Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File:                     ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier:          /IYCSy/64uI3yehH17ofmB0Nurv8UNFM9SclC2bt46o=
Subject key identifier:   7F:50:E6:E9:E1:AE:82:AB:94:EB:4F:BB:D7:1F:32:7C:00:5C:4E:FA
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer:       /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial:       018F87487B5906D641A35A55D285AE556E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number:          024B
Signing time:             Fri 17 May 2024 16:00:25 +0000
Manifest this update:     Fri 17 May 2024 16:00:25 +0000
Manifest next update:     Sat 18 May 2024 16:00:25 +0000
Files and hashes:         1: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: wBrmn/XlQ9giLqMy0wlbPHje/qrrhlvLfHh7zozaDS8=)
                          2: wVE_EY0h6ik1TVqAstHrAeIKxfw.roa (hash: epFjjQ6RH3uJP/0Wcsqokjt+W7GXBlmIuOIBWKgh+as=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:7b:59:06:d6:41:a3:5a:55:d2:85:ae:55:6e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
        Validity
            Not Before: May 17 16:00:25 2024 GMT
            Not After : May 18 16:00:25 2024 GMT
        Subject: CN=7f50e6e9e1ae82ab94eb4fbbd71f327c005c4efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:95:ce:49:08:29:c8:f6:0c:5b:8b:88:c8:
                    38:7e:4f:9b:49:ff:8b:e6:e0:56:84:f9:c8:65:7f:
                    80:a6:32:40:bb:87:fe:35:26:30:f8:1f:0e:5a:55:
                    7f:06:4d:2c:61:36:28:be:f5:90:82:0a:08:52:3f:
                    1a:77:31:51:71:e5:62:a6:50:14:1e:cf:f0:c4:04:
                    64:e5:cf:9a:b1:8e:cf:3c:ed:30:98:47:9c:75:3c:
                    e6:56:c0:1f:d8:09:f2:25:31:9d:7b:87:e3:d1:d2:
                    09:e9:83:00:13:4d:a1:95:f2:49:19:f9:bc:1b:09:
                    1d:36:f3:26:b4:c7:5b:ff:4a:c0:f8:f4:f4:24:14:
                    71:72:58:16:d0:ee:01:c0:63:97:1e:68:bb:58:d8:
                    cb:79:96:81:a6:b8:1f:46:82:c0:91:a0:a2:e9:fd:
                    06:23:63:42:f1:73:64:08:94:eb:16:54:ad:02:e5:
                    d9:69:4d:cd:29:06:ba:33:51:b7:c1:7a:6c:c6:0a:
                    a7:fc:3a:2d:91:94:98:be:01:ee:f2:1c:11:9e:79:
                    ae:2c:88:54:b2:40:e7:81:c3:34:59:04:de:0f:6f:
                    76:f1:1d:d4:78:ed:9c:61:d7:2d:e3:99:fc:ba:69:
                    c3:7b:83:ec:09:69:0f:16:4b:c2:29:3b:a5:ee:32:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:E6:E9:E1:AE:82:AB:94:EB:4F:BB:D7:1F:32:7C:00:5C:4E:FA
            X509v3 Authority Key Identifier:
                keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b4:9b:2e:6b:14:50:ce:e9:8b:37:0e:34:14:93:96:5e:c0:
         a3:a3:98:fe:c0:01:2b:14:31:76:6d:e5:d1:b9:5d:d4:33:fe:
         0a:47:87:13:01:a4:6d:ce:31:13:5e:f0:61:9c:8d:d9:bd:68:
         e5:95:b8:c0:1f:ea:4e:a2:4c:69:31:df:f9:21:e5:70:39:27:
         56:4a:12:80:22:94:f3:ee:db:3d:4f:4f:b8:11:e7:86:ed:e3:
         72:c6:c4:06:2f:5d:5b:d1:85:07:5e:06:69:b2:f9:48:8e:6c:
         aa:c2:06:12:ea:3f:56:72:89:54:7e:b3:39:8f:95:b4:ca:09:
         ec:46:ad:98:ca:37:4c:08:53:56:0e:dc:e9:9f:88:e9:5a:0a:
         66:d2:1a:aa:02:32:ec:09:cc:e2:14:25:21:68:55:fe:01:cf:
         46:49:f5:a9:5f:67:eb:d3:21:43:46:d3:56:6d:a6:dc:cf:38:
         62:f4:ea:8c:2b:86:08:a1:f4:bf:5a:b6:5d:ab:84:95:85:a5:
         31:e0:45:c6:1d:08:26:8d:09:ff:6a:c0:4b:83:0c:94:e4:de:
         37:c0:58:43:a4:00:fc:ed:e6:ff:b0:6d:95:d9:cc:32:63:43:
         5a:1c:db:5d:25:86:20:ca:18:ef:ff:27:01:4e:f5:ec:70:07:
         82:fe:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:52:12 2024 by rpki-client on console-ams.rpki-client.org