Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File:                     2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier:          /lFFZjki0AL5ziIRY797UQvTnr3kSosgDxeQHREz/h8=
Subject key identifier:   64:04:11:59:2E:6C:2F:B6:B5:5E:A1:B5:D0:7E:E8:B0:9C:E4:03:60
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer:       /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial:       018F1E248233633EC5DCCA9C545C426AF7B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number:          067E
Signing time:             Sat 27 Apr 2024 06:01:00 +0000
Manifest this update:     Sat 27 Apr 2024 06:01:00 +0000
Manifest next update:     Sun 28 Apr 2024 06:01:00 +0000
Files and hashes:         1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: RKrg7I0BprvBTfHTkhG4s2jHeL0mfZssDdGSXYaR0as=)
                          2: TWn-0uCyuiEJ3scUOYRJhHIGmMU.roa (hash: DywbCWNTo/70t7B5UtRTgv5T+ongZgC6jKWNzHqeh0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:24:82:33:63:3e:c5:dc:ca:9c:54:5c:42:6a:f7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
        Validity
            Not Before: Apr 27 06:01:00 2024 GMT
            Not After : Apr 28 06:01:00 2024 GMT
        Subject: CN=640411592e6c2fb6b55ea1b5d07ee8b09ce40360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:7e:4a:41:a6:ef:c7:63:86:81:44:46:74:
                    94:4c:6c:9c:24:73:e0:7f:bf:f9:36:2d:0f:23:41:
                    60:03:c6:2c:35:12:11:a9:e2:a1:7b:5a:63:e5:90:
                    da:48:c6:49:74:77:38:22:b6:b3:cb:88:a8:29:1d:
                    b2:e5:fd:6b:27:cf:33:d7:fb:2b:7f:ce:cb:e8:be:
                    ed:f8:82:5a:89:59:8e:21:c4:7f:fa:a2:7d:f6:4a:
                    94:27:d7:57:3d:d7:94:ba:99:69:f4:dd:09:93:45:
                    2f:ad:04:84:88:35:61:ca:33:d5:0b:3c:5e:cb:14:
                    a8:95:86:df:11:50:ee:c3:ae:22:92:fd:bd:66:e4:
                    2a:1d:be:22:dc:88:ae:b3:39:17:4b:e3:89:25:66:
                    2c:e7:6f:ff:1e:88:57:e4:23:56:fe:22:bb:2b:ce:
                    64:21:d7:95:d9:a2:0c:a9:f7:dd:ff:a3:86:bc:a2:
                    c8:33:8d:84:3c:96:80:5e:fe:39:b4:d9:cd:7c:42:
                    9c:ad:1f:c5:2b:cf:d5:d1:f3:2a:64:4e:e0:ff:ce:
                    ce:bc:c3:4a:b1:70:1e:a6:dd:91:f2:a3:0e:34:9f:
                    8f:79:23:50:a4:1f:b7:4e:d6:10:23:3b:83:7d:2d:
                    a6:89:bb:34:98:1c:4e:d0:b5:ad:31:17:75:ac:21:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:04:11:59:2E:6C:2F:B6:B5:5E:A1:B5:D0:7E:E8:B0:9C:E4:03:60
            X509v3 Authority Key Identifier:
                keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:93:11:2f:cf:b8:93:ef:58:b7:3b:1f:92:6f:a2:fd:69:da:
         25:3c:78:98:df:0c:3a:1b:81:59:a3:75:fb:25:cc:7a:5e:f7:
         25:d8:b5:33:b4:06:2c:49:99:1f:7c:b0:75:8f:85:68:69:10:
         d0:bc:09:c3:bb:ca:62:4e:10:12:4c:d4:0e:f2:5f:dd:9d:7c:
         1a:56:cd:cf:44:fa:20:81:e1:15:36:96:ca:aa:6d:8e:6a:7f:
         64:70:d6:35:8f:1d:26:24:50:b2:e3:24:4d:d6:b3:13:93:47:
         6b:a6:13:89:10:2f:a8:93:b9:b9:11:09:be:38:54:38:e8:5f:
         5f:72:aa:ca:d3:9b:ef:71:96:0c:c0:7a:d8:2f:41:ee:0c:48:
         01:c7:91:a3:0f:20:56:de:8e:fd:1c:22:e2:1b:77:15:f7:42:
         f1:df:fc:b5:ab:96:42:e5:25:8e:41:53:9c:0d:52:12:e7:ec:
         64:80:14:8a:33:e3:79:52:b6:ca:80:ce:3f:cf:6a:fe:44:8f:
         b6:27:fa:6d:79:fa:b4:2e:7c:6c:35:68:64:f9:85:d9:21:f6:
         3d:76:23:00:63:20:47:54:cf:88:2f:f5:2d:6b:c7:13:ca:03:
         37:16:f2:ac:1d:d0:90:a6:8c:ec:e9:ef:e2:44:9a:65:ff:83:
         a1:81:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:30:53 2024 by rpki-client on console-ams.rpki-client.org