Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File:                     G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier:          1BM0HFgef9nmPzfAkkUloo69ppu/4nvS4h4HMZeUohk=
Subject key identifier:   3E:FD:04:1F:4B:6F:91:BF:8D:7F:4F:1A:BB:BE:AB:08:40:AF:27:7C
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer:       /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial:       018F3D422C305D499C756E9A7CB16322F686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number:          0DF6
Signing time:             Fri 03 May 2024 07:01:37 +0000
Manifest this update:     Fri 03 May 2024 07:01:37 +0000
Manifest next update:     Sat 04 May 2024 07:01:37 +0000
Files and hashes:         1: 7bQyCINYjMV6N4VaoHucYY2Lwz4.roa (hash: CJRTFUZxiJwonztNUoNxTI+zaXB+LjaETfftcRL1LF4=)
                          2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: DgwHbeqfwZWEv+GRW8V3UM+CEPQ2V9cK7R6gaIMcIi8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:42:2c:30:5d:49:9c:75:6e:9a:7c:b1:63:22:f6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
        Validity
            Not Before: May  3 07:01:37 2024 GMT
            Not After : May  4 07:01:37 2024 GMT
        Subject: CN=3efd041f4b6f91bf8d7f4f1abbbeab0840af277c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:dd:88:77:55:38:ea:2c:3b:ee:37:e4:e6:
                    af:72:30:05:25:46:7d:ff:7c:de:7d:84:4a:49:cb:
                    5f:de:32:21:d7:3a:3b:f7:7b:e1:c7:72:cd:22:21:
                    64:28:bd:60:de:59:b2:64:85:5a:d7:4d:dd:5d:6e:
                    91:b9:6c:de:65:0e:2a:8a:49:28:9d:64:89:f2:44:
                    cf:20:32:69:d9:1a:e1:32:10:05:f8:24:64:41:49:
                    6b:ce:5a:76:a3:6c:96:cd:7b:ba:07:c3:aa:71:2e:
                    42:61:70:e4:ce:a7:e2:fa:d6:82:f3:82:34:41:e4:
                    62:69:1c:40:96:8b:4e:8e:d8:36:65:3b:51:60:5d:
                    dc:d3:0a:07:69:80:9c:40:56:b0:9b:ab:b9:aa:8c:
                    4e:35:38:2e:08:8c:ff:46:4d:1e:9d:09:81:91:b6:
                    02:d8:92:a4:62:8f:9a:a5:1e:53:58:20:35:45:dd:
                    54:1d:15:d0:4a:f1:58:1f:b9:c0:a9:99:ec:19:3f:
                    56:96:f7:04:62:e1:b5:db:51:0c:97:b3:a4:23:d4:
                    3e:a7:91:c1:3f:df:f6:42:49:6b:4f:2a:21:3e:d1:
                    38:d4:c5:d8:44:28:9f:03:37:4f:06:79:14:b9:7d:
                    4e:ff:56:7a:d0:e2:fc:86:96:28:87:3b:a6:01:c4:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FD:04:1F:4B:6F:91:BF:8D:7F:4F:1A:BB:BE:AB:08:40:AF:27:7C
            X509v3 Authority Key Identifier:
                keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:02:e2:fb:43:de:5e:81:e9:0c:21:48:b6:fd:db:91:e0:0e:
         79:da:8b:81:0f:74:62:d0:8a:86:22:a8:8b:43:80:df:3a:70:
         e4:5c:37:13:6c:8f:13:1a:db:93:b2:6c:a3:e1:a3:96:57:8e:
         8e:11:7c:88:9a:2b:67:25:b3:2a:6d:1f:64:ee:fb:76:a1:19:
         6d:66:c2:42:a9:2d:1f:53:d9:df:0c:b7:1b:24:95:33:8a:16:
         f9:a3:5e:a5:a7:4e:c1:2e:92:8f:72:f5:85:b7:f7:25:28:ea:
         75:a8:7e:6c:2b:42:3c:d8:03:53:4b:fa:c2:55:f8:19:e2:8b:
         03:51:51:db:db:f8:8a:c0:ee:2b:4e:25:c5:dc:ae:19:92:65:
         a6:13:21:d6:c5:ec:9f:32:13:34:04:11:8c:e6:fe:60:fb:86:
         dd:18:07:50:1a:a2:e3:84:42:3f:d0:07:5b:35:f3:9d:61:5e:
         33:7b:fe:b3:b0:7c:69:5d:3d:43:06:f5:63:41:71:ea:59:4c:
         ce:c9:a6:42:71:f3:51:da:6b:5d:ef:a6:45:7b:e2:d4:22:71:
         68:7e:0b:25:16:bc:19:3b:5b:d3:fe:4d:48:76:1d:d7:f3:95:
         3b:26:c7:df:fe:7f:b9:c5:21:da:83:86:39:17:f3:59:bf:23:
         68:15:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:07:30 2024 by rpki-client on console-ams.rpki-client.org