Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
File:                     2bN6OM6IfTdjYEau84ehwjMVLkE.mft (raw, json)
Hash identifier:          hEwqtfAYwwUr6XVkJZb5cK0Ja1hAZNZmYh+pEOHwDAY=
Subject key identifier:   A7:40:42:23:EB:26:5F:59:E8:82:30:DA:33:AA:C6:F2:6A:7C:58:C3
Authority key identifier: D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
Certificate issuer:       /CN=d9b37a38ce887d37636046aef387a1c233152e41
Certificate serial:       018F893919326932761C7B3B244C9A4E988B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
Manifest number:          020A
Signing time:             Sat 18 May 2024 01:02:51 +0000
Manifest this update:     Sat 18 May 2024 01:02:51 +0000
Manifest next update:     Sun 19 May 2024 01:02:51 +0000
Files and hashes:         1: 2bN6OM6IfTdjYEau84ehwjMVLkE.crl (hash: cSyn00B6hXQPl7GNlyl3biEO6ghz005JIxxEX2BvFzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:19:32:69:32:76:1c:7b:3b:24:4c:9a:4e:98:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9b37a38ce887d37636046aef387a1c233152e41
        Validity
            Not Before: May 18 01:02:51 2024 GMT
            Not After : May 19 01:02:51 2024 GMT
        Subject: CN=a7404223eb265f59e88230da33aac6f26a7c58c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:e1:32:cd:2d:00:69:08:ad:aa:84:fd:7a:
                    d3:c3:40:65:70:9f:03:16:ac:c0:20:aa:06:21:44:
                    56:16:d8:c4:66:e8:8b:40:d4:eb:a6:86:23:80:b9:
                    b2:98:da:32:06:e7:df:82:c5:90:93:0a:de:6e:5c:
                    04:c6:62:01:a0:80:18:d8:ff:a7:77:5c:89:d2:04:
                    16:ee:27:8d:27:71:ed:04:cf:6c:b6:c8:53:36:33:
                    b8:c9:09:47:7e:e1:43:61:9c:cf:52:34:96:58:33:
                    2b:a1:a8:31:5a:ff:dc:d1:6f:c4:29:20:05:e1:6a:
                    bf:e4:30:32:e4:de:13:2c:69:a4:57:ae:d4:6c:62:
                    f6:71:fc:56:6f:b9:7a:5a:71:55:51:ca:82:89:cb:
                    ae:a6:b1:2c:3b:36:ef:19:17:c0:ba:e0:4e:db:db:
                    48:c1:62:ec:02:e8:3d:98:e7:ce:6c:75:66:21:de:
                    f4:44:43:d2:ec:92:e9:26:c3:46:f0:16:1f:fc:04:
                    02:b4:26:9f:17:10:56:bb:e1:56:11:3d:be:e3:71:
                    12:fb:6a:d5:77:26:f1:d4:08:50:41:dd:8b:3d:1a:
                    96:35:d8:25:02:b5:9b:6a:e7:00:a2:01:d4:06:b6:
                    38:0d:cf:f4:e9:7b:3b:c5:7a:0e:dd:f9:63:2c:99:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:40:42:23:EB:26:5F:59:E8:82:30:DA:33:AA:C6:F2:6A:7C:58:C3
            X509v3 Authority Key Identifier:
                keyid:D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:47:31:b1:cb:ae:5d:4a:5c:22:4b:d1:d5:c1:c3:79:b6:
         ba:06:18:51:7f:8c:42:3f:20:8c:10:db:7e:ea:2b:95:af:e5:
         b7:5c:32:d2:5d:85:f7:a1:7b:6c:8e:8f:53:ec:6a:ab:33:c9:
         f1:9b:dd:b0:a9:72:4d:bf:9c:ca:e2:2b:ae:02:b5:50:b0:9f:
         d1:92:3f:dd:e1:78:fd:ef:73:49:1b:6f:be:70:d6:01:44:73:
         17:cd:dc:6d:d4:65:9f:11:33:7f:59:fa:7b:be:e1:d8:85:ce:
         84:7e:80:4a:c6:7a:d6:0c:60:1a:e9:c1:1f:de:16:88:25:f9:
         5e:0e:ac:5b:31:65:5d:90:0f:71:58:a0:ec:bb:1e:6c:0d:5b:
         b4:3b:54:8c:6e:5b:d6:3f:99:b3:13:60:b1:19:41:01:fb:85:
         1e:12:a5:3f:21:8d:7d:5f:7d:44:5f:f7:1c:7f:2c:47:28:5c:
         a8:18:c6:26:c8:df:28:be:0e:0d:42:54:1b:78:20:36:6f:e8:
         9d:10:e9:4d:d1:70:bc:11:7b:e2:db:1f:5a:18:bb:d9:40:a4:
         7f:2a:78:26:82:5d:9a:e3:df:b9:4f:31:50:b6:17:16:6e:e3:
         ee:3a:17:41:2b:e2:02:3e:c4:07:fb:3d:30:37:3b:f3:8a:d3:
         30:c8:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:18:30 2024 by rpki-client on console-ams.rpki-client.org