Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File:                     67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier:          D1m6iGMwr69fFuRR8AlDuddFMh36hb4KOWsOt6hHkAo=
Subject key identifier:   02:75:85:C8:83:D4:28:D0:12:F9:77:90:A1:5B:10:5E:00:AC:00:9F
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer:       /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial:       018F4791234A974339A9C03BF1258A48E42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number:          08B9
Signing time:             Sun 05 May 2024 07:04:04 +0000
Manifest this update:     Sun 05 May 2024 07:04:04 +0000
Manifest next update:     Mon 06 May 2024 07:04:04 +0000
Files and hashes:         1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: UkfB/VH2MW7CYn5X7Ew3cvb6aCzn023MeIJWodfzaeM=)
                          2: hdFltZAU-rwNZnYdLRngpgTECRg.roa (hash: XwzEXl1Tl4/0EEuDXlM5jWy553lD6O2N2wY+pzifrHo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:91:23:4a:97:43:39:a9:c0:3b:f1:25:8a:48:e4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
        Validity
            Not Before: May  5 07:04:04 2024 GMT
            Not After : May  6 07:04:04 2024 GMT
        Subject: CN=027585c883d428d012f97790a15b105e00ac009f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:8d:d1:05:cf:8d:2a:3e:27:95:63:71:7f:
                    a9:b7:37:65:37:5f:fa:5a:b8:c4:b8:34:33:c9:05:
                    ea:b5:f3:3b:9d:ef:64:0f:8a:12:9a:c0:ca:e1:27:
                    01:d7:08:ac:30:26:ad:27:74:5f:42:e5:7a:84:5b:
                    24:10:0f:8c:db:ed:27:68:86:bc:b8:b7:8d:d8:4b:
                    92:58:cc:ef:ff:10:77:fa:74:19:c1:03:76:e8:a3:
                    ae:d1:ce:12:7c:84:47:d3:bd:2e:3e:13:9f:79:0b:
                    d7:56:c2:55:f0:f3:70:0f:11:d7:44:cf:4b:df:1f:
                    24:3c:fa:d4:47:31:3a:45:ac:63:c1:42:37:f3:32:
                    00:e5:e6:e4:b7:6c:3b:d8:e5:85:bc:85:51:0f:22:
                    63:dc:72:7f:86:ea:68:4d:ed:ed:fb:73:a8:2e:ab:
                    25:5b:8b:dc:cf:1e:01:03:b5:c1:62:34:1d:d9:dc:
                    68:5e:06:3a:cd:dd:39:12:69:75:f3:12:c4:a6:08:
                    10:bc:61:84:66:71:c3:85:65:3e:4f:d0:d2:cd:1a:
                    3d:2f:b1:a7:13:c9:e4:f5:b5:48:10:a4:15:75:23:
                    09:a3:77:61:eb:4a:65:af:b1:49:1e:1d:ea:51:3e:
                    10:f8:11:6a:60:72:d4:a3:dd:b2:3e:52:f4:32:4b:
                    cb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:75:85:C8:83:D4:28:D0:12:F9:77:90:A1:5B:10:5E:00:AC:00:9F
            X509v3 Authority Key Identifier:
                keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9e:a0:5f:ae:28:60:3c:73:c5:6e:ee:d7:b3:3b:d1:5e:72:
         a7:07:c8:62:17:1b:6a:60:8b:55:8a:cb:5a:d0:e5:1a:c9:ce:
         b3:e4:23:12:a4:9b:a2:54:e1:33:13:9b:6f:d4:17:59:90:af:
         ea:b1:33:17:74:3c:c7:bb:e2:9f:8e:18:e8:93:f8:73:b4:88:
         11:0a:01:1c:90:b6:16:1d:15:79:2b:fa:87:99:08:b6:46:07:
         7d:ed:64:52:67:c5:87:57:e7:81:99:23:f1:66:53:d2:2f:2c:
         3e:04:94:51:34:15:b4:ad:f5:a2:69:41:f0:35:80:ad:23:48:
         eb:86:3a:aa:de:2f:f3:5a:08:5b:98:04:0e:f2:62:79:d3:e5:
         70:b3:3e:5c:ed:d3:7f:35:49:60:04:85:1d:a5:2c:fb:7a:f4:
         60:51:18:4a:73:38:d0:f8:fd:1c:28:02:4f:60:bf:3c:3d:92:
         09:6f:88:ce:e9:bd:eb:ba:fa:2c:7b:57:8f:f7:24:14:e0:5b:
         98:b5:90:20:5b:99:77:dc:0f:2c:f8:bc:d6:31:cf:6b:cd:1e:
         30:a9:32:90:ec:a8:fe:39:0d:4e:31:cd:ee:2a:65:24:74:34:
         3f:71:8c:fb:3a:74:4e:63:5a:7f:21:fe:c2:0e:de:4f:81:0c:
         5b:49:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:31:30 2024 by rpki-client on console-ams.rpki-client.org