Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File:                     bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier:          l0w8Zzcs9y6VemJTgObzktWc1FKoI3kBVumNoqlUATI=
Subject key identifier:   E9:A1:23:5C:97:77:BF:73:69:5B:86:64:51:87:D1:C5:60:95:5E:D7
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer:       /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial:       018F874B173A33296E92BF1ADBE130B89C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number:          0FD6
Signing time:             Fri 17 May 2024 16:03:16 +0000
Manifest this update:     Fri 17 May 2024 16:03:16 +0000
Manifest next update:     Sat 18 May 2024 16:03:16 +0000
Files and hashes:         1: G_2t5ELAYTWK-4Px4DzSlswmT1o.roa (hash: h2obMrAPnDhT/njIesq2w9uJRigsX2QhRclFq3Dy/TU=)
                          2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: Ug4UKipPKD8JtA7weZu7rkzBMg860zrmEQDEOlK88hE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:17:3a:33:29:6e:92:bf:1a:db:e1:30:b8:9c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
        Validity
            Not Before: May 17 16:03:16 2024 GMT
            Not After : May 18 16:03:16 2024 GMT
        Subject: CN=e9a1235c9777bf73695b86645187d1c560955ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:34:c6:25:67:a6:96:a2:e4:0b:50:21:66:ba:
                    e6:c7:46:90:14:a5:ff:dd:c5:a9:02:84:c3:30:e9:
                    cc:92:dc:7d:9e:9c:c7:6a:d3:0a:e4:cf:79:78:26:
                    98:89:06:1e:a0:a0:79:0d:4d:cb:85:22:41:31:7e:
                    1b:91:88:27:d7:64:a1:ee:65:b9:82:38:c3:2d:76:
                    ad:0b:a6:bd:72:a8:2d:a0:e0:19:77:7e:e6:bf:ca:
                    96:de:6f:b5:f7:3a:ae:4d:14:1a:8d:5e:2d:0f:93:
                    35:ec:9b:ba:56:a0:1a:ca:da:42:66:4f:2f:df:09:
                    a2:86:3e:f8:d8:67:76:29:00:7f:1e:b5:1d:97:77:
                    f6:e7:96:9c:c0:65:ad:ad:38:10:72:d7:57:96:ec:
                    6d:ac:97:7f:f0:99:ac:d2:13:43:a9:3a:3f:09:83:
                    d0:88:36:6a:16:45:19:22:1b:ae:ea:32:ca:46:97:
                    d2:22:2a:19:96:7b:9e:77:a0:a3:39:e2:2e:47:e6:
                    4c:d1:56:4b:c5:e6:4f:b7:7e:85:eb:15:a4:3f:2b:
                    95:3b:e7:2a:e4:eb:bd:d1:8a:b9:06:ef:25:3a:da:
                    b4:2e:91:b9:89:06:e9:3a:73:fe:ce:7c:8d:5f:13:
                    b6:39:31:07:fb:73:c3:02:d3:cc:86:32:5e:2d:57:
                    85:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A1:23:5C:97:77:BF:73:69:5B:86:64:51:87:D1:C5:60:95:5E:D7
            X509v3 Authority Key Identifier:
                keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:da:fd:82:d5:da:fc:f7:3a:06:34:a3:e7:a8:cd:dd:c0:
         ff:8f:72:28:3f:82:86:a8:67:ec:7c:77:86:e5:d2:de:f2:91:
         2f:ca:e1:61:1b:8b:2e:64:8a:7d:5c:be:59:a9:6f:04:23:51:
         e6:0e:18:19:86:1f:cb:75:77:e7:35:e5:3c:b6:53:d3:ea:14:
         48:51:56:7e:3c:f5:46:9f:8d:ea:d3:82:5d:e3:af:07:a8:58:
         c3:1f:98:87:1e:2e:e2:f6:95:6d:5b:fe:12:e4:e3:e4:5f:75:
         d6:7e:c6:b3:89:08:b3:e8:fb:9d:ca:19:9b:f8:e4:88:bf:0f:
         78:a1:6c:9d:5f:d7:ee:85:f0:5b:72:f4:7a:95:17:f0:8f:66:
         72:87:0b:98:18:f9:d5:50:d8:ec:2e:5d:76:af:6f:53:56:6b:
         7b:c9:9d:de:d7:2e:16:c6:8c:aa:13:d4:f1:95:79:b6:b6:59:
         20:8d:ec:91:32:e8:a8:43:30:e8:ac:c7:16:96:97:b5:1b:d2:
         2d:a5:41:ba:e3:30:da:25:7c:71:a7:5f:71:cc:16:16:41:7d:
         98:56:2a:e2:7f:fd:fa:a0:65:b6:ab:76:eb:44:c7:18:92:07:
         fc:c3:96:5c:32:f3:e6:05:22:71:09:9d:2b:54:96:9f:0b:94:
         47:21:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:49:39 2024 by rpki-client on console-ams.rpki-client.org