Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
File:                     a33-S2iyCJXt7fOgAyMql54Xw4w.mft (raw, json)
Hash identifier:          wZJPnzcgkS31a8xC/0s4yW3qnO3iLaWTCrWoIjh19mQ=
Subject key identifier:   6E:E7:39:1D:92:3B:83:BC:E4:C8:36:08:C8:DD:19:56:DE:ED:E4:17
Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C
Certificate issuer:       /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
Certificate serial:       018F8824490E82851AC169C1F65FCBAC2FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
Manifest number:          1051
Signing time:             Fri 17 May 2024 20:00:30 +0000
Manifest this update:     Fri 17 May 2024 20:00:30 +0000
Manifest next update:     Sat 18 May 2024 20:00:30 +0000
Files and hashes:         1: a33-S2iyCJXt7fOgAyMql54Xw4w.crl (hash: v1/CzoCX1GCqRRuhkjVU+dOZOotiKZ950nHvrZA57SQ=)
                          2: nShEfm5vLYtRnLvmQ1wqdQVBPoE.roa (hash: Thuyz6pL4FBflP1muIgYBrdk8+pXw0/gOTDu1eOKiR8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:49:0e:82:85:1a:c1:69:c1:f6:5f:cb:ac:2f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c
        Validity
            Not Before: May 17 20:00:30 2024 GMT
            Not After : May 18 20:00:30 2024 GMT
        Subject: CN=6ee7391d923b83bce4c83608c8dd1956deede417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:57:c9:df:12:ce:1c:39:10:30:41:81:fd:
                    31:d6:59:8a:b6:8b:22:2e:41:cc:6c:89:f1:c4:88:
                    a0:e9:c0:22:70:f3:19:9c:29:93:cb:a4:2e:54:55:
                    2a:a3:d4:88:bd:22:75:34:3c:fb:a5:fb:13:f7:3e:
                    96:1f:f8:9d:4b:85:13:b4:6c:f0:00:71:33:42:a5:
                    5f:da:ff:56:9e:3b:36:27:62:06:cd:93:a3:3d:74:
                    85:12:5a:89:a6:7e:fe:6e:11:c9:79:75:2d:b8:14:
                    13:17:80:8f:6a:5d:3f:a1:b5:33:d3:e3:5f:32:8f:
                    e8:a0:bb:41:3d:c7:f4:e0:71:0b:79:4f:e4:99:ac:
                    90:92:be:90:1e:2e:42:09:b0:0d:d6:1d:f1:76:6a:
                    52:b6:70:c6:ee:e7:32:44:2f:84:42:ae:4b:0c:74:
                    c4:af:7e:d8:48:64:29:a9:aa:47:67:75:f6:87:60:
                    8e:a0:93:cd:1c:72:46:b0:dd:0f:92:d5:9e:bd:87:
                    3a:cb:93:1f:98:cf:52:6c:b3:3e:28:6e:52:15:ae:
                    56:94:96:e8:e7:03:02:96:a5:0b:3d:34:ad:8e:bd:
                    61:79:68:a9:bf:a1:de:2b:f9:6a:c2:93:91:8a:83:
                    b0:e8:4c:1f:95:a5:b6:fe:db:ab:ac:ea:fe:8e:49:
                    5b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E7:39:1D:92:3B:83:BC:E4:C8:36:08:C8:DD:19:56:DE:ED:E4:17
            X509v3 Authority Key Identifier:
                keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:48:a4:df:de:15:58:f6:50:95:46:59:c6:6c:3a:be:f3:fb:
         d0:31:ad:d3:cd:82:c1:07:f2:bd:69:06:65:41:de:06:45:7e:
         75:0a:04:41:a9:23:c7:bd:5e:08:26:c1:f6:67:0f:cd:ae:bb:
         ef:81:96:db:d4:ab:9c:08:f3:b5:00:f8:33:a8:b3:20:09:e2:
         18:54:23:3b:47:af:6e:42:df:a5:5e:a2:58:58:6a:23:19:12:
         1b:53:20:e7:fc:ba:8b:37:b0:81:00:6b:a3:dc:43:de:f1:f9:
         98:4e:28:0c:86:c6:04:70:97:15:24:55:03:cb:b6:33:dd:8d:
         62:c4:b3:a2:e4:2f:21:ce:c4:48:8e:e4:d6:53:23:01:f4:7c:
         cf:51:75:86:e7:15:ab:ed:76:8c:46:03:33:60:52:dd:cb:ba:
         7b:cb:37:f5:cb:62:ed:7e:cd:92:4f:d3:1e:83:a4:0c:f5:d3:
         96:0e:37:23:4b:02:20:5f:71:d6:59:66:da:f8:d3:43:e3:dc:
         35:fd:c0:de:0f:4f:c8:07:68:9f:f2:ca:31:f2:6a:28:92:0b:
         df:bf:bf:81:8c:1e:63:8a:7a:1b:3b:f2:44:7b:7e:d5:df:5a:
         2f:ee:f0:94:d9:f4:a7:a3:c1:54:7e:8c:79:3b:cf:84:de:49:
         7f:5e:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:08:39 2024 by rpki-client on console-fra.rpki-client.org