Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File:                     bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier:          HYo1MukheTaESBD3GbDHXhR1zBnRpD/MIK+kK6XL3fo=
Subject key identifier:   97:02:EB:1A:05:D4:5E:13:5B:88:8B:A6:6A:32:52:F6:CE:B0:57:7E
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer:       /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial:       018F88248518D68FA50BF812AAE2BD3EF9F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number:          030E
Signing time:             Fri 17 May 2024 20:00:45 +0000
Manifest this update:     Fri 17 May 2024 20:00:45 +0000
Manifest next update:     Sat 18 May 2024 20:00:45 +0000
Files and hashes:         1: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: tTQ83SWTNBeK/SC3nGN9NCZXAysoAOK3FigsfXbj2MA=)
                          2: rUYtJXNL-JM77AVwI-d1dunvfVA.roa (hash: Jqdy9skpAY8r5n3r9+XoF/zjsdO22Iv39m5MZKwrVm0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:85:18:d6:8f:a5:0b:f8:12:aa:e2:bd:3e:f9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
        Validity
            Not Before: May 17 20:00:45 2024 GMT
            Not After : May 18 20:00:45 2024 GMT
        Subject: CN=9702eb1a05d45e135b888ba66a3252f6ceb0577e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:be:2d:de:f1:8a:36:b9:d7:1d:31:a6:c8:
                    eb:58:35:67:6d:d0:c0:a1:1b:68:4c:f9:41:84:b1:
                    e3:ba:2a:fc:65:4f:76:09:c3:a9:92:fb:7d:cc:ab:
                    48:57:2c:29:e6:20:4c:1c:01:cc:a4:cc:0b:fa:c4:
                    9b:da:84:6e:61:1c:b3:9f:44:54:f6:ba:7c:d9:6c:
                    dc:49:46:ed:29:66:17:81:f9:a3:e7:df:18:4c:82:
                    c2:87:47:e7:71:28:8d:28:1a:6e:7c:6b:2d:cf:ce:
                    fc:25:b2:da:58:d4:3d:02:dc:2b:01:60:4a:e1:79:
                    89:b1:c3:4d:4b:1d:13:6c:8a:ef:42:52:2b:dd:2f:
                    69:cf:81:c3:59:08:9d:93:78:80:ea:ca:50:ea:38:
                    48:33:c4:ff:b4:b5:1c:1a:e0:cd:21:42:a5:aa:66:
                    d2:05:c2:14:d5:1f:82:4b:29:21:0a:16:eb:28:90:
                    b6:c3:43:0f:9f:bc:c4:15:61:40:04:88:58:e7:c6:
                    b0:c0:3f:32:59:3e:7a:49:e4:5f:92:00:9c:72:01:
                    23:05:87:e4:34:82:90:65:85:da:a6:e6:a0:23:d5:
                    a1:f2:08:65:13:97:7f:91:34:69:86:a5:ba:9d:15:
                    65:c3:67:18:e8:da:cf:6a:92:fc:02:36:9b:da:62:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:02:EB:1A:05:D4:5E:13:5B:88:8B:A6:6A:32:52:F6:CE:B0:57:7E
            X509v3 Authority Key Identifier:
                keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:dc:a2:a1:96:14:9c:99:27:f1:44:da:b4:1d:b0:1a:f8:
         40:22:df:c8:d6:88:5e:82:ae:eb:d9:8f:9f:e1:c8:f1:35:41:
         af:7d:ba:36:82:c8:b4:a5:bc:6a:dc:8a:5a:52:ca:2a:f9:2d:
         76:5e:c3:35:a3:ea:2e:67:05:72:e0:41:28:10:96:cb:48:72:
         8a:34:11:c2:08:67:a7:c9:40:17:78:f2:8d:2c:8f:19:a4:0d:
         f4:13:d9:ff:f1:a3:1f:ce:6d:7e:3e:19:4e:fa:8d:de:2b:af:
         51:61:b9:b8:c1:82:85:4f:ff:8e:8c:5e:bb:8e:81:f5:55:b4:
         5b:46:f2:a0:39:d6:ef:07:07:c0:59:2e:7f:c8:a5:6f:21:4f:
         cf:6d:0d:b6:5e:01:78:b4:01:a2:61:7b:02:56:c9:bb:35:2a:
         37:22:06:de:50:f3:76:45:de:93:e1:52:7f:76:3f:66:b0:88:
         14:d6:d5:55:a1:7a:eb:3a:a7:8e:ec:80:53:91:31:6c:13:c7:
         24:d2:bd:f1:10:1b:21:5c:16:7f:4c:05:70:2b:8f:6f:88:cc:
         1f:09:78:ee:35:c9:e0:df:bc:aa:48:b5:3c:ba:dd:91:f8:ea:
         13:2d:24:5a:26:7d:da:fa:02:69:4c:d0:ae:7f:34:6c:b8:c0:
         a9:ab:f6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:14:28 2024 by rpki-client on console-ams.rpki-client.org