Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File:                     2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier:          padAQTlckeUF8LRCuxwSuzK26EITi6EBqb0elmsQxYk=
Subject key identifier:   62:4F:56:FD:C7:F4:B0:AD:B7:89:90:2D:69:DE:3B:E7:3B:E0:C5:6B
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer:       /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial:       018F51DB96F164FF0DA2F7BEFAC931C6C617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number:          0C37
Signing time:             Tue 07 May 2024 07:01:36 +0000
Manifest this update:     Tue 07 May 2024 07:01:36 +0000
Manifest next update:     Wed 08 May 2024 07:01:36 +0000
Files and hashes:         1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: jwBtjHyJiNW8rCpKNuzSESzUoJ5oK9k5Rk5wrZCyWJs=)
                          2: wViVnHNGkilHXbqVMRGC76Fz33I.roa (hash: dPVPiV68TAdYHYJ5wLPpd8rshbobQu3ep0Lm4wJ8rPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:db:96:f1:64:ff:0d:a2:f7:be:fa:c9:31:c6:c6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
        Validity
            Not Before: May  7 07:01:36 2024 GMT
            Not After : May  8 07:01:36 2024 GMT
        Subject: CN=624f56fdc7f4b0adb789902d69de3be73be0c56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:d8:39:27:f4:8f:8c:5c:1e:9a:fc:f2:04:
                    67:02:89:e1:2c:c4:87:42:d3:a1:35:a9:af:98:3f:
                    e9:39:6b:fb:cf:08:01:6e:07:6f:23:5c:84:bd:01:
                    0f:18:e8:ad:85:b7:a1:a0:3c:f8:59:b6:cc:72:c4:
                    72:35:d7:e0:a2:91:c3:2f:83:20:6e:44:dc:e7:bc:
                    88:a7:48:1c:b3:05:c1:5b:30:07:df:84:a1:5b:65:
                    3a:61:13:cb:c1:82:26:6c:75:3c:c8:c1:79:d6:34:
                    95:48:3e:69:2b:7c:25:83:a8:35:1c:6c:57:b8:70:
                    66:94:49:28:39:81:2c:5c:49:57:ee:77:35:88:54:
                    8b:a0:6a:0f:4a:6d:30:e1:f0:56:6b:65:2a:58:ae:
                    8c:bb:72:39:6c:5b:3c:e9:91:58:1c:9f:69:9c:e1:
                    79:0e:99:9e:1a:e6:89:be:29:ca:6a:d1:7a:96:93:
                    19:9b:77:c8:32:f8:88:ae:d6:34:77:60:2a:7a:e2:
                    70:84:87:88:f3:03:6d:98:5b:84:32:c6:71:b9:4e:
                    05:9c:16:9a:e6:72:a8:c8:a2:20:ab:84:7d:df:14:
                    ab:de:99:88:b6:c1:41:d0:0c:be:bb:ea:45:1c:40:
                    0e:25:db:a6:be:39:81:1f:b5:a9:e5:cd:53:58:95:
                    98:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4F:56:FD:C7:F4:B0:AD:B7:89:90:2D:69:DE:3B:E7:3B:E0:C5:6B
            X509v3 Authority Key Identifier:
                keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:38:64:e4:02:6a:63:c0:7d:f8:89:23:c2:05:47:08:6d:d0:
         6b:4b:1e:5f:73:eb:58:1b:75:f1:88:09:b8:a9:16:7d:19:c2:
         b9:23:7b:88:92:1d:b3:52:c2:a4:b3:b1:be:e4:86:7a:94:5d:
         07:fb:3f:a3:18:7f:84:b8:f8:42:f0:cb:73:57:1a:ed:88:7c:
         0c:87:5d:a6:69:3e:82:6e:d0:32:89:8a:57:84:bb:6a:17:09:
         4d:2d:e3:95:6f:76:55:7c:f0:32:12:8d:55:a9:a1:39:5a:c6:
         69:1e:03:da:c2:0d:73:f9:87:0d:18:42:cc:40:be:90:94:7a:
         fa:23:0a:05:e1:8b:2a:f1:2c:c7:98:f5:e9:9b:96:be:21:3d:
         f5:aa:10:11:e5:0d:54:e1:bf:74:96:7f:5b:76:e9:85:c5:8b:
         de:50:1e:1f:73:bb:cc:0a:df:69:82:43:28:2f:80:48:bd:18:
         23:9f:ad:ce:68:47:07:31:a5:b6:d5:65:ef:5d:a1:65:62:aa:
         42:40:37:b1:45:66:8a:03:0a:47:12:41:4b:ad:75:e5:1e:aa:
         6b:e7:c6:53:73:15:7a:da:e4:27:45:c5:7e:1a:cb:11:f7:2f:
         e1:f1:2b:60:4a:fe:c6:5d:ad:67:45:37:8b:4b:17:e8:97:d9:
         24:04:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 16:09:19 2024 by rpki-client on console-fra.rpki-client.org