Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File:                     I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier:          aSNdXrCqYjUBE/g1M2PSMF5SRyKpmqdBDFTNi1bwFC0=
Subject key identifier:   D4:CD:C3:23:E6:21:E8:93:99:D4:18:CA:DE:9A:BB:07:E0:23:30:A7
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer:       /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial:       018F3776BA8FC44043E6A9B7EDBEB01DF788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number:          0EB9
Signing time:             Thu 02 May 2024 04:01:18 +0000
Manifest this update:     Thu 02 May 2024 04:01:18 +0000
Manifest next update:     Fri 03 May 2024 04:01:18 +0000
Files and hashes:         1: FCQInrYCZBB0UfhIfqBj7iYd0E4.roa (hash: 2SuL/XyjlDiwpHc6qw4Z75qNJ1vE2VMpC685QxYKh58=)
                          2: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: tPnns3EZu/o2393VUffZA2rvtGDaWh9vXlaDIGL6t5w=)
                          3: izJG9GyIWGEt_SH_UE8PmIUb-F8.roa (hash: bbU2qGjERVpUdc9MO39MaDKO8oo597xy7z0/N8WUkm0=)
                          4: qZC0jzAsgmrLnQKRtGOthLIyu9Y.roa (hash: d52sKiNvD93K83/s6g7XGP7/wYZqDR8/R2lgMATKXXg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 04:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:ba:8f:c4:40:43:e6:a9:b7:ed:be:b0:1d:f7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
        Validity
            Not Before: May  2 04:01:18 2024 GMT
            Not After : May  3 04:01:18 2024 GMT
        Subject: CN=d4cdc323e621e89399d418cade9abb07e02330a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:a6:d3:2f:cb:e4:4a:98:c3:f1:8d:12:92:
                    15:f7:da:5d:10:0c:79:90:2e:49:f7:43:ee:ed:69:
                    19:f7:c6:f4:d6:aa:bc:b4:c0:72:20:5c:ed:c5:91:
                    44:ed:ad:e5:ca:48:a1:e4:99:7a:66:f7:90:f2:6a:
                    6a:bb:c3:07:77:60:fa:78:0d:fe:b6:5e:35:85:38:
                    f1:9c:44:71:f1:e9:f5:1a:e6:54:17:b3:68:cc:41:
                    4b:be:99:a5:c8:83:5a:0d:b4:77:0f:fb:de:ad:c4:
                    2a:3e:4f:46:35:e7:f1:1e:24:ec:ad:17:6e:a7:8a:
                    61:f8:a9:5c:de:3c:90:b3:52:5f:36:c8:a6:26:0a:
                    44:4c:7c:2f:71:ba:4d:4d:4c:9c:f4:26:ef:4e:83:
                    b5:89:55:32:2e:fb:0d:de:a7:36:d5:a3:65:82:62:
                    4a:06:5b:65:ce:a4:be:d2:58:41:e4:34:76:85:dc:
                    aa:99:c9:61:81:ac:b1:9c:51:ae:c6:ff:79:4e:cb:
                    f9:d2:b9:5c:ef:99:99:2f:65:9e:97:5b:8c:a6:9e:
                    db:50:ec:07:24:cc:f8:f7:c8:2b:86:46:2c:3f:64:
                    83:9b:53:4e:3b:7b:c1:6d:8c:ce:ca:c5:8a:61:90:
                    35:e8:f8:a1:b0:e0:79:4d:97:65:87:e9:1f:9c:c8:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CD:C3:23:E6:21:E8:93:99:D4:18:CA:DE:9A:BB:07:E0:23:30:A7
            X509v3 Authority Key Identifier:
                keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:00:ed:50:92:fd:65:d1:c3:b2:9e:e6:eb:68:1d:c6:cc:1f:
         5e:d4:d2:e5:a7:df:58:20:ae:46:61:35:7f:9a:5d:f3:fb:c2:
         ae:8d:9e:31:0c:60:ee:05:cf:4c:cf:9f:55:34:5e:e5:3f:20:
         aa:64:0a:de:57:5f:e8:9f:31:df:31:3c:f3:7e:b7:f6:a0:76:
         ef:31:f7:0e:27:e5:ee:31:65:6d:c4:71:20:95:ed:31:d4:82:
         51:f0:26:64:89:e5:6c:00:fb:f4:dc:55:a6:e1:e9:ef:1b:f5:
         6d:63:15:ba:86:61:2c:ed:cd:0e:95:f3:18:21:a4:5d:b5:c8:
         dd:e1:ad:53:f7:47:db:4c:eb:2a:e5:c7:e9:d6:61:a2:5b:08:
         98:36:97:63:a0:03:a8:09:39:f2:8c:8c:b0:6a:a4:5c:89:0f:
         ea:f7:b3:8b:27:f9:93:47:b4:fc:41:6c:98:53:9c:30:d7:0d:
         05:22:a0:8a:de:18:1f:d7:1b:60:fa:68:33:11:3f:8a:4f:12:
         37:e7:0e:4a:4f:46:c8:08:e4:13:1a:8c:72:5f:aa:93:97:4a:
         53:16:c3:54:83:61:02:28:1e:75:85:f5:c0:ad:23:f7:ee:73:
         16:21:0e:76:9b:80:cf:26:d2:8b:4b:a4:f3:0d:f4:6a:70:7b:
         dc:e5:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:29:57 2024 by rpki-client on console-ams.rpki-client.org