Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File:                     44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier:          hQ5+v7yKvxTnd0YyU6MdBihh2Otf2TQUolQqVBs5yVU=
Subject key identifier:   6E:A2:5A:37:DE:A3:D2:32:2F:DA:F2:CE:8D:13:5D:B5:44:6E:EE:D9
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer:       /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial:       018F362D8DB9DCDD9329F341CEAFE8E90AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number:          0DFA
Signing time:             Wed 01 May 2024 22:01:45 +0000
Manifest this update:     Wed 01 May 2024 22:01:45 +0000
Manifest next update:     Thu 02 May 2024 22:01:45 +0000
Files and hashes:         1: 1-hpQjDeFJIOor7bNyYt1R9_pfyA.roa (hash: BvW2Pr5q+T4yY4tbonuV6/HNF9uIVdUdDDueeFrfouc=)
                          2: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: 5eyaxiYQ3K6zMKXeTcf/VpHiA2MFaXFoQHAPhTgwZX4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:8d:b9:dc:dd:93:29:f3:41:ce:af:e8:e9:0a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
        Validity
            Not Before: May  1 22:01:45 2024 GMT
            Not After : May  2 22:01:45 2024 GMT
        Subject: CN=6ea25a37dea3d2322fdaf2ce8d135db5446eeed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:56:8d:57:6a:ff:39:84:70:f5:ae:08:da:
                    bc:f9:15:81:4e:1c:f0:c9:82:4f:94:1b:b6:b3:f7:
                    91:d4:5e:b3:6c:e9:ad:b4:87:b7:de:12:cc:c1:80:
                    2f:e2:55:8d:31:b5:b6:ff:90:9c:83:ad:00:85:56:
                    38:10:f3:25:e6:ac:44:fe:38:63:16:d2:e0:db:41:
                    c1:90:cb:c7:c1:cf:f7:df:e0:8a:ed:13:c8:b7:e6:
                    e6:ab:e6:0b:13:6e:6c:10:2a:d5:41:80:a6:82:cb:
                    c6:36:c7:4e:e0:5d:22:b2:b1:b0:b9:79:5b:bf:3d:
                    d5:8d:c6:fe:2c:95:35:28:a8:e3:57:6c:99:52:d4:
                    5c:9b:cd:7d:60:d6:30:53:cb:31:52:af:f9:c8:6a:
                    35:68:d8:7c:a4:ba:0a:2f:24:9b:db:a3:79:44:4a:
                    06:d2:b3:5f:38:bf:cd:fb:ca:96:ee:ba:7d:77:eb:
                    78:8b:52:62:8b:ea:e3:21:9b:7f:43:63:68:a8:86:
                    fc:57:d8:1e:18:c5:68:e7:c1:f5:f5:e2:06:88:1b:
                    0c:5f:85:3b:97:00:7d:77:54:c6:b0:65:1c:ec:5e:
                    0b:e6:9b:03:fa:0d:d7:39:12:6b:82:1d:85:a0:56:
                    40:91:d7:0d:3d:b6:47:44:3b:42:bd:28:14:24:e0:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A2:5A:37:DE:A3:D2:32:2F:DA:F2:CE:8D:13:5D:B5:44:6E:EE:D9
            X509v3 Authority Key Identifier:
                keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6a:c4:bc:7c:10:1b:53:a2:7e:4b:25:40:43:40:89:1d:b8:
         4c:11:0c:33:ec:a2:87:68:7f:95:7e:0b:eb:c3:e6:f3:b8:d7:
         85:08:0a:94:cd:dd:85:92:be:d2:4a:93:a6:81:b1:e5:cf:96:
         ed:72:5c:ef:a6:b9:da:e4:d1:bb:0d:16:3b:05:ad:07:81:1c:
         8a:5d:de:cd:54:df:1d:ce:43:fb:f1:65:b8:94:46:f3:6c:67:
         11:55:88:a5:7b:34:04:05:f8:75:32:67:0f:91:9b:e6:cf:e8:
         94:c5:9d:4b:1b:7c:66:bb:ce:f1:f9:32:43:41:d6:de:27:54:
         a6:3f:24:ef:5e:64:d1:19:1c:45:d6:e0:2c:d8:9e:28:35:4e:
         55:96:ba:28:2e:e5:fa:46:9f:47:03:ca:97:62:3f:01:15:03:
         b6:ff:88:53:52:59:df:0d:a2:fe:5a:98:2d:05:15:99:e4:7e:
         39:62:00:46:54:59:f2:f7:57:31:a7:7a:c7:35:fd:50:a9:e9:
         8d:21:14:cf:47:81:ee:16:78:a9:96:7a:4f:14:69:3a:ca:48:
         e5:06:9e:6f:b0:4f:8b:0b:10:53:ad:02:f5:a6:fb:d0:59:8e:
         02:f9:33:89:a6:02:b6:7b:bd:b9:3e:a8:47:ea:77:f5:45:4d:
         4e:08:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:18:02 2024 by rpki-client on console-ams.rpki-client.org