Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft
File:                     2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft (raw, json)
Hash identifier:          uecpJCoKgcx4LL9OmgJ2ftlRWSNhBi8g3k5kQd0qFyE=
Subject key identifier:   94:A2:66:59:0A:50:DE:59:38:48:C6:81:3B:36:96:55:2B:D4:81:79
Authority key identifier: DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
Certificate issuer:       /CN=da828487183840993c01acf9d4005239484c42a0
Certificate serial:       018F381BC2FBF1CF4032F3CDFA178EAB1ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft
Manifest number:          0645
Signing time:             Thu 02 May 2024 07:01:34 +0000
Manifest this update:     Thu 02 May 2024 07:01:34 +0000
Manifest next update:     Fri 03 May 2024 07:01:34 +0000
Files and hashes:         1: 2oKEhxg4QJk8Aaz51ABSOUhMQqA.crl (hash: 2Y6kfXOYDb7OhUXq3UBmeLB3qsDX4XDv6LIbQJS+XC8=)
                          2: gnZ3ec2tzjZ8N5uoFQq3H5JNDJg.roa (hash: FfXAIxdASOeIUwUGtRptck4sFfHj/a/5uvU6Jc3+HMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:c2:fb:f1:cf:40:32:f3:cd:fa:17:8e:ab:1a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da828487183840993c01acf9d4005239484c42a0
        Validity
            Not Before: May  2 07:01:34 2024 GMT
            Not After : May  3 07:01:34 2024 GMT
        Subject: CN=94a266590a50de593848c6813b3696552bd48179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:32:ca:76:81:f6:92:4a:c4:fa:8a:26:de:
                    ec:9b:97:0b:71:b5:bd:09:4b:7c:0d:ee:74:cc:77:
                    bf:58:85:76:67:e7:32:b6:df:d9:9e:36:31:73:1d:
                    e8:05:a7:ee:3b:2b:06:2b:ee:70:2f:b9:c6:d9:8f:
                    dd:fd:ba:78:36:ac:fb:5f:c2:17:9d:0f:a0:15:5f:
                    4f:65:93:87:89:43:f8:63:bd:2e:74:29:b8:13:c5:
                    5a:3e:94:f4:41:2e:a6:e9:50:c2:bd:a9:cd:80:8c:
                    2f:a6:6e:ee:a5:5a:7d:74:ec:24:6e:d3:79:87:38:
                    8f:f0:59:31:e0:76:a3:6b:11:78:04:c6:10:57:60:
                    45:37:43:ec:a0:e1:46:d6:02:b0:25:92:eb:56:4e:
                    6c:16:f0:b6:59:2a:5e:cc:87:58:60:30:db:b1:d3:
                    37:e6:89:24:3e:f1:26:ba:f6:aa:f6:37:e2:1b:2e:
                    45:c0:64:d4:86:2c:d5:85:3d:59:a7:2c:72:dd:93:
                    3e:e4:c8:1e:ff:a6:6e:1a:a7:88:34:51:b2:05:04:
                    58:cc:1f:26:46:a7:29:9a:4f:d2:3c:6f:07:29:8c:
                    0f:21:34:1b:d9:40:3a:c6:c3:c5:2a:b2:8a:e1:74:
                    85:ca:d3:2f:55:86:d8:f0:bf:5c:f2:7f:38:58:0e:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A2:66:59:0A:50:DE:59:38:48:C6:81:3B:36:96:55:2B:D4:81:79
            X509v3 Authority Key Identifier:
                keyid:DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0f:5d:b6:9d:46:42:e9:05:98:fb:18:42:3d:ad:4b:38:3a:
         f7:3f:e9:08:6d:8d:81:8e:b1:ba:5b:df:8e:4e:5b:87:4a:a8:
         2a:82:3d:87:ee:07:6e:b7:a4:b1:d6:b0:17:36:56:b5:c4:93:
         ac:ae:a1:c4:2d:d4:ef:f1:cd:8c:55:09:53:86:50:3f:23:77:
         cc:62:82:28:74:32:a3:b0:b7:2b:b9:ca:7a:53:3c:5a:62:75:
         cc:bc:65:51:dd:df:d9:c3:a2:21:bb:96:75:20:41:62:26:3f:
         b7:2c:26:04:05:e7:0a:cd:78:39:0a:28:51:0a:b0:a8:58:5b:
         2a:96:81:25:60:3b:c7:e6:11:c7:77:01:a3:43:b3:7b:8a:b7:
         83:0a:10:0e:3b:bc:9b:6b:d2:22:bc:49:1c:6d:3f:b7:e9:50:
         90:12:bb:01:73:7c:e0:78:3d:f5:39:98:28:a2:40:b0:71:7a:
         c0:ed:25:18:6e:7e:e6:5a:c0:f5:81:c8:e6:1c:25:74:69:af:
         82:c7:7e:e4:8b:f5:21:90:9f:43:63:69:6d:75:74:f1:b2:9a:
         81:5b:f1:e8:66:03:6b:ae:7c:b1:53:06:82:e2:b4:22:2b:1a:
         f0:d9:ea:db:d1:84:fe:c1:0c:2b:ad:0a:6d:96:f5:5e:d0:e8:
         a8:f4:1c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:33:14 2024 by rpki-client on console-ams.rpki-client.org