Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
File:                     2dZJGIqqQ52FEfcOvoK6XnZshdI.mft (raw, json)
Hash identifier:          9IZTWG1YrjV/wKSgMLFGVgum2ZyjDPtAEtM6Ib8+TLk=
Subject key identifier:   F8:C0:22:59:48:8F:F2:C7:D3:99:39:6A:5D:2B:1F:5C:D1:5C:6E:0D
Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
Certificate issuer:       /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Certificate serial:       018F3AE5A86D929996AA19C35DB3CA785975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
Manifest number:          09CF
Signing time:             Thu 02 May 2024 20:01:20 +0000
Manifest this update:     Thu 02 May 2024 20:01:20 +0000
Manifest next update:     Fri 03 May 2024 20:01:20 +0000
Files and hashes:         1: 2dZJGIqqQ52FEfcOvoK6XnZshdI.crl (hash: xxcrfidOawJHC05+UuB/2ig9ZXnsYWFHLCflQOUqAq8=)
                          2: m69-2rrpagWOTgkEBkla-p4uvN8.roa (hash: TeaQ18dwpV1KZOqhk+yRX99QUrMhvq+uTpmxoQYM8r0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:e5:a8:6d:92:99:96:aa:19:c3:5d:b3:ca:78:59:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
        Validity
            Not Before: May  2 20:01:20 2024 GMT
            Not After : May  3 20:01:20 2024 GMT
        Subject: CN=f8c02259488ff2c7d399396a5d2b1f5cd15c6e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:f3:09:6d:c4:88:ab:5e:c3:07:2b:ae:dc:
                    6b:a4:1f:06:6b:39:f3:7e:82:38:cf:bb:87:3f:17:
                    d0:60:eb:28:db:a9:6f:77:42:67:7d:a3:6b:2b:f8:
                    b2:a1:75:e1:38:18:f2:f7:43:97:19:bb:af:74:45:
                    25:75:b5:20:ee:77:eb:52:33:33:4b:50:62:05:ab:
                    4f:df:c6:97:2c:23:4a:ea:6e:69:bb:9d:f0:50:4f:
                    0f:51:2d:cf:17:c0:24:31:7a:59:e9:3f:fe:19:3b:
                    02:13:db:36:14:77:94:fa:67:a2:dc:57:12:6f:6a:
                    73:32:7b:28:0e:af:f4:6c:7f:ed:e5:ce:6f:07:8e:
                    29:b7:ad:4f:9f:99:8c:9e:94:e1:47:b4:a6:57:71:
                    ea:83:9b:84:a7:56:22:25:d9:99:ed:c2:57:7d:1b:
                    81:3b:27:39:2b:cd:64:0f:f8:22:b4:b4:b3:01:f1:
                    79:e2:57:25:ca:4e:e5:e9:27:6c:6a:3f:6f:ce:c9:
                    70:66:4d:f8:47:38:80:4f:47:17:f3:96:bb:30:58:
                    8f:93:6a:93:55:91:1f:08:69:3c:4c:cf:6c:8a:8a:
                    8b:c1:61:46:13:34:21:34:e6:e6:38:03:67:88:fc:
                    ca:4d:95:5b:47:d7:d6:82:18:97:fc:58:71:53:0d:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C0:22:59:48:8F:F2:C7:D3:99:39:6A:5D:2B:1F:5C:D1:5C:6E:0D
            X509v3 Authority Key Identifier:
                keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6e:cd:ca:41:66:d5:6b:a6:35:55:cf:a8:76:e1:89:a1:65:
         2f:18:cc:83:9e:60:5f:df:0a:1c:35:6d:4b:b5:57:23:3c:88:
         ca:e7:1f:1a:04:6c:11:2c:10:cc:96:27:34:41:af:1b:dd:93:
         72:11:a7:ec:9c:62:87:9e:15:0f:40:0f:4b:76:99:94:46:ef:
         36:2d:a0:1f:3f:a3:27:58:94:ad:6d:14:b6:22:f4:8e:5c:7d:
         4d:91:a1:07:b8:88:e7:a0:ae:52:12:7e:d6:59:a4:ac:d2:cf:
         65:d3:96:7c:93:7c:98:3d:19:d1:b0:56:85:6d:00:a3:1e:5d:
         d1:c3:42:6c:61:ce:8f:20:60:5b:81:f8:b1:bf:18:92:ee:91:
         7d:2c:48:cb:b0:04:69:aa:ec:3a:eb:89:e9:56:e1:d6:0e:f8:
         79:0e:06:9c:9b:9c:ca:15:0d:21:bc:55:02:fe:db:65:96:4f:
         e9:8b:c5:3f:58:e9:71:6a:2e:21:05:b9:bb:36:89:d3:01:6d:
         40:59:96:dc:4f:15:fb:7e:ad:80:ab:d3:af:28:87:21:05:22:
         09:77:47:fc:4a:fc:82:00:a4:0f:bd:25:9e:0b:76:eb:90:eb:
         f9:41:e2:64:7a:27:d2:fe:be:39:2a:7d:48:b5:21:cc:1a:38:
         ab:2e:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:35:45 2024 by rpki-client on console-ams.rpki-client.org