Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File:                     HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier:          ZqnEXlgXQZSU4hUqw5d9aPaG0jhJ8BM/0NbJXBPtZhY=
Subject key identifier:   97:C6:5E:3E:EE:80:E4:D9:53:FA:28:08:8C:DB:99:F7:54:AF:21:4B
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer:       /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial:       018F4F48BF4DB863FA35EB0DF995630BC188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number:          0680
Signing time:             Mon 06 May 2024 19:01:58 +0000
Manifest this update:     Mon 06 May 2024 19:01:58 +0000
Manifest next update:     Tue 07 May 2024 19:01:58 +0000
Files and hashes:         1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: iaRPV7WqOo5lc7GYnvXRFIC7ej4srpIiDEloqet6gz8=)
                          2: fQ8GGWabz6XOD-GzFh6FmgBxLUE.roa (hash: 2l3T6fuKivZ+iVxHzU6/EK2em1iBu64eoVxs9hwBDiY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 19:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:48:bf:4d:b8:63:fa:35:eb:0d:f9:95:63:0b:c1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
        Validity
            Not Before: May  6 19:01:58 2024 GMT
            Not After : May  7 19:01:58 2024 GMT
        Subject: CN=97c65e3eee80e4d953fa28088cdb99f754af214b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:c5:49:e6:42:af:ec:b4:fb:2c:25:ba:66:
                    f5:5e:25:09:b7:82:d6:71:d2:df:35:f5:9d:a3:a4:
                    25:02:3a:b0:5e:89:bf:cc:1d:9d:d1:1d:2d:2b:de:
                    48:d3:7a:e1:2f:98:a6:5e:4e:23:81:f8:69:60:e0:
                    c8:90:2f:25:d9:59:dd:e6:8f:87:ac:03:7b:93:11:
                    9a:9a:e5:53:c1:d6:47:22:52:80:9b:23:2d:89:12:
                    85:85:78:13:10:da:cd:7f:a6:01:a9:0e:4f:cf:48:
                    c1:eb:b0:8c:79:bb:e7:da:3e:96:1b:70:e1:bb:09:
                    aa:2b:6a:fe:70:b1:4e:bc:da:1a:5a:4a:79:bf:7e:
                    42:34:9e:f9:60:3d:ee:af:18:08:a0:f9:bb:a2:7e:
                    7b:f6:3e:06:7d:80:c8:d9:2a:d2:1b:6d:06:7c:a3:
                    9b:4b:f9:7d:0f:2a:47:d5:72:c9:f5:4b:c8:51:43:
                    00:f6:54:7a:93:d0:ca:19:bc:87:08:6c:8f:45:1a:
                    fd:02:14:0d:22:c2:07:b4:88:c2:cd:a1:85:c3:2c:
                    2e:02:45:b2:d5:94:9d:23:c4:61:6e:6f:0e:d8:a6:
                    29:81:35:cb:27:80:b9:23:1d:78:77:06:3c:89:04:
                    b3:1c:84:c8:ea:e0:eb:19:8c:50:19:49:67:d6:ad:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C6:5E:3E:EE:80:E4:D9:53:FA:28:08:8C:DB:99:F7:54:AF:21:4B
            X509v3 Authority Key Identifier:
                keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:34:d3:fe:6f:de:cb:65:b6:1f:00:d3:81:80:25:5a:8c:4a:
         a4:ad:c9:93:79:6f:f8:f9:2b:37:46:35:a6:f6:f0:ca:da:c3:
         4a:b6:78:c1:9a:53:ed:8c:39:c1:03:b3:a3:18:f8:20:d9:10:
         ca:b2:e4:22:fc:a7:7c:5b:41:80:01:15:55:e9:0d:ad:33:70:
         d6:46:e0:07:57:8f:8a:cb:ab:4a:6c:d1:43:d4:59:96:2e:56:
         e6:fe:40:0e:9b:0d:3c:c8:3d:0a:7c:e5:3d:aa:fa:6f:de:9d:
         e9:97:c7:30:e6:4b:df:8a:a2:28:fe:99:46:7d:a3:47:f5:d8:
         e9:bc:61:3f:21:63:73:47:4e:15:9a:1a:95:fd:0c:1a:fc:67:
         11:57:be:da:fd:0b:05:6b:b6:c3:dc:af:6d:46:71:e9:64:a4:
         0c:2a:db:50:80:ee:3c:bc:b2:52:cb:78:b2:cb:fa:e7:a0:2d:
         52:45:c8:96:87:16:14:02:23:30:9f:9d:5e:7f:b3:75:29:b6:
         e4:ef:5a:cf:77:1a:0e:cf:1d:ae:f5:5b:4f:a8:d3:93:26:a8:
         19:7d:6d:42:15:70:68:ea:ea:3f:18:68:1d:8c:45:c7:be:17:
         4a:7a:75:57:bb:63:f8:55:17:52:07:ba:47:ea:3e:e7:39:4e:
         4a:2d:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:41:45 2024 by rpki-client on console-ams.rpki-client.org