Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File:                     ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier:          8z6VsL8zInMfM6ORlULC6WP2Gs3KnitL/a4+EwV7ghE=
Subject key identifier:   BD:62:83:57:E5:C2:12:9C:74:2D:57:35:A1:AD:B3:CA:DF:9B:42:D2
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer:       /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial:       018F86DA5B3DB33A0A68DB32BA2470E75291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number:          B6
Signing time:             Fri 17 May 2024 14:00:07 +0000
Manifest this update:     Fri 17 May 2024 14:00:07 +0000
Manifest next update:     Sat 18 May 2024 14:00:07 +0000
Files and hashes:         1: 3B19KPyJnviBgt6JQm40YUwJQoM.roa (hash: o8Dfv5t8JzRJx/RzpIhHEq/myuas8cpxZLxeR8pP3Oc=)
                          2: k38sCvObWiOo_GcGhGyuOcxAHI0.roa (hash: ErsTl3uLZMSaftsOs40vxGX9NRveO+AlU/TWNHr9X3c=)
                          3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: cjzdXCEo7n68NY8dr37Rz/cTANHIx+cQFHjp7aSsRYQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:5b:3d:b3:3a:0a:68:db:32:ba:24:70:e7:52:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
        Validity
            Not Before: May 17 14:00:07 2024 GMT
            Not After : May 18 14:00:07 2024 GMT
        Subject: CN=bd628357e5c2129c742d5735a1adb3cadf9b42d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:3e:91:33:2a:5e:df:b1:51:af:8b:83:3d:
                    93:4f:f3:c5:92:6a:aa:3b:41:27:57:71:c1:4c:ff:
                    cd:76:36:ba:8f:81:46:32:2f:45:81:38:8d:46:d9:
                    b3:0c:3f:9e:17:b8:37:da:fc:8e:e3:c2:b6:4d:eb:
                    0b:94:dd:6f:c6:dd:41:bb:32:03:89:80:16:98:1f:
                    ff:5a:b9:0d:94:32:d1:ff:5f:7a:cf:07:4f:6a:a5:
                    09:c2:82:8b:dd:99:18:82:d8:0c:91:5a:1d:25:87:
                    02:6a:d6:01:a4:9c:99:21:42:ab:25:f9:2c:80:24:
                    85:1d:1c:bd:55:ae:c8:88:ba:34:a6:14:5f:f2:8a:
                    47:8e:5f:b4:d1:fb:f9:46:34:38:a2:03:aa:38:8d:
                    cd:6d:d0:01:d3:ce:4d:96:07:d1:35:7f:f1:b3:a7:
                    e9:7d:cd:74:e7:9f:2d:fc:f7:03:3f:21:40:de:88:
                    77:ec:c4:ca:15:fd:d2:78:b0:7e:2f:dd:06:1f:94:
                    1d:62:8c:55:c4:63:8b:68:70:b8:b8:e0:dc:df:22:
                    aa:6c:19:5b:91:44:3c:80:5f:fa:d5:98:a6:04:21:
                    c7:b3:43:14:bc:c9:c5:fb:df:fb:9c:b0:2b:52:98:
                    18:c5:ce:3c:48:cd:59:6f:84:bc:aa:fa:1f:9d:8d:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:62:83:57:E5:C2:12:9C:74:2D:57:35:A1:AD:B3:CA:DF:9B:42:D2
            X509v3 Authority Key Identifier:
                keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:12:af:36:1b:e8:28:db:c5:1b:47:ea:af:76:12:5a:3f:b6:
         cb:05:29:ec:73:0c:4c:99:a5:ba:03:46:4d:20:09:c4:6d:e4:
         61:dc:eb:0a:e1:05:de:f5:bc:e1:7d:05:a2:84:3e:40:2f:56:
         b6:98:ae:c2:83:20:eb:79:9a:1c:7d:32:e7:67:79:53:ea:e4:
         5e:91:37:8d:09:4f:c7:84:6e:30:0f:82:3d:02:94:c3:e5:aa:
         fd:2e:63:62:16:cc:3b:2b:47:37:f4:e6:da:d9:a8:38:fb:2b:
         28:41:74:bf:24:40:1c:ec:97:70:58:fa:09:df:39:10:f8:05:
         bd:c9:40:1a:28:47:4e:ae:8a:7f:1b:4d:3e:42:5f:16:4d:0f:
         33:de:46:33:17:59:2f:16:79:e8:78:0d:0a:3b:18:8e:df:3b:
         dd:6b:f7:0c:1c:3a:07:0c:69:f5:51:2d:4a:db:c1:63:f7:de:
         d5:25:19:94:41:36:cc:1c:dd:c5:ca:7f:c3:47:22:02:b3:13:
         6a:f0:02:60:90:76:86:d7:80:db:4b:6d:24:ec:cc:7b:d4:ac:
         b1:69:05:23:20:e3:7e:82:1a:ef:e2:25:11:6a:ad:dc:94:b7:
         cc:fb:c7:40:2e:56:c2:b1:17:97:17:1c:3b:02:46:9b:0a:8d:
         77:b3:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:48 2024 by rpki-client on console-ams.rpki-client.org