Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File:                     06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier:          C4cNjZulC9EoFflxfWWvXsMyAnmInsaKQ8rkcm5VxOc=
Subject key identifier:   49:D1:19:11:BF:4C:05:E4:7F:7B:35:01:9D:CD:56:3E:C0:9C:33:40
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer:       /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial:       018F1F00F24F10CFE7D21E747602A2798A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number:          1140
Signing time:             Sat 27 Apr 2024 10:01:46 +0000
Manifest this update:     Sat 27 Apr 2024 10:01:46 +0000
Manifest next update:     Sun 28 Apr 2024 10:01:46 +0000
Files and hashes:         1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: 93dNr/gbRhE4A1TQpwSfGd3YKS7iEx/Ug8LZrEhArNg=)
                          2: MAVnev72dAha3uio8eDziU__MwI.roa (hash: trGP88BmXbzsJJxaujANkX/zl99O/1IQQ1hrJCgjofw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1f:00:f2:4f:10:cf:e7:d2:1e:74:76:02:a2:79:8a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
        Validity
            Not Before: Apr 27 10:01:46 2024 GMT
            Not After : Apr 28 10:01:46 2024 GMT
        Subject: CN=49d11911bf4c05e47f7b35019dcd563ec09c3340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:e9:08:3d:c2:cd:5c:ae:35:76:11:a1:38:
                    06:2a:19:4c:b6:8b:a3:7c:4a:8c:06:e8:5c:52:94:
                    1f:a2:6d:65:cb:0c:64:85:a1:f6:73:f4:a7:a8:34:
                    68:ce:f6:33:7a:94:56:6b:a8:69:db:7d:0b:4a:e7:
                    9c:01:01:94:e5:9a:fa:4d:64:bd:2d:01:48:72:56:
                    8e:e8:20:dd:88:91:d4:c4:7d:2b:df:36:60:7a:b8:
                    c2:94:ce:ef:ad:a3:96:3e:6e:2e:3e:6e:4c:46:c9:
                    b4:61:d4:78:63:3f:d5:1e:56:ce:39:dc:bc:dd:7b:
                    a9:a8:a7:54:da:c1:dc:12:a6:9f:50:55:c8:1e:32:
                    28:22:69:65:24:b7:9a:8c:2f:ee:ae:92:7e:51:7f:
                    2d:f8:5e:2e:8c:50:27:d4:6b:7e:9e:e6:68:d9:9a:
                    5e:ae:eb:6a:1e:a9:3c:21:76:9f:5d:6d:e5:42:4c:
                    e8:36:91:2d:84:85:46:83:6a:db:a7:f8:dc:70:b2:
                    60:9b:4c:79:09:b8:4f:9f:29:33:0e:cd:f5:51:9b:
                    e9:0a:74:86:48:9c:cf:18:58:df:30:7f:63:d1:39:
                    0c:ba:82:ca:a8:85:53:de:b2:a6:42:39:53:d5:99:
                    9e:7d:81:02:bd:f3:29:01:99:99:6f:4b:3a:9d:f5:
                    58:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D1:19:11:BF:4C:05:E4:7F:7B:35:01:9D:CD:56:3E:C0:9C:33:40
            X509v3 Authority Key Identifier:
                keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:43:5f:e9:ee:66:23:5a:e2:89:9d:73:1a:88:ec:56:d0:87:
         02:c6:77:b6:2a:79:ff:93:94:8b:9d:53:19:e8:1e:6d:c4:30:
         c2:60:af:c4:49:a1:ef:f2:0c:fc:0e:e3:18:4e:d0:48:93:15:
         d6:00:00:42:7d:42:4d:d3:22:42:38:ad:c1:95:87:7c:63:c6:
         29:8f:d5:26:81:08:71:be:29:3c:68:56:c9:dd:0c:b2:c7:b4:
         36:de:bd:c7:6a:f1:f2:1f:f8:fd:17:a2:f5:84:c4:53:c0:9d:
         cb:4f:55:2c:00:ab:15:43:a7:cd:06:ca:33:e5:0f:ca:8f:44:
         fe:57:db:64:eb:0a:6c:1c:3b:02:e8:26:f6:c3:a3:34:76:11:
         23:ab:f4:72:93:8f:ba:ee:56:84:4a:92:ad:cf:dc:49:f3:e3:
         24:a8:29:49:83:88:93:ea:c6:c7:17:ed:09:e6:db:ab:22:7a:
         fe:50:a8:62:1e:92:28:4e:85:43:04:1a:34:82:08:22:3a:e7:
         c5:57:3a:21:f5:22:9e:01:0d:53:27:5c:60:57:3b:8e:89:d4:
         1e:fa:4f:8e:e5:4a:c9:0f:40:e6:6c:bd:9c:3b:e3:49:20:b7:
         e2:79:d1:5f:37:2a:ff:47:6e:eb:78:99:58:d7:b3:dd:43:db:
         fe:d9:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:08:39 2024 by rpki-client on console-ams.rpki-client.org