Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File:                     2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier:          eEDyilZ1AQr1VJV+m3p2P+it22cP7hPpW0h8zdcTxk0=
Subject key identifier:   A4:B8:13:7E:81:36:5F:54:24:E8:51:AE:26:F2:5B:36:C1:C4:00:4B
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer:       /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial:       019062271E5016D12B8023CEE7221833FC86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number:          117B
Signing time:             Sat 29 Jun 2024 04:00:48 +0000
Manifest this update:     Sat 29 Jun 2024 04:00:48 +0000
Manifest next update:     Sun 30 Jun 2024 04:00:48 +0000
Files and hashes:         1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: 3zZg7eMJpnKeVR9y0VWAXSaKAWDuPm+iibU6FXSz7qQ=)
                          2: tiScyq0fY2Fmv5ROHz5iDjgBbbA.roa (hash: ZpmrH6J85c6gi4zxFRi7fd4WgChU75mPCa+/X62JkJE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:62:27:1e:50:16:d1:2b:80:23:ce:e7:22:18:33:fc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
        Validity
            Not Before: Jun 29 04:00:48 2024 GMT
            Not After : Jun 30 04:00:48 2024 GMT
        Subject: CN=a4b8137e81365f5424e851ae26f25b36c1c4004b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:40:0a:9c:e9:d1:ee:cd:51:3d:a5:95:b8:
                    43:63:f3:16:79:26:13:b8:3d:d0:de:95:36:0e:13:
                    f2:2e:4f:e9:3c:bb:bc:9d:da:aa:7b:97:5a:52:00:
                    a8:57:c0:98:8d:53:c3:17:24:bb:a5:7d:78:3f:a4:
                    77:24:81:d9:f3:84:32:d0:ff:c4:cc:a5:df:85:df:
                    1f:c2:95:f6:45:f9:05:86:96:c7:e4:bc:38:6c:f5:
                    23:5f:fc:ae:1e:8f:f2:9a:64:57:95:5c:c2:19:80:
                    48:30:8c:4d:5c:85:e4:7c:32:f3:b7:12:42:fa:86:
                    66:21:5b:2f:fd:a3:79:99:03:bd:50:39:2b:78:bf:
                    02:eb:46:5b:52:08:9d:72:a5:ab:21:93:cb:c3:2e:
                    4e:02:ee:e9:57:ef:67:6f:5c:24:0d:6d:10:1e:11:
                    26:fb:1e:f5:95:a2:eb:0f:b2:ba:f7:b2:a4:1a:0d:
                    d8:9a:67:73:6b:d1:3a:cc:94:b3:1d:f0:04:ee:1a:
                    41:7a:20:3a:f7:5a:50:c5:e9:f6:b3:02:60:e8:23:
                    c8:10:be:98:1f:5f:3e:4a:f8:35:5f:e8:eb:a5:f8:
                    3d:67:f6:82:b1:ce:7a:f1:d7:20:69:a7:db:3f:24:
                    c9:02:f1:d8:c2:2a:9a:c4:46:74:8e:07:e7:c2:25:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B8:13:7E:81:36:5F:54:24:E8:51:AE:26:F2:5B:36:C1:C4:00:4B
            X509v3 Authority Key Identifier:
                keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:66:d2:b5:26:a7:a9:06:7c:78:75:91:17:96:e5:9d:4f:e7:
         6d:6e:36:3a:55:07:71:9a:c2:e4:b3:0f:2f:fc:0c:3f:c1:72:
         40:6d:ef:75:6a:03:23:a3:8f:7b:94:cc:8c:67:1c:b9:a2:8d:
         18:2e:68:6f:18:97:a9:bc:20:b5:41:a3:c4:84:c4:7c:9b:ab:
         8a:5c:bb:09:b0:b8:5a:64:51:53:d4:63:13:db:13:5b:d4:e3:
         cc:56:de:39:f0:4d:d1:bf:9d:a3:d4:22:d2:d0:34:a2:f3:55:
         b2:ed:9e:e9:e1:3f:92:62:06:3c:0a:af:2b:42:4b:b8:10:0e:
         d2:1d:38:9b:dd:a2:8e:3b:60:f2:1d:39:b6:e3:cd:6d:1b:79:
         05:5b:07:6d:54:79:33:b7:5b:ed:3b:53:0f:a9:12:e9:f1:a9:
         96:f9:fc:e1:3f:6f:a3:d9:29:42:d9:9c:1b:ba:d0:3b:fe:b3:
         83:72:89:26:b4:3a:83:9d:f9:d7:b9:0a:d2:20:25:51:86:e0:
         5b:d0:d4:d6:68:1c:17:e9:e1:4f:d1:c4:65:dc:e7:5d:7e:98:
         a8:f2:e6:d5:1d:b9:75:97:90:2c:cc:1d:ef:65:09:69:45:a6:
         be:1b:95:19:28:56:1d:c2:8d:ae:02:3f:e9:65:e0:f2:0f:c3:
         73:8e:af:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 14:01:48 2024 by rpki-client on console-ams.rpki-client.org