Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
File:                     2FAiKC40aZ_lSLdShRmiWlDZEzo.mft (raw, json)
Hash identifier:          UFVVInEMNOGESGOrHDuPtwz4IE7gfBLTEFb4pS+VezA=
Subject key identifier:   6C:4D:64:78:2E:7F:A3:90:03:4D:50:9A:AD:27:21:5E:9E:06:F6:B1
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Certificate issuer:       /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial:       018F22DF6CE7E04AD7B78C18F5F5A0477DED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
Manifest number:          1072
Signing time:             Sun 28 Apr 2024 04:03:38 +0000
Manifest this update:     Sun 28 Apr 2024 04:03:38 +0000
Manifest next update:     Mon 29 Apr 2024 04:03:38 +0000
Files and hashes:         1: 09jBWQnUu2FhfopcjWwVB4IlyZA.roa (hash: K2acK/fprQKlYX7+zu/ub1cwUV0vdUiqjLhGh/5ydgM=)
                          2: 2FAiKC40aZ_lSLdShRmiWlDZEzo.crl (hash: H5NEExsBM9qB6pC/F5GWdAAFBMXUduDf18Kl1ck/Zao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:df:6c:e7:e0:4a:d7:b7:8c:18:f5:f5:a0:47:7d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
        Validity
            Not Before: Apr 28 04:03:38 2024 GMT
            Not After : Apr 29 04:03:38 2024 GMT
        Subject: CN=6c4d64782e7fa390034d509aad27215e9e06f6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:db:f7:e0:e1:67:45:3a:40:a8:04:80:22:
                    20:e6:0e:a6:64:dd:63:5b:bc:b7:9a:0b:5d:5c:9a:
                    1a:d3:b5:95:95:72:24:16:d9:ad:ef:f8:1d:61:23:
                    10:88:0a:61:73:2e:d4:e7:fb:21:6c:96:1a:94:22:
                    09:99:2a:03:f3:46:4b:a5:24:b0:68:86:bd:dd:11:
                    49:93:ac:c2:ba:8c:47:a2:ed:6a:55:34:92:ca:96:
                    bb:8f:21:21:ff:1c:9d:a0:35:60:76:5d:84:14:e9:
                    6a:fa:0d:fb:0d:a3:4a:b0:2f:cb:01:81:5b:fe:59:
                    ca:2e:06:90:86:98:59:f6:93:60:e7:ce:60:d2:3d:
                    26:38:3f:88:f9:f0:6b:3c:7f:d8:3a:41:bf:36:58:
                    26:db:7c:08:8c:3a:34:d2:f2:80:96:d3:b9:bb:0a:
                    a8:23:34:6f:48:a5:83:00:8b:b9:42:97:75:ad:2f:
                    2e:ef:ac:20:08:dc:4b:57:33:db:58:a8:43:55:6c:
                    40:1d:d3:29:fb:4d:3f:98:32:aa:86:ed:64:aa:71:
                    1d:18:b4:d9:e6:22:e6:51:00:74:e0:57:09:94:67:
                    38:37:24:3e:4b:1b:33:9c:fa:4a:b4:5e:4f:2f:0f:
                    53:83:18:e8:70:15:43:5b:48:d7:a2:99:e9:1d:ea:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4D:64:78:2E:7F:A3:90:03:4D:50:9A:AD:27:21:5E:9E:06:F6:B1
            X509v3 Authority Key Identifier:
                keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:49:55:eb:15:7b:c8:9d:4e:d3:76:ca:ff:ad:fe:fe:5f:
         38:af:d1:b0:a2:3d:1d:04:e4:1d:05:16:18:fc:1b:d9:c6:f4:
         e3:cd:0b:ed:88:33:48:b9:f7:89:1c:7e:ea:d5:78:7a:6b:df:
         36:0d:ba:2a:95:15:70:09:a6:21:3a:b5:30:f1:b4:be:f3:96:
         9c:7c:4e:5d:d9:81:3c:6a:23:d3:72:7f:7e:94:23:e5:3f:c3:
         fb:a5:b8:81:0d:7e:36:5b:8c:c2:2b:a6:32:e6:04:08:89:c2:
         d4:65:3e:64:b2:a0:8a:86:c4:77:a6:c9:5b:56:d2:0b:a8:53:
         29:c4:a9:e1:7d:fb:53:f7:22:3c:b5:9e:58:2e:f5:ae:70:f3:
         75:e8:43:53:2c:10:49:be:44:d2:11:c5:0e:57:80:b2:fc:9a:
         c6:5a:b8:9c:40:49:2a:29:8f:bc:b2:ca:60:e0:dc:28:92:c3:
         03:dc:c6:f3:00:65:eb:e8:af:5b:d8:b5:3b:40:95:f1:1e:cf:
         3d:9d:da:57:cf:e1:d8:83:2e:37:37:0b:50:4a:9b:06:46:2c:
         1c:8c:2e:82:9f:79:b0:48:8d:e0:17:0c:53:e3:8b:00:01:9e:
         1e:12:1d:58:13:95:0b:77:f9:4d:14:d7:99:f3:fd:39:c2:ed:
         2f:26:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:45:50 2024 by rpki-client on console-ams.rpki-client.org