Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File:                     2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier:          JPA2TvnI74U4kO5RCcpUtXUSjTuVhjtFcLF7MWB7zec=
Subject key identifier:   D5:CA:20:89:24:48:9D:18:D9:4B:30:02:63:66:B0:BF:08:E5:EB:91
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer:       /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial:       018F4F49DF81FE0DFBE6127EB3AC3B851541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number:          074C
Signing time:             Mon 06 May 2024 19:03:12 +0000
Manifest this update:     Mon 06 May 2024 19:03:12 +0000
Manifest next update:     Tue 07 May 2024 19:03:12 +0000
Files and hashes:         1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: KD9TyDsdNJjZDQURKK9lARzbOqgG+j5rNpkkUzF86P4=)
                          2: L7lo6xCMcN9h5HzkPecZQbWmZlE.roa (hash: CALmqYd8w2/9CNPzyE+i7j4M0r02O9Z7hSZclAJFmrI=)
                          3: qjD5UoPRmJy4VCs_6AHCZyWT-dU.roa (hash: 5dme5cSENJJ2ltXwBhf7CqmzQ1OE2YO+oVmEGj4ce04=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4f:49:df:81:fe:0d:fb:e6:12:7e:b3:ac:3b:85:15:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
        Validity
            Not Before: May  6 19:03:12 2024 GMT
            Not After : May  7 19:03:12 2024 GMT
        Subject: CN=d5ca208924489d18d94b30026366b0bf08e5eb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:2e:b9:ba:bf:b1:4e:aa:37:6c:00:9c:94:
                    63:46:a5:05:33:73:93:f0:fd:a9:9d:20:4e:22:9e:
                    d6:a0:11:d5:7d:42:2e:61:71:cd:af:eb:bf:c8:95:
                    95:f4:39:34:1a:f9:71:2e:52:fd:b0:22:7c:35:0c:
                    52:69:90:e5:07:41:39:b4:9e:b1:ad:60:77:4f:e6:
                    52:3a:f8:19:eb:e8:fe:dd:df:4c:a0:c1:a3:aa:a5:
                    37:81:cd:6c:95:a1:f9:2e:67:c6:c5:ff:c9:31:7a:
                    3c:25:4d:de:0b:90:72:27:0f:94:5c:bb:2d:67:ca:
                    60:b1:12:bf:94:e9:ad:3a:a5:a5:37:66:b2:8e:c4:
                    16:84:b7:68:0b:2e:9d:36:c0:33:c4:f2:0e:9d:9a:
                    2f:c7:5a:4d:54:d7:71:60:b6:b8:3d:51:74:d6:7e:
                    1a:95:f7:83:ac:04:01:ba:9b:de:50:74:a9:f9:f3:
                    f0:82:6c:c5:3a:c9:d5:b4:cc:2a:52:cf:af:78:48:
                    7f:3a:46:3e:8d:12:39:be:98:8f:e7:72:4d:50:8b:
                    e8:30:b7:00:a1:fa:54:bf:4f:23:95:4b:4e:22:4b:
                    d5:7b:0b:f1:ca:85:47:3c:7f:6f:96:23:a3:af:0c:
                    82:55:a6:93:a5:bc:65:77:cd:f6:d3:cc:de:a9:7b:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CA:20:89:24:48:9D:18:D9:4B:30:02:63:66:B0:BF:08:E5:EB:91
            X509v3 Authority Key Identifier:
                keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b6:ed:f3:00:6f:71:0e:40:62:f4:9c:9a:8b:b5:d5:b4:5d:
         2d:de:91:95:09:eb:80:a3:f5:8c:ab:3e:e7:0d:9b:2f:3b:7f:
         da:1a:03:5b:56:74:8b:32:48:45:fe:45:c6:c6:0b:91:40:a0:
         29:45:5d:03:51:0c:db:b7:d5:a4:36:c8:36:8e:3a:29:df:8e:
         b7:86:44:2e:33:bc:11:5f:cb:1b:5c:2b:c4:e9:83:10:4d:86:
         c5:54:a0:83:b9:42:59:40:f6:2d:b1:39:ef:80:a3:97:c4:df:
         33:15:73:08:79:75:de:cd:32:da:42:46:28:e7:81:45:71:c2:
         83:b2:0d:fb:13:c7:2f:2e:c5:eb:85:3c:33:d4:b7:84:b5:45:
         f6:6a:83:b3:28:ca:64:73:1e:74:a1:d5:26:db:17:33:b9:8c:
         65:7b:13:01:27:48:b5:04:e8:f2:fd:cd:7a:67:8e:22:b0:81:
         61:a9:a2:11:d2:90:d1:86:b5:d1:19:7a:ea:09:27:9f:71:15:
         ab:02:ff:0d:4e:f3:ae:0f:b2:6a:de:e8:b1:b5:b7:22:87:a2:
         40:fa:dc:e9:2d:fd:1e:1a:ce:cd:c8:0e:8c:08:d2:ec:3c:e1:
         a4:49:d8:04:4d:0d:e3:35:8a:5d:e4:8a:6a:de:b8:29:04:02:
         8e:40:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 21:25:13 2024 by rpki-client on console-ams.rpki-client.org