Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File:                     2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier:          yI0X7TYpQd9U7oHSl/llOv1LXQQarafgnsGh3irT44o=
Subject key identifier:   FF:C7:40:6A:7F:9C:AA:DC:15:E4:0A:FF:0D:10:19:17:2B:1C:10:18
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer:       /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial:       018F4D5AA94894AD02322D27887A3A52D8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number:          0AB5
Signing time:             Mon 06 May 2024 10:02:18 +0000
Manifest this update:     Mon 06 May 2024 10:02:18 +0000
Manifest next update:     Tue 07 May 2024 10:02:18 +0000
Files and hashes:         1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: k5Kg1oi5YEGftNTLHjKVLqQ61TT3VgBSadC+xfHDIHI=)
                          2: ldBqwZxqjRhjUom118RK80ySq6Q.roa (hash: Wm1IbQsteTdn7Wq8dDE23d9TNbkR4VcSoBkU4CuNLCc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:a9:48:94:ad:02:32:2d:27:88:7a:3a:52:d8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
        Validity
            Not Before: May  6 10:02:18 2024 GMT
            Not After : May  7 10:02:18 2024 GMT
        Subject: CN=ffc7406a7f9caadc15e40aff0d1019172b1c1018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:af:a0:65:ba:71:35:df:df:1b:08:a2:24:
                    d8:3e:ae:76:a2:ad:79:ad:84:61:89:ff:5d:7a:31:
                    61:e6:76:4b:8a:fc:12:dc:0a:d6:88:6c:18:d9:28:
                    f5:b3:ca:47:c2:51:40:c3:e8:9d:a2:04:ce:f2:af:
                    15:fa:1f:12:d0:f6:78:7c:a4:22:ee:60:3d:11:c8:
                    0a:9d:86:b5:c1:02:42:f9:aa:8f:e9:8a:a5:35:1f:
                    f1:13:3c:86:3f:1f:08:4e:e6:c4:40:8d:5c:ce:b4:
                    c7:2d:b4:4d:61:42:86:eb:5e:3d:2d:a6:63:32:d8:
                    7f:07:d5:d9:57:5d:df:c8:32:1d:eb:a5:20:7b:fd:
                    65:88:10:9a:88:c7:6f:88:9e:be:f0:61:70:03:d2:
                    a1:a2:33:3b:fb:20:06:a6:e6:fb:5e:c0:ad:b8:de:
                    8c:7b:35:3e:73:85:be:bd:51:87:68:17:bd:6c:17:
                    12:1d:71:e8:8b:8d:a9:2c:fc:2b:eb:0d:6d:16:a7:
                    95:f8:1e:6f:4a:72:83:aa:61:36:4f:cd:f9:73:98:
                    92:69:0b:3a:72:5b:80:20:f6:dd:b0:a7:d6:1f:94:
                    59:e0:e3:d7:05:7d:73:34:70:b5:2c:c4:2e:f3:47:
                    01:06:e4:ff:95:b3:d2:6e:1d:d7:70:ae:a0:11:5a:
                    c6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:40:6A:7F:9C:AA:DC:15:E4:0A:FF:0D:10:19:17:2B:1C:10:18
            X509v3 Authority Key Identifier:
                keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:43:44:a0:33:4a:69:13:0a:ac:b2:c7:7c:b4:fd:d0:6a:5b:
         88:ce:12:15:f8:b6:bf:1e:66:94:ae:10:47:61:65:b4:63:96:
         d1:ea:41:cc:64:31:c3:9a:24:ff:54:1c:a0:80:c6:b5:19:00:
         c6:a6:57:d2:8c:13:45:f4:fe:35:b8:6c:44:d6:0f:48:e3:cd:
         50:aa:bd:a6:ad:fc:13:c7:87:3c:4c:37:b9:4e:23:4f:01:74:
         6c:b9:35:07:1b:fc:60:3e:3b:7e:9e:cf:b8:04:f4:85:f3:e2:
         e7:95:cc:ed:70:d8:0a:f1:da:39:e6:b2:4f:3b:cd:b6:a9:cd:
         23:16:55:d9:16:84:83:cd:22:e4:c0:15:8d:95:54:43:76:68:
         bb:a8:46:4a:6d:c7:16:f6:4d:8b:34:82:f7:49:d0:8d:07:57:
         7b:39:d3:8b:6e:23:bf:84:57:16:a4:7b:f7:21:f1:6d:ca:8e:
         b5:44:8d:88:f9:fb:a9:5c:a4:f3:ad:47:e0:2f:87:d4:06:34:
         7d:b3:93:df:a8:27:ec:25:6b:83:1e:ad:73:0f:86:16:b7:44:
         5b:ae:71:2f:36:f1:a4:cd:3b:0f:69:ed:e5:3e:ab:cd:4a:e8:
         00:3e:04:0f:fe:8e:49:32:ac:62:30:23:1d:cc:f8:1d:68:34:
         fe:f6:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:31:43 2024 by rpki-client on console-fra.rpki-client.org