Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
File:                     Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft (raw, json)
Hash identifier:          FdoPWr4ByiSnpyZ4cDi23gh48u8j/mSPePco/8QGEng=
Subject key identifier:   2E:2B:76:DE:7C:E7:92:D7:09:6C:9C:AB:7D:EF:51:E0:AF:0D:7D:21
Authority key identifier: 31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED
Certificate issuer:       /CN=31fa64addcb0f86580c388912341cc47c39c4aed
Certificate serial:       018F874A579792674CE510942AA5ED4D8549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
Manifest number:          0D93
Signing time:             Fri 17 May 2024 16:02:27 +0000
Manifest this update:     Fri 17 May 2024 16:02:27 +0000
Manifest next update:     Sat 18 May 2024 16:02:27 +0000
Files and hashes:         1: Mfpkrdyw-GWAw4iRI0HMR8OcSu0.crl (hash: XGUEMCm//soaq6/DtBiO/bwPfkv5VcpaXbtTM30XUO0=)
                          2: l32PRgP9_zO_YCFI4FNMAqWQyCU.roa (hash: prTqnFdQP9NtTUsdBKn/TyXSa7Yh7GwPP02Z+FX5Am4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:57:97:92:67:4c:e5:10:94:2a:a5:ed:4d:85:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31fa64addcb0f86580c388912341cc47c39c4aed
        Validity
            Not Before: May 17 16:02:27 2024 GMT
            Not After : May 18 16:02:27 2024 GMT
        Subject: CN=2e2b76de7ce792d7096c9cab7def51e0af0d7d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:86:25:cb:cd:7e:4b:cd:43:e0:08:18:d3:
                    e8:83:e7:85:94:57:a4:c6:97:72:88:07:b9:95:b6:
                    b6:a8:05:6a:a1:71:81:84:ed:23:a1:78:a1:da:1b:
                    6b:c9:72:53:59:86:dd:00:ed:9d:1f:e9:c5:80:44:
                    22:51:a5:62:12:7b:90:d7:2d:6c:dd:43:48:64:f0:
                    ac:ce:bc:55:72:51:58:47:77:dc:d6:d2:d4:f6:c8:
                    f2:b0:f5:3c:37:7f:56:6a:1c:f9:11:46:09:e3:02:
                    42:c9:a8:fd:75:50:84:c5:73:13:8e:5e:59:5b:0b:
                    21:31:50:00:7d:4c:70:c2:41:b7:75:78:e5:b8:26:
                    6a:5e:69:47:c8:99:e8:04:6e:da:b1:4f:94:34:fc:
                    73:2e:98:fc:da:9b:3f:5b:f4:b7:0e:a9:ec:93:1f:
                    57:3f:ae:49:dd:78:ef:44:95:e2:4c:98:64:4f:f6:
                    67:b4:7c:51:46:60:27:a0:4d:34:62:8f:14:c9:c3:
                    ca:96:b7:8e:ff:5f:df:bc:e9:fc:51:ac:34:0a:58:
                    80:a5:34:90:51:b1:fc:90:e3:46:07:73:0f:e2:76:
                    4b:17:ac:f8:20:3d:87:06:a4:12:a5:5f:fd:07:c2:
                    01:c9:c2:96:c9:ef:56:6c:f6:66:1a:2d:12:79:f2:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2B:76:DE:7C:E7:92:D7:09:6C:9C:AB:7D:EF:51:E0:AF:0D:7D:21
            X509v3 Authority Key Identifier:
                keyid:31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:19:7d:bb:c8:69:92:38:52:9a:d9:ec:54:07:55:00:b4:
         15:69:22:3e:f2:13:13:ce:95:f6:d9:ef:11:36:b5:e7:04:ba:
         c6:07:0b:77:c5:29:5d:5d:40:81:7b:5c:42:31:9a:c3:dd:44:
         3a:25:4f:99:05:ff:44:41:8f:ef:bb:d3:14:95:67:01:9a:12:
         a4:34:35:90:37:e5:ef:42:f2:4a:52:08:ed:46:ea:15:0d:33:
         20:85:1c:85:f5:cc:99:69:dd:f5:2d:f5:55:f2:76:6b:13:c5:
         78:da:e1:a0:38:8f:e9:5c:22:44:7a:50:3a:ea:fe:7f:8a:bd:
         27:b7:20:03:c1:9e:07:28:14:cb:c4:95:4e:bd:43:34:1b:5c:
         c7:0b:47:22:0a:3f:a3:4c:2a:49:e3:2e:9b:16:ad:a4:94:b6:
         ae:14:85:e4:6a:3f:62:85:5a:42:54:81:60:1a:a1:bf:cb:ad:
         1d:82:55:e6:ac:b8:fd:e9:ee:e5:e7:87:8f:34:40:f2:ab:21:
         7c:fb:9f:53:d4:19:61:7c:46:5d:b3:ce:f1:c5:22:f8:18:d5:
         18:07:d6:59:26:f2:0c:4c:08:5b:42:9a:6c:f3:8c:a4:27:34:
         a9:77:f6:c7:db:0d:dc:09:20:b4:e1:94:7e:81:ab:b4:15:c5:
         33:fc:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:22 2024 by rpki-client on console-fra.rpki-client.org