Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
File:                     IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft (raw, json)
Hash identifier:          zy6RpAfaKxSFAPMJdJc2U+lT3yjiza7QblQ2vmkTBW4=
Subject key identifier:   1F:28:AA:8B:73:7C:1C:49:FB:D9:B6:4C:44:C7:ED:52:77:CD:69:4A
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Certificate issuer:       /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial:       018F4CB510D652105E87F57C3003B507BA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
Manifest number:          0A41
Signing time:             Mon 06 May 2024 07:01:25 +0000
Manifest this update:     Mon 06 May 2024 07:01:25 +0000
Manifest next update:     Tue 07 May 2024 07:01:25 +0000
Files and hashes:         1: HO9kjgkyYNBz2zCAwYWaHLiMXeY.roa (hash: BsNB48b6dfafnMvBJJPQCGBHwogCYwQm7oqsEfHLjjk=)
                          2: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl (hash: a/vigWJHP/usDejW7bLMsbQtvzbv0iX0Lx8O7GwoEms=)
                          3: Po9z6F8EN7evZEh_gqKvVT3Fb-g.roa (hash: gwIFzxhBT64J+H38Ti9vHJEwO0I/0SMVApJsBnRDV5Y=)
                          4: oqIOPeEL72RgFbkOgqCLKUIE9no.roa (hash: WNw7Z0WwWhkNKxPwMrbf/UnhhApuzJ+bvtPKuLbOu7E=)
                          5: zyUVruQXxAD7_mFlYZEvcdr00mU.roa (hash: dU0mqZqPQqyj4Bx04Ts8T1TOd99wL2FT6Eqrd1DIawc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:b5:10:d6:52:10:5e:87:f5:7c:30:03:b5:07:ba:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
        Validity
            Not Before: May  6 07:01:25 2024 GMT
            Not After : May  7 07:01:25 2024 GMT
        Subject: CN=1f28aa8b737c1c49fbd9b64c44c7ed5277cd694a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:7c:fe:f0:c3:d1:bd:15:01:dc:84:72:3b:
                    69:84:58:9b:42:87:90:42:9d:71:8d:5f:d6:1d:3e:
                    79:a7:52:98:d2:73:1f:34:16:72:95:8b:e0:ec:f2:
                    7f:09:7b:01:54:57:86:4b:2f:af:46:69:4c:24:1b:
                    31:1c:6a:5b:51:c0:2c:02:3b:35:7e:37:be:97:b2:
                    2e:26:9b:bc:0a:43:9e:80:d6:91:a5:93:f5:ad:97:
                    5a:46:19:3b:8b:fe:92:97:53:4d:14:15:13:82:d7:
                    f6:7f:1e:46:be:68:c2:f2:92:16:1c:9b:38:de:86:
                    9c:9a:9b:a1:c8:99:bd:69:a7:f8:6c:c6:cb:94:76:
                    97:3e:71:2d:db:b0:f1:e3:e6:90:5b:a0:2b:02:0a:
                    a5:77:78:cb:85:8f:be:b3:29:2a:8b:83:dc:83:05:
                    8f:18:67:07:d2:60:a5:30:bb:e3:da:4e:b5:53:24:
                    0b:34:2e:79:ac:3d:02:ff:09:84:d1:64:28:e7:0c:
                    5a:66:80:ae:47:8d:21:72:58:db:cc:79:d3:9e:3b:
                    7b:3c:f2:9b:51:63:fb:5a:9e:58:e9:db:7f:4d:4d:
                    fc:ed:f2:04:3e:77:70:d8:f6:17:56:f6:04:85:d7:
                    26:3f:3d:c4:21:f0:66:50:15:3c:74:6d:7c:49:8d:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:28:AA:8B:73:7C:1C:49:FB:D9:B6:4C:44:C7:ED:52:77:CD:69:4A
            X509v3 Authority Key Identifier:
                keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:cf:06:5a:71:87:5f:3e:08:cf:68:9a:7a:2c:7c:94:0b:d0:
         43:71:e8:89:ce:6a:d7:b6:c1:6e:f1:2d:5a:50:74:f3:c4:9f:
         2c:cd:65:be:8f:64:d2:50:17:22:98:a7:cf:5b:4e:cb:7f:f5:
         0b:b3:b2:d6:1e:7e:d8:37:80:ac:e9:01:09:9c:f5:fd:97:94:
         64:13:d7:cb:21:c8:4a:11:8a:29:79:86:f0:38:f1:e0:5b:0f:
         92:8e:12:99:bf:a0:22:ad:6b:78:a2:b4:b1:2d:34:c1:81:3d:
         68:45:b2:56:ba:99:61:d2:cd:b1:42:bc:76:25:db:77:7e:3f:
         5d:99:e9:7a:b4:00:4f:55:41:25:fe:8a:ef:e2:e3:c5:f2:52:
         63:18:46:aa:aa:69:5d:f8:0a:56:ef:44:fe:62:fa:2c:e4:ab:
         bf:3e:cb:12:6b:93:c8:6f:a7:9a:58:c1:61:e4:85:e3:35:07:
         2e:82:93:4a:28:a7:51:a6:22:f7:08:2b:35:7c:28:51:ae:1b:
         7e:83:cb:66:23:89:79:31:97:20:1d:2c:ce:1d:13:a9:c0:35:
         d1:af:3b:42:46:d9:80:2f:1c:87:cf:41:76:b7:c1:09:e6:00:
         80:62:a1:14:f0:9d:dc:65:71:dc:60:14:fd:d2:d0:76:0e:13:
         e2:41:15:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:44:50 2024 by rpki-client on console-ams.rpki-client.org