Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File:                     XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier:          DbVNi/1BAkDs1uU6/9FTTgqWzyWYr3BB7CQgE/5RdsE=
Subject key identifier:   74:33:06:6F:5D:24:38:6E:9E:BD:7A:08:33:88:CC:71:52:4B:1B:72
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer:       /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial:       018F885B28D9480C1654ABEC42F15687A3FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number:          09D6
Signing time:             Fri 17 May 2024 21:00:26 +0000
Manifest this update:     Fri 17 May 2024 21:00:26 +0000
Manifest next update:     Sat 18 May 2024 21:00:26 +0000
Files and hashes:         1: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: uvRp7XSQ4xdAk7ndXwQ3hRZkPAAdNru8TLBcgnzIxjw=)
                          2: _Y8CXxWQXCx60kx34wzvwcPiND4.roa (hash: K1df3+nprg2E+DL4nyKtfbz1t/nI4savr4ymfB12WOE=)
                          3: oyyimdUDIRHklKAxJbbZcxc7pAU.roa (hash: 3I5ZqXgKXKubGhqzITL1QGecRubtmyYRohfJGKub0RM=)
                          4: rIaJuOye-KwMQizwOMJmgYsq7U4.roa (hash: swzf2w7YkekDJOCAUcDooLBgfpMJrExvcuugV5bkr2Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:28:d9:48:0c:16:54:ab:ec:42:f1:56:87:a3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
        Validity
            Not Before: May 17 21:00:26 2024 GMT
            Not After : May 18 21:00:26 2024 GMT
        Subject: CN=7433066f5d24386e9ebd7a083388cc71524b1b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:47:ae:f3:75:03:4d:b4:6c:fe:28:0a:2f:
                    c6:90:09:e0:cf:c1:d3:b3:ac:35:a2:69:3f:87:5c:
                    81:4c:71:30:37:b3:2b:12:f5:85:c4:7a:8c:30:e7:
                    b7:12:d6:1b:a9:67:43:08:60:19:08:69:9a:c1:56:
                    79:ba:68:45:1c:c0:ee:00:e6:e7:81:76:08:71:5b:
                    9b:fa:7d:e5:13:cf:83:26:63:87:25:4e:d6:dc:a9:
                    10:4c:62:09:47:72:c6:a0:fa:52:54:ca:aa:27:4f:
                    52:fe:15:5f:4f:b1:53:6b:a5:92:3b:2d:5a:18:1c:
                    b8:cd:a1:c2:65:98:7b:88:cf:e4:1b:55:33:c9:1f:
                    ee:d3:61:48:77:62:ee:91:40:1b:6d:7b:b2:6d:ad:
                    2b:10:b5:6d:51:55:9a:d1:7a:d6:cc:33:77:d7:8a:
                    35:69:60:16:23:15:62:85:0b:81:49:7e:b8:71:d8:
                    71:31:b5:23:d2:35:d1:fa:6a:e3:28:6f:bc:8b:9e:
                    6c:73:5b:0c:20:b0:fb:e4:37:ca:87:c8:34:b7:2a:
                    7c:9f:52:69:0b:c0:d1:bc:fa:de:7d:23:63:42:08:
                    95:78:92:85:23:51:6f:3d:53:b9:f4:0c:18:8d:72:
                    c0:c4:83:73:5e:4c:e4:ed:5d:b6:ec:66:33:f9:1e:
                    df:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:33:06:6F:5D:24:38:6E:9E:BD:7A:08:33:88:CC:71:52:4B:1B:72
            X509v3 Authority Key Identifier:
                keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f9:30:08:4a:80:6f:13:b3:e6:96:d1:8b:0d:90:7a:ea:8a:
         79:33:f3:df:37:be:5f:c8:6f:b9:66:db:b3:d7:83:9b:46:81:
         9e:00:91:81:df:b6:f5:64:15:34:54:19:e7:24:32:f5:d2:63:
         1f:33:87:57:d6:ab:cc:ff:9c:45:99:a3:c3:23:43:3c:a2:3d:
         11:9f:41:bc:bb:bd:69:e0:c1:02:85:d4:41:38:63:8c:54:aa:
         87:58:1c:0b:08:c6:65:a6:c7:44:09:e6:ec:4a:a5:75:90:5c:
         76:6d:42:7b:b0:55:4e:42:4e:73:28:50:cf:68:f6:a6:b5:59:
         05:d0:35:ef:c0:0d:df:de:29:a6:65:bc:73:ea:33:7c:3f:91:
         ff:2f:03:9c:a0:5a:0a:01:06:6d:7b:d0:44:19:eb:cd:33:c6:
         41:9f:60:b5:ca:9b:1a:56:c9:b7:ba:33:fd:c2:2a:c0:60:b0:
         56:a0:e4:12:75:11:a0:0e:da:51:e3:83:6e:e0:61:71:fd:b0:
         f7:71:74:a3:5b:90:79:05:f2:75:fc:bb:bf:54:0c:e6:1a:5d:
         3a:66:6a:32:a2:82:6e:69:17:e2:8d:36:c6:22:49:71:19:12:
         fe:56:4e:e9:f5:e4:37:e6:5b:c2:b6:d9:8e:a7:cc:74:e1:04:
         76:fa:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:03 2024 by rpki-client on console-ams.rpki-client.org