Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
File:                     27m8LeNs8jtonzxy6Aq8_kggJsE.mft (raw, json)
Hash identifier:          wUaMx9CjOB7mclL0svDClUdjEeqOMY4+p/xe3SpcINs=
Subject key identifier:   A3:59:8F:54:A7:04:A8:EA:E4:2A:43:88:12:96:4F:EF:E3:B7:18:73
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Certificate issuer:       /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial:       018F3A09DE2255FD808D89B467B2D1CBC3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
Manifest number:          0CFB
Signing time:             Thu 02 May 2024 16:01:16 +0000
Manifest this update:     Thu 02 May 2024 16:01:16 +0000
Manifest next update:     Fri 03 May 2024 16:01:16 +0000
Files and hashes:         1: 27m8LeNs8jtonzxy6Aq8_kggJsE.crl (hash: b2RGs8hwAxH/Yr7tyFlaD0ZmDz/PT3u6mbkM6w/6XQI=)
                          2: 8FLqF9kw1T4iBTmlRcwFEB9e71M.roa (hash: hU1o0xK8bcVdXQg/8WiA0gmNB6Giekfc8TIqtCl7WyA=)
                          3: n3w6qu823sxf8Bha7ZDY_gPi7JA.roa (hash: eMFuo0S951X+CJxQhqBLxdTCjIRsSD7fV6BDqFJzhTg=)
                          4: zOZCAhuJndelt_95SopkWG9hIZM.roa (hash: znRttpAa644tfn4f2qMZlqJbUKwRa1FgP5YJMV1kwvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:09:de:22:55:fd:80:8d:89:b4:67:b2:d1:cb:c3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
        Validity
            Not Before: May  2 16:01:16 2024 GMT
            Not After : May  3 16:01:16 2024 GMT
        Subject: CN=a3598f54a704a8eae42a438812964fefe3b71873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:6d:8d:9f:a0:6d:a9:5b:7b:18:bf:59:50:
                    21:aa:50:c7:20:f8:b3:cf:ac:dc:88:f4:fe:44:42:
                    4d:de:20:fd:71:aa:53:9e:47:52:d5:4f:0d:0c:43:
                    ea:ee:60:4b:83:9a:ce:dc:79:24:89:ed:d1:dd:1b:
                    f3:eb:89:4e:34:2c:fc:7d:5f:81:08:54:d8:39:a3:
                    2d:1f:24:41:19:ba:1a:0b:80:12:12:d8:26:bb:71:
                    f8:b8:21:e2:94:6e:7c:e9:01:59:b0:b9:85:a7:dc:
                    f4:5a:6e:ea:91:1f:80:68:2f:3a:d8:d1:ca:6c:e9:
                    7d:7a:bd:3b:b4:0a:8f:c5:e8:97:19:3a:96:2c:d0:
                    42:72:d1:b9:10:7d:df:95:c2:48:8b:69:6a:d9:6c:
                    6c:29:0e:c8:8a:5a:87:3d:98:7b:19:92:00:18:f3:
                    88:ae:d1:40:93:e7:88:34:26:0b:75:6d:6b:f1:61:
                    b0:07:16:2f:35:3c:16:4f:48:5a:8c:d8:60:ce:a9:
                    08:ff:e6:22:47:11:80:13:6b:82:51:39:c3:71:bb:
                    13:24:92:1f:60:36:13:3e:aa:c0:70:ca:9a:53:90:
                    df:56:a6:66:9e:37:02:c3:60:71:29:bc:bd:25:fd:
                    c2:97:43:c0:3a:53:a0:1b:20:33:fe:2b:9f:2b:77:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:59:8F:54:A7:04:A8:EA:E4:2A:43:88:12:96:4F:EF:E3:B7:18:73
            X509v3 Authority Key Identifier:
                keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:41:ad:44:f3:fd:47:04:b1:ee:01:d8:f6:3c:bb:47:e1:
         e4:89:55:ac:f8:7b:6b:0b:71:7b:07:f8:df:53:f8:62:7d:8d:
         82:68:b9:3c:5e:59:4c:75:51:88:88:e8:82:d1:02:3c:9e:f4:
         e1:f2:8b:34:3b:78:47:ed:6b:3a:2c:34:77:44:49:0a:54:da:
         4e:0d:73:b8:ee:f3:7e:06:b9:ec:97:30:62:a7:41:01:16:ff:
         35:ba:07:5c:2f:87:31:8a:a9:a4:07:79:fc:ce:13:48:b4:5f:
         2a:dc:42:a3:ab:69:a2:21:df:0a:be:35:94:17:6d:ec:2e:c1:
         b4:f9:f1:80:a9:3e:f5:ec:61:d0:6f:2e:c3:79:18:df:e8:5e:
         e9:fd:4c:7e:0e:2c:b8:95:b5:5d:f4:4e:ce:3f:50:b8:be:8e:
         d3:42:df:fa:da:c7:a7:06:6b:b1:45:9d:d2:4f:bc:ca:7a:78:
         e8:3d:24:22:8a:3b:13:7b:a0:d9:11:c5:07:8c:e2:8a:00:fd:
         d5:7a:61:48:5a:cf:14:9c:c9:4b:f3:f6:87:61:9a:5c:53:e2:
         eb:dc:87:59:5b:af:11:10:4d:ab:87:71:e1:5b:c4:7f:c1:78:
         d3:e6:32:5b:22:6b:1e:91:37:04:cb:14:dc:51:63:b3:72:5e:
         ec:30:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:37:41 2024 by rpki-client on console-fra.rpki-client.org