Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File:                     ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier:          lZayg9dcCgi9XdnEXrSBWrT4BuOzcq3U9UrFVbTRZqY=
Subject key identifier:   61:9A:1F:7A:74:96:EA:4B:38:4F:9B:9E:1D:9F:B5:09:F2:4C:CD:6F
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer:       /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial:       018F874AF34365224FDBE1BCBD952390C4FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number:          03DB
Signing time:             Fri 17 May 2024 16:03:06 +0000
Manifest this update:     Fri 17 May 2024 16:03:06 +0000
Manifest next update:     Sat 18 May 2024 16:03:06 +0000
Files and hashes:         1: L0lJ-m63UBCg3qylE6nYzhK_WxE.roa (hash: VAuyhh9aoEK35Yd1yy+sFbp+5BW1eoVueDqbh86o+R0=)
                          2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: 6lv0XBQBqLxo5BL3jRMeCgzVgnBd866MQj+pxI78fcw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f3:43:65:22:4f:db:e1:bc:bd:95:23:90:c4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
        Validity
            Not Before: May 17 16:03:06 2024 GMT
            Not After : May 18 16:03:06 2024 GMT
        Subject: CN=619a1f7a7496ea4b384f9b9e1d9fb509f24ccd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:d8:32:fe:9f:01:10:63:b5:56:b8:71:f1:
                    ed:1f:93:0d:e0:c1:69:a1:12:64:cb:e1:d7:fe:55:
                    6b:ad:24:15:d4:64:ac:90:70:69:61:84:cd:19:5d:
                    a1:a2:b5:a0:33:28:18:9e:ba:7a:16:6a:cf:71:10:
                    c9:14:62:f2:ba:6c:c7:c6:c3:a3:dc:d5:bb:94:9e:
                    73:87:3a:c3:32:0d:34:2d:4c:44:2b:cc:bf:c4:cc:
                    cd:82:e8:bf:97:a0:93:65:63:c2:4e:35:da:79:d3:
                    ae:91:58:8c:a6:2d:83:73:34:b1:b5:78:bc:e0:27:
                    43:e5:27:a8:f4:42:c5:0e:c9:28:24:f7:18:4e:11:
                    39:48:dc:6c:01:f2:77:cb:05:22:14:47:b8:a6:04:
                    df:6f:88:ef:a4:34:ad:ba:73:4f:a1:31:ab:74:7b:
                    b8:49:87:5d:dc:0f:68:bf:5a:7c:3a:6b:1e:da:f9:
                    4d:d1:2b:1e:70:f0:84:8a:98:b1:7c:8f:df:47:85:
                    75:f7:7c:c3:40:9e:bb:d7:56:82:0d:d2:3c:e2:fd:
                    87:97:10:62:b0:74:04:6f:6a:3c:bc:df:7d:22:3c:
                    42:2c:c0:46:c8:08:16:2b:49:ac:c8:88:2e:23:55:
                    8a:ef:5d:77:1e:59:53:ac:d9:7e:93:c6:96:69:63:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9A:1F:7A:74:96:EA:4B:38:4F:9B:9E:1D:9F:B5:09:F2:4C:CD:6F
            X509v3 Authority Key Identifier:
                keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:87:74:e4:fb:16:cd:47:de:1e:c2:95:26:1c:1e:78:35:0d:
         15:b9:f5:bf:37:65:96:77:67:20:39:27:32:17:bd:cf:bc:07:
         3c:2e:84:7b:7d:d0:20:ec:3f:b8:fb:51:a9:9f:6b:72:f7:46:
         9c:14:0b:30:a6:6c:f9:88:db:80:a0:e5:19:d7:27:4c:66:bd:
         e5:17:6a:df:e2:19:20:10:cd:14:84:7b:70:c6:d1:48:b5:3f:
         f1:38:73:f2:e7:de:e4:43:1b:64:8f:20:e8:c3:f5:aa:3b:1b:
         e4:25:d2:8b:64:89:a7:50:dd:85:23:59:30:6c:02:63:5f:a7:
         aa:0e:46:0d:53:81:c8:e4:f8:c7:44:c0:34:45:bf:ec:71:a1:
         f2:a6:e0:93:15:48:22:d4:0a:86:67:02:9b:6b:c7:6b:18:d7:
         0d:c9:51:f4:fa:f8:19:5a:3a:61:d0:4d:3d:f0:7e:89:67:07:
         0e:9f:96:9c:eb:95:5e:5b:b9:67:df:17:ec:d4:c5:f9:b9:8a:
         cd:d8:03:cc:fa:d1:6d:45:9e:e2:0b:7c:fc:ca:d2:50:71:f3:
         64:aa:fb:6c:d0:59:f6:0b:8d:be:de:1d:31:1d:0e:07:b4:54:
         16:04:af:a4:e3:76:75:d2:4f:74:a0:a6:98:e1:cf:ad:af:7f:
         ce:a5:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:30 2024 by rpki-client on console-ams.rpki-client.org