Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
File:                     IkI4OfIQchYnZBrmtszqzujZBns.mft (raw, json)
Hash identifier:          C0+uGimuBiWd5Q28xX2Tr+u+uQ0Jb+2qZGpTZkb5uys=
Subject key identifier:   74:A6:6B:EF:75:2B:FE:20:F7:4A:EC:59:1A:67:1B:E0:DD:F6:96:B2
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Certificate issuer:       /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial:       018F4D906C69CA82B817329F6D0B2D251A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
Manifest number:          069C
Signing time:             Mon 06 May 2024 11:01:01 +0000
Manifest this update:     Mon 06 May 2024 11:01:01 +0000
Manifest next update:     Tue 07 May 2024 11:01:01 +0000
Files and hashes:         1: IkI4OfIQchYnZBrmtszqzujZBns.crl (hash: VB79zqoJRZOLsdHgigJojpVHYspmgpKeRTLiBvrLxug=)
                          2: wJDRK32lB5LW0NYdA-0BMXDkTmQ.roa (hash: 5KCUkLPS/IZxQSW1wdCDmiriNWaMq50KNrDeTbU9NZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:90:6c:69:ca:82:b8:17:32:9f:6d:0b:2d:25:1a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
        Validity
            Not Before: May  6 11:01:01 2024 GMT
            Not After : May  7 11:01:01 2024 GMT
        Subject: CN=74a66bef752bfe20f74aec591a671be0ddf696b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:54:7f:2b:49:fa:6d:b7:80:6c:76:56:b5:
                    1a:82:6c:25:4d:f4:7b:3f:b8:4e:d9:bb:13:bf:01:
                    15:6e:ef:a6:f7:db:9c:f8:29:e9:54:2e:01:04:90:
                    6e:19:2b:5e:54:af:57:82:33:d9:5c:7d:bd:52:86:
                    66:e2:57:15:95:a2:7a:9b:42:0b:01:39:79:fa:f9:
                    5e:17:a4:61:5e:44:5b:11:c2:ae:cf:3d:a2:d4:b3:
                    67:39:7c:3c:bd:9d:b5:27:58:14:a5:a1:48:07:30:
                    e2:ec:bd:c2:90:53:82:80:e2:58:22:32:79:46:7d:
                    19:b6:36:79:33:b5:d8:8a:6e:cf:a0:66:d6:f5:a3:
                    23:dc:e9:67:47:24:4e:a1:d2:16:c3:f1:11:16:20:
                    e8:70:ed:8c:74:4e:33:eb:22:b8:14:4f:a0:3a:1c:
                    63:0e:f7:51:5c:9f:d1:62:64:44:a9:5e:37:b1:06:
                    6c:2a:04:fb:b2:6f:8e:8f:f7:9b:2c:32:ef:4b:99:
                    f3:bb:d5:ba:e9:2b:bb:32:49:a7:76:cf:ff:ea:34:
                    75:e0:81:3a:ac:22:36:65:da:9a:40:37:c3:88:0b:
                    d5:7c:d8:a7:a3:7f:ec:86:16:18:8a:ed:4d:3d:4c:
                    5d:16:c6:85:36:ed:15:08:82:15:12:45:09:c9:72:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A6:6B:EF:75:2B:FE:20:F7:4A:EC:59:1A:67:1B:E0:DD:F6:96:B2
            X509v3 Authority Key Identifier:
                keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ec:66:a3:57:a6:72:2a:b4:77:cc:55:30:40:81:91:e1:17:
         60:18:4f:c2:c2:38:38:d1:99:d9:1e:35:79:1c:c9:e7:c1:74:
         8e:61:d0:01:6e:08:ed:c3:35:17:95:c5:d1:60:be:aa:eb:e1:
         ed:d3:af:a0:20:16:c1:a3:ea:d7:af:bf:77:3d:61:83:6a:7d:
         85:ab:64:84:32:66:a2:43:bf:5d:2b:23:25:c1:49:f4:02:ab:
         f1:1d:d4:ac:b4:cc:8f:02:5b:82:9b:1a:7f:45:ae:97:07:ca:
         62:33:aa:75:a2:f0:44:33:f4:20:40:35:34:ad:66:f0:17:24:
         c2:5e:c6:23:a8:d9:5d:d9:a4:22:e8:24:e1:12:f3:31:32:0f:
         f3:ad:e4:15:b8:5d:81:c3:78:80:bf:0a:92:9a:91:56:e0:2d:
         d0:35:9a:22:8a:bf:7d:b0:80:09:d2:5f:cb:a1:d7:67:f3:0f:
         33:6b:08:ef:6b:4a:9d:a5:fd:ab:bc:ef:33:e7:0a:b6:78:72:
         ec:7f:9a:ec:5a:b9:85:fb:e0:29:11:d3:40:04:09:ea:ff:30:
         a0:ef:bc:8d:35:c3:7e:ee:c0:77:2e:de:d7:14:e9:b2:71:04:
         60:51:65:e7:71:5d:53:ac:62:3a:6a:6e:93:36:52:8a:bf:ef:
         e0:19:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:22:15 2024 by rpki-client on console-fra.rpki-client.org