Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File:                     _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier:          fnPUK1M1IS+Ll0TMtirVs26Ago5A1JBnn5kyfypguBI=
Subject key identifier:   40:69:8D:FF:61:75:9C:75:3E:B3:06:FF:E1:59:D6:B8:F1:76:88:9A
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer:       /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial:       018F96BB742D244EA857DA68A63A6368F6F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number:          10B0
Signing time:             Mon 20 May 2024 16:00:18 +0000
Manifest this update:     Mon 20 May 2024 16:00:18 +0000
Manifest next update:     Tue 21 May 2024 16:00:18 +0000
Files and hashes:         1: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: 3KqaPMyUNrVOUYAxKcoyMtf13b6GRjO1pkk59oPf8Jk=)
                          2: qdTYXzy-Pok5BO-WCrtpBn5uxzE.roa (hash: fn8a9IKwy1ZxNqeUMUdre0CE8WqFSZS6bcEEWSYJ00U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bb:74:2d:24:4e:a8:57:da:68:a6:3a:63:68:f6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
        Validity
            Not Before: May 20 16:00:18 2024 GMT
            Not After : May 21 16:00:18 2024 GMT
        Subject: CN=40698dff61759c753eb306ffe159d6b8f176889a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:c7:a5:9c:58:39:73:82:e1:0c:97:1a:ee:
                    95:e8:b8:9b:75:e2:1d:b5:51:2a:c0:be:11:9a:c4:
                    f4:8b:86:6f:2d:d1:f5:eb:06:4d:cc:25:58:d9:a0:
                    f0:a6:23:b0:04:63:6e:bd:d9:05:52:e5:ae:0e:e4:
                    ee:6b:73:06:ab:83:e2:64:cc:cb:25:11:ef:c7:9b:
                    79:79:9c:62:7b:63:c3:d2:bb:63:94:08:db:50:09:
                    ce:81:c1:46:f1:44:96:eb:f0:1b:ce:7b:18:46:ec:
                    b3:6a:f0:29:7e:89:1a:e3:fe:15:e7:6f:d2:bb:01:
                    cb:d5:cc:94:b2:68:8e:b7:62:fd:ee:b7:d5:ad:08:
                    6d:6e:cb:f4:14:83:c2:5f:8e:9a:0f:fd:db:58:d8:
                    6e:4e:1a:7e:29:06:93:37:3b:5f:17:e0:18:71:b6:
                    94:75:2a:c5:40:43:f1:84:26:f7:4c:5a:9b:3e:01:
                    05:9b:95:7f:ac:6c:40:d7:49:f8:a8:a0:e9:4f:05:
                    32:59:15:91:8d:9e:8d:83:9f:b3:ab:16:04:03:4f:
                    10:72:1e:f4:19:79:bc:83:68:d2:37:1b:ac:f2:31:
                    0a:83:34:74:b0:da:29:da:ed:76:cf:e0:00:75:c1:
                    e2:84:4a:bf:bb:69:02:2c:10:65:1e:79:5e:f7:de:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:69:8D:FF:61:75:9C:75:3E:B3:06:FF:E1:59:D6:B8:F1:76:88:9A
            X509v3 Authority Key Identifier:
                keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:e6:4c:e9:16:56:08:07:dc:7c:2f:9e:35:97:88:33:89:
         70:3a:0b:89:e1:ba:e6:65:0f:b0:af:02:87:08:33:12:61:6b:
         d7:77:eb:4a:cb:2b:20:79:dc:eb:33:4f:be:0a:16:f8:75:72:
         8f:c1:9d:37:b0:41:68:ea:cb:ae:59:84:36:70:c8:7a:aa:81:
         18:da:b1:21:46:8a:73:e9:44:dd:08:61:14:ff:5b:2e:d5:a1:
         3e:ef:7f:f1:1e:5a:b8:7b:00:94:4e:11:60:9c:1d:64:ba:bc:
         1f:df:8e:25:e9:cf:8a:64:9d:e1:d5:58:36:3f:65:b2:9c:f7:
         86:7d:1e:27:16:79:76:33:8b:cc:f1:75:45:52:bd:6b:ce:5a:
         d7:ad:c3:2d:52:ad:e6:b4:da:c6:f3:8a:fe:75:bf:43:44:a7:
         84:c2:37:a1:b4:85:74:67:72:63:9e:6e:01:47:56:19:9e:db:
         43:0d:0f:68:61:28:14:f6:0e:4f:41:cf:ef:87:2e:1e:99:c8:
         24:6f:58:a5:62:d7:95:66:51:81:18:01:c8:30:75:5a:1e:ad:
         e6:31:f3:a6:63:a9:6a:4f:20:0a:5e:02:21:88:69:38:32:c5:
         07:8c:50:ef:99:99:0c:95:99:6b:03:9b:e3:0c:19:00:a6:bd:
         52:ec:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:32:04 2024 by rpki-client on console-ams.rpki-client.org