Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File:                     2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier:          LZVFkT8a5frfDaVPdt2YjaSWY7RuV+ETKhfTcqRPxZk=
Subject key identifier:   4F:79:C3:4A:EC:ED:AD:ED:26:54:CD:75:3D:F1:58:8D:D3:92:F6:BE
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer:       /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial:       018F576F3AE80F054B09FAFFE65721515BC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number:          0FE8
Signing time:             Wed 08 May 2024 09:00:58 +0000
Manifest this update:     Wed 08 May 2024 09:00:58 +0000
Manifest next update:     Thu 09 May 2024 09:00:58 +0000
Files and hashes:         1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: 4MUNC8INLwpdIyDuoa4cGcDfcD0hdkPMwP6mTAZm59U=)
                          2: JMmjQJa7-2XzI3qdigktCAnFHbM.roa (hash: pIXbnKBeNwUIgbSCR6BNRhSjBjtAYWBDQIBvSUuRLiQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:6f:3a:e8:0f:05:4b:09:fa:ff:e6:57:21:51:5b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
        Validity
            Not Before: May  8 09:00:58 2024 GMT
            Not After : May  9 09:00:58 2024 GMT
        Subject: CN=4f79c34aecedaded2654cd753df1588dd392f6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:a0:af:34:ac:8d:33:65:92:e6:45:6a:23:
                    cc:db:52:1b:28:77:21:05:d3:4c:6f:0b:6d:7c:a8:
                    6a:c1:63:18:77:1c:f7:56:af:7b:cd:4c:52:a3:47:
                    e9:e6:98:e6:fd:d6:6e:ca:98:4c:ef:91:61:cf:c6:
                    c9:6f:d1:07:bd:be:f6:27:7c:32:3a:f0:07:ce:9a:
                    8a:1a:b5:c5:31:68:ac:88:04:54:35:24:64:b3:51:
                    f6:cb:a0:5e:ca:f0:98:9d:6d:cf:ec:86:49:51:3b:
                    cd:79:51:a7:6f:06:c3:cd:6c:00:bf:65:0b:cf:41:
                    7d:07:8d:14:dc:df:1a:c2:04:d0:00:ce:67:ee:12:
                    99:9e:61:1c:6a:6c:70:bc:08:94:b4:a0:91:c8:fa:
                    cb:6a:44:6a:23:ee:40:f5:7a:03:25:c8:a2:ee:53:
                    9c:36:68:a5:da:44:4f:55:b2:81:5f:10:f8:21:dc:
                    e7:91:17:f1:30:a8:32:a0:54:3c:f3:6c:f6:2e:e7:
                    a4:77:65:91:b3:b6:4d:56:1e:6c:cb:83:10:79:03:
                    ee:d8:e4:46:60:f7:29:83:2c:1a:9b:d4:14:1c:71:
                    75:8d:b4:6b:1f:93:6f:b7:5e:79:aa:c8:88:1b:71:
                    9d:cd:5d:b7:83:e6:4b:62:ec:96:b8:11:c8:6f:aa:
                    38:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:79:C3:4A:EC:ED:AD:ED:26:54:CD:75:3D:F1:58:8D:D3:92:F6:BE
            X509v3 Authority Key Identifier:
                keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:01:b2:ac:24:e7:58:a4:6a:49:5b:9e:9f:50:05:9a:26:2c:
         f5:36:39:c4:fc:20:46:7a:d7:8e:af:9d:d1:47:16:35:8f:f2:
         a9:90:c2:a1:19:61:2a:a1:e5:59:31:de:4a:a0:52:87:2c:75:
         88:87:46:2f:2c:b7:9a:46:3d:22:13:99:48:58:ed:d9:99:d6:
         1c:4b:cd:2f:9b:32:5e:cd:0e:f3:16:e4:d7:b3:0a:69:42:fd:
         f1:0e:8d:a3:2d:15:a0:35:85:cc:dd:08:0d:ba:e3:75:66:b0:
         2b:3d:18:fd:5c:10:47:c7:4f:54:bc:9b:ba:26:ae:04:99:16:
         5e:40:1b:34:9c:b1:aa:57:b0:43:2d:32:e9:69:a8:95:0c:ff:
         c7:bd:05:40:dd:e6:46:01:45:36:ac:82:c2:f2:d1:bd:af:a0:
         8e:12:a8:d6:31:25:6f:6d:b4:0b:49:a7:40:f3:45:98:11:36:
         92:a2:9d:b5:64:d9:87:c5:d3:8e:7b:9c:d5:1e:5e:63:0f:29:
         1e:1c:18:70:7b:f2:62:a3:0a:99:b9:ae:95:4c:20:b6:ce:f3:
         bf:a7:99:f3:3c:21:03:72:6f:83:73:f9:ac:85:fb:20:1b:3b:
         60:0e:90:f6:8f:91:ab:1d:d0:d9:59:2d:d6:0e:b5:50:71:90:
         4c:57:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:42:48 2024 by rpki-client on console-ams.rpki-client.org