Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File:                     sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier:          hrlnYMHcC5tp4tS/e7n4x1btb09HKOYOHBDWQRCWteg=
Subject key identifier:   2E:BE:8A:D8:11:A9:B5:9F:9F:87:42:F6:B8:D0:D6:3B:3C:6D:15:B7
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer:       /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial:       018F882488FBA021111324C3F727EE4A0A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number:          0977
Signing time:             Fri 17 May 2024 20:00:46 +0000
Manifest this update:     Fri 17 May 2024 20:00:46 +0000
Manifest next update:     Sat 18 May 2024 20:00:46 +0000
Files and hashes:         1: foBM3ZiwlXxyYX8XvFXDLH-aSO8.roa (hash: 6+dtq1eg69dwygJ8cU/mnlN1FK1pnsdXovpKv9anogM=)
                          2: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: D1J0jKP5IVcQAj51JpbKLx7vegb0+G9oMZacZXzch98=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:88:fb:a0:21:11:13:24:c3:f7:27:ee:4a:0a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
        Validity
            Not Before: May 17 20:00:46 2024 GMT
            Not After : May 18 20:00:46 2024 GMT
        Subject: CN=2ebe8ad811a9b59f9f8742f6b8d0d63b3c6d15b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:b7:a4:07:06:1d:34:5a:e8:1c:02:43:67:
                    68:b0:e6:bb:76:9d:98:b7:68:9f:ed:ea:11:11:1c:
                    4e:9a:e6:57:ff:28:c9:2a:7c:c4:9d:ad:4c:70:3f:
                    a1:14:69:ed:8e:b3:a2:2b:ee:6c:c9:bd:8a:50:e5:
                    33:68:96:a7:df:a4:7a:d3:56:ba:98:47:5b:14:c3:
                    e1:de:11:35:98:fe:d7:1a:ea:f2:e5:85:a5:2a:b8:
                    bb:32:a6:b9:dc:75:5e:b7:28:60:23:89:24:6b:ae:
                    29:18:e7:ed:18:32:0f:20:cc:98:82:83:a5:8a:e0:
                    8c:8c:e1:9a:61:e9:25:99:ec:6e:d3:b9:97:a2:82:
                    62:63:5c:7c:a9:ac:35:8e:82:a4:bb:b9:d5:18:34:
                    0b:2f:a7:69:1b:8b:41:82:c4:4d:8d:7a:d8:db:62:
                    0e:31:52:91:96:54:e9:df:cb:d4:57:81:5f:54:be:
                    fb:6c:72:7a:88:37:8d:d8:a1:c6:bb:80:2e:0e:6c:
                    ba:f9:7a:ec:9e:20:35:d5:e4:23:87:04:a0:5c:bc:
                    71:18:76:2b:9b:13:1a:74:e7:78:1c:04:5a:d3:98:
                    bc:25:db:48:d8:b9:b3:b2:f6:f1:87:ac:16:49:f1:
                    35:f8:f7:2a:b1:c0:5d:79:04:fd:b1:bc:bb:ac:3e:
                    86:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BE:8A:D8:11:A9:B5:9F:9F:87:42:F6:B8:D0:D6:3B:3C:6D:15:B7
            X509v3 Authority Key Identifier:
                keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:65:59:8c:d8:63:02:7f:a3:4c:d3:26:79:49:da:03:37:48:
         3a:7e:d4:4d:43:6f:ee:90:2f:08:7c:0e:d4:96:56:3c:f3:89:
         b9:78:55:f7:9d:ab:73:9f:c9:be:2e:ae:31:3b:cc:da:1b:49:
         08:72:c3:c6:4e:14:46:8a:41:28:0b:0e:83:1e:72:6c:f2:ab:
         a7:5e:48:34:c3:19:24:b1:fd:3e:23:89:af:30:1f:4e:d2:85:
         0f:72:ec:ec:a1:b7:4c:4d:80:e1:32:d0:0f:b5:84:c0:f9:2f:
         1b:63:26:b1:ac:91:1b:af:e8:6b:63:58:c9:fa:82:34:ca:b9:
         76:a7:76:02:88:2e:50:25:f2:da:77:35:ec:1c:12:b6:9d:e7:
         84:b3:7b:3f:c4:0f:c4:4a:cf:d1:f9:b5:15:4f:54:c9:fd:09:
         e5:39:a1:62:4c:06:37:89:cc:b2:1b:9b:bf:84:84:96:9d:42:
         27:38:ae:ff:17:82:31:61:40:09:2b:35:af:d0:e6:cc:e8:4d:
         69:d0:2d:91:71:32:04:2d:eb:82:ff:06:98:28:0f:6b:f6:57:
         e5:90:f3:b8:28:96:79:f8:1f:ab:93:c8:cc:7f:76:aa:a8:77:
         5a:c2:07:e7:87:54:f1:e3:e0:8f:b4:f5:26:28:05:3f:f0:92:
         99:1b:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:28 2024 by rpki-client on console-ams.rpki-client.org