:43:e9:fc:78:12:7c:05:e3:7e:29:8a:c6:98:c7:7d:cf:2e:
         d0:8a:bf:59:a1:35:5a:64:a4:7d:f5:f2:2f:eb:5b:ff:3f:92:
         04:79:eb:7d:11:82:c9:18:95:9d:e1:e1:30:a7:65:e0:df:40:
         09:cc:2d:00:9c:5a:9b:ba:56:32:e6:89:b8:79:2c:c4:cf:b9:
         a1:7c:f3:02:18:32:74:f7:df:c2:18:38:38:b1:31:1a:f1:3a:
         5f:2a:87:b7:cf:8e:4a:b3:86:10:5c:13:ea:e1:9f:2d:ce:47:
         0f:cf:30:ad:b8:eb:36:fc:93:1a:bd:11:65:1c:d9:08:2f:82:
         5e:4a:58:6f:ab:02:bd:c2:0a:a5:29:02:f9:12:88:e5:67:5e:
         ca:2e:b3:13:a3:dc:51:d5:ca:20:26:e5:56:ae:71:16:5f:5e:
         82:52:51:29:50:4a:37:8e:b3:a9:9c:ef:1a:ea:50:28:03:7d:
         ec:c3:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:40 2024 by rpki-client on console-ams.rpki-client.org