Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File:                     2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier:          MYie14kIqd7ZrUKMWu8qLJHctFFZme/8f2x313xHiXU=
Subject key identifier:   6D:AB:F0:8C:4F:EA:11:A8:93:F3:87:20:92:01:8A:4B:7F:97:90:09
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer:       /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial:       018F43B2C638F38CADA03DE1C0582510FFAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number:          0A27
Signing time:             Sat 04 May 2024 13:02:20 +0000
Manifest this update:     Sat 04 May 2024 13:02:20 +0000
Manifest next update:     Sun 05 May 2024 13:02:20 +0000
Files and hashes:         1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: zqOs0bVaabH325iE2Feg2hcJno5kwFoSgkyhejrYjQw=)
                          2: WjUSvvqd2NfntnyJgr5Wdbs_bsE.roa (hash: ti/gWUl/FlIxtlJj15yq7iGn0Dj39cw04IT4Pkc4wgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b2:c6:38:f3:8c:ad:a0:3d:e1:c0:58:25:10:ff:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
        Validity
            Not Before: May  4 13:02:20 2024 GMT
            Not After : May  5 13:02:20 2024 GMT
        Subject: CN=6dabf08c4fea11a893f3872092018a4b7f979009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:bd:bf:c5:a5:c8:df:be:f6:ae:26:65:bc:
                    89:04:47:2b:3f:e3:15:a8:bb:b2:dc:de:a0:fb:ea:
                    ed:6c:41:0c:83:35:7a:a5:79:d8:12:21:05:40:3b:
                    76:29:34:93:9b:4d:0a:d8:36:0b:ed:21:16:72:ea:
                    9b:34:f9:56:69:77:42:4b:0f:17:0b:95:fc:8a:cb:
                    ba:65:dc:52:99:7a:5b:c3:33:5c:1d:74:e2:83:a4:
                    59:79:59:0d:59:23:dd:c6:10:c8:57:33:0b:4f:d5:
                    8b:0e:b0:e8:16:43:6b:6a:a0:5f:43:c3:f0:ec:66:
                    45:4c:5d:d5:b5:4b:c9:c1:1c:15:5d:e6:72:6c:80:
                    71:3d:29:1f:67:fe:0d:ea:39:cd:a4:26:ef:47:8a:
                    bd:fa:bd:43:c6:d3:ed:7b:61:d4:bc:5e:74:5f:c4:
                    dc:65:cb:54:18:55:39:92:6a:e9:ca:16:46:9a:63:
                    58:4b:6a:b6:c2:f3:ff:f8:5f:55:63:28:a0:29:3f:
                    80:e5:bb:0e:15:67:a0:b4:0d:35:89:fa:bb:fa:5b:
                    fc:b2:e2:97:15:de:a6:9e:12:b0:79:14:9d:ad:1f:
                    b1:07:73:28:9c:1f:05:9d:bc:12:9d:a1:24:b6:dc:
                    b8:c2:3e:b5:d7:5f:35:ae:9e:33:a3:3c:f2:65:26:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AB:F0:8C:4F:EA:11:A8:93:F3:87:20:92:01:8A:4B:7F:97:90:09
            X509v3 Authority Key Identifier:
                keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:1c:aa:10:6a:2b:b6:56:1e:e9:44:a1:5f:a3:28:9a:1c:
         58:7a:05:f3:92:91:b7:b1:b0:a3:86:5c:a8:6d:75:1c:34:b1:
         1d:04:59:36:4e:7b:d4:75:1d:04:9d:30:3a:ac:a2:b0:71:20:
         6e:76:2d:5d:5f:0a:66:33:a4:4c:82:d7:76:b3:e1:4d:cf:44:
         88:5a:ba:81:6f:37:8e:8c:bc:39:0e:85:5f:fc:68:45:45:78:
         ac:d6:87:48:2b:53:de:3d:2e:5b:5e:1e:75:5e:3f:f5:6b:02:
         d3:b2:a3:ad:8a:2b:9f:c8:e0:a1:01:85:7d:7f:06:10:a7:4d:
         f2:de:1a:32:1a:74:b3:4d:11:74:a5:ec:7a:7c:08:23:40:bb:
         86:69:d0:57:23:69:95:4f:1f:aa:5b:40:9d:09:ca:61:c3:ed:
         24:d1:cb:71:92:91:78:79:da:5d:44:55:3a:d8:c2:0f:b7:0c:
         45:36:ed:6d:2e:a7:02:ad:19:0a:21:6d:df:ff:ea:f9:e2:0e:
         62:78:6e:27:be:e4:43:90:01:9b:4e:18:92:9a:0f:1f:fc:f6:
         08:07:3f:04:a5:76:19:1e:ba:b9:31:29:c8:63:4c:af:7b:a3:
         b4:3f:73:7b:74:51:66:b3:f6:e4:b6:78:c5:fb:8c:bc:d4:70:
         c7:19:7b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:29:01 2024 by rpki-client on console-fra.rpki-client.org