Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File:                     d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier:          ikHmankUK7QkSY6iv9bkUMT/seCEyIK+nNMAM17/+BM=
Subject key identifier:   F2:69:B7:0A:9E:C0:B5:F2:86:F5:A3:97:B0:93:89:80:1F:39:01:5B
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer:       /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial:       018F8635B069134BFDDE6E8D91E5D52106AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number:          06D2
Signing time:             Fri 17 May 2024 11:00:16 +0000
Manifest this update:     Fri 17 May 2024 11:00:16 +0000
Manifest next update:     Sat 18 May 2024 11:00:16 +0000
Files and hashes:         1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: I5+Dxt+KFkUmJCnmX9rit8NV8c3HcXO29NKKosCTWbk=)
                          2: l_TAM-m_jd7ThV2zyQA_84DhNHc.roa (hash: 1B3+803r/85TFCqV7eIp2JU8GQYE9pl1Zokqhjo92S0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:b0:69:13:4b:fd:de:6e:8d:91:e5:d5:21:06:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
        Validity
            Not Before: May 17 11:00:16 2024 GMT
            Not After : May 18 11:00:16 2024 GMT
        Subject: CN=f269b70a9ec0b5f286f5a397b09389801f39015b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4e:a2:d6:0c:22:52:54:95:a0:35:0d:51:3b:
                    a3:ed:81:76:66:db:61:ae:6e:f1:d3:73:de:85:ee:
                    c7:6c:d9:96:54:5d:69:e1:0a:e8:d8:cd:74:1d:b0:
                    cd:f4:f6:77:a5:34:d3:f9:94:e5:eb:3d:bb:83:78:
                    34:d8:8a:1d:ad:63:7f:9f:30:4f:e6:6e:0c:12:14:
                    6a:fa:00:a3:61:82:ff:ef:2e:7e:7f:e3:06:5d:13:
                    f9:18:63:2e:ee:7c:05:7b:19:2e:3d:6a:ed:d6:e3:
                    32:bf:6e:e9:13:d0:06:e5:12:3c:a8:c3:78:8d:f2:
                    e4:43:92:5a:27:ca:09:31:68:8e:12:1c:0a:3a:17:
                    49:26:ce:f4:1f:44:44:bf:72:77:9b:0c:81:ea:4b:
                    b2:8e:d5:45:7c:da:22:ec:16:42:74:43:f6:e4:c7:
                    2f:79:78:c5:1f:9f:75:9e:93:06:06:91:46:40:0b:
                    62:3d:a8:44:fe:f4:52:c2:43:10:12:b0:39:ef:e3:
                    38:d4:c8:2b:81:72:54:e5:8b:95:cc:f3:bb:5e:ef:
                    84:e1:1d:76:2a:c2:a6:3e:60:30:b2:e5:74:cc:8c:
                    04:ca:1b:46:74:ed:cf:6e:36:3f:02:97:62:da:82:
                    73:87:1e:61:29:a7:f8:59:bb:d4:c9:28:17:ee:6e:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:69:B7:0A:9E:C0:B5:F2:86:F5:A3:97:B0:93:89:80:1F:39:01:5B
            X509v3 Authority Key Identifier:
                keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:bb:37:4d:2b:22:6a:a1:c6:77:b7:3a:22:b7:c0:ff:af:27:
         93:3a:7b:ad:90:40:49:4b:70:8f:a8:fe:05:2d:d3:1e:92:62:
         16:ee:1b:b3:91:a3:ec:38:ec:1f:14:86:6d:6c:34:5c:9c:ff:
         78:45:30:c5:43:9c:6a:85:0a:44:9d:f8:10:43:c6:95:c6:4b:
         30:12:d7:f5:bd:02:20:91:82:10:b4:cf:51:fa:9c:54:89:9f:
         94:5a:2d:90:6b:91:6d:17:70:08:df:53:71:51:26:8f:b7:99:
         64:e9:7d:35:69:ea:42:13:3c:0b:0c:c3:ab:03:ff:f0:d4:3b:
         df:73:23:26:3f:d5:c1:63:c7:91:29:f8:ff:e2:ce:b0:a5:98:
         11:70:21:cb:b2:64:9e:7d:d2:49:36:67:7e:c6:6b:4e:bc:47:
         f7:6a:af:7f:6b:e0:7a:88:19:2b:8e:15:8a:1b:ac:6c:ce:29:
         54:12:cd:05:8c:2c:97:c4:d9:4d:33:64:09:c4:b9:f6:4a:e6:
         3e:ba:78:a6:0d:d6:22:7d:22:2f:a9:a4:1d:cc:38:db:3a:68:
         ff:ce:cd:bd:6f:5f:b5:4c:67:ae:e9:17:41:f9:9e:ed:03:96:
         c9:76:13:9e:72:62:89:d9:d4:ad:10:77:77:7d:02:cc:46:97:
         e2:c4:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:41 2024 by rpki-client on console-ams.rpki-client.org