Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File:                     2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier:          +gQEXeoOfm9PbbLz3iX3My/1Btnkt8s+jC2gu5CqT4c=
Subject key identifier:   A9:35:FE:FD:21:71:47:15:E4:DC:FB:98:9F:9C:AD:E7:83:74:00:4A
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer:       /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial:       018F22DD559F7EC278169DCCAE1E30345438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number:          1149
Signing time:             Sun 28 Apr 2024 04:01:21 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:21 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:21 +0000
Files and hashes:         1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: 5b/9pWyhnDeK2eCmgi8lidcjsd83Md4lwuw96fC6qzU=)
                          2: M2zc3PdL5eMJGMr-Z97BGexkLEg.roa (hash: TEc0BM+qJkc+XTZn9a0AAkIhqtq2zH8NDb757Xny7vg=)
                          3: M_Brg01aoE5EO477tTeBXmJw7BI.roa (hash: 3/LJHG0hqyF8/N0OCq1mkg1ls9fbAVr8VD52ARHaK7o=)
                          4: ZBXjjBFqAkHxQ0uog168lnOjFhQ.roa (hash: 6ghg/kJy6xjTKzDWHhwntVnTUy7+IXaKCThB5YmIpMs=)
                          5: dym0azsa16K8MldFHo50g4lX-VQ.roa (hash: QAwdWDZ151LFmQ55IDtCNEYQVfDGmxIGbHXTgogRSUA=)
                          6: plxWlbx4VCcM0_otpK3J7UUs8oA.roa (hash: z5BCIqaoF7iFlrIYe4lniJVO/toHvwmRQZoMOjCjQUY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:55:9f:7e:c2:78:16:9d:cc:ae:1e:30:34:54:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
        Validity
            Not Before: Apr 28 04:01:21 2024 GMT
            Not After : Apr 29 04:01:21 2024 GMT
        Subject: CN=a935fefd21714715e4dcfb989f9cade78374004a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:c6:d6:7a:84:c5:82:25:a4:7b:aa:5c:ba:
                    ab:45:e6:ac:da:ae:63:fe:c0:1c:50:f7:a7:36:4a:
                    bd:a3:0f:2b:40:16:ca:92:5d:75:60:96:01:89:34:
                    23:20:33:72:ed:3d:31:2b:60:10:e5:a9:2a:a0:c3:
                    c1:0c:e0:51:26:92:ff:ed:50:6d:9f:46:c0:f4:19:
                    9b:1d:ac:d2:c7:03:cc:9c:18:29:a0:c3:ff:aa:e7:
                    22:0b:2f:84:81:f9:b5:06:27:0d:29:78:ef:f6:95:
                    d1:f1:f1:0b:2b:20:fc:1f:84:97:d0:18:c7:cb:9e:
                    52:77:7d:d7:b5:09:cd:1f:1e:48:35:1a:04:cf:26:
                    28:c8:62:c8:de:70:06:bc:d6:e5:a9:32:c4:98:73:
                    82:51:17:1e:e2:21:15:1b:73:fb:cd:b6:41:01:18:
                    59:f0:05:58:ea:98:0b:c2:44:13:5f:cd:04:a2:6a:
                    cc:3d:e6:3d:2b:fa:dd:a0:1d:9c:16:b9:70:1f:b9:
                    ad:30:67:f7:e8:6d:ea:3f:b0:08:f4:b1:5b:13:ae:
                    80:7a:f2:ee:ff:b3:4b:c9:6a:4c:84:b1:04:b1:20:
                    b6:23:e2:1b:7e:9c:db:3f:58:01:10:2d:03:f8:65:
                    c0:d3:ca:0f:d7:c3:c9:a5:85:64:72:ce:33:6f:92:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:35:FE:FD:21:71:47:15:E4:DC:FB:98:9F:9C:AD:E7:83:74:00:4A
            X509v3 Authority Key Identifier:
                keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:7a:ad:dc:06:e7:b0:3a:1b:0f:09:61:96:c8:cb:c7:f1:e3:
         f2:a3:73:af:a8:3d:5e:d1:82:d5:bc:c3:51:26:b9:ca:b1:f5:
         d1:39:55:98:dd:74:54:09:ad:6b:b2:b1:d2:1e:e9:31:bf:11:
         c3:0b:9b:9a:e0:9d:71:97:dc:6b:b5:c2:49:fb:3b:1e:04:2d:
         3d:09:01:e0:6b:6d:69:27:33:a1:3a:85:d3:28:47:b9:f2:c4:
         49:6f:de:c6:ab:fd:63:10:93:d1:bc:b0:c0:6a:fc:e5:46:4a:
         ed:d8:36:68:4f:9e:c0:47:27:66:5a:12:59:82:aa:5e:74:61:
         f6:81:73:7c:99:c1:f6:4e:a8:6a:45:87:83:fb:8c:39:71:63:
         d2:ff:1d:bc:5c:fd:8f:b6:95:5c:08:65:50:fb:19:40:69:c4:
         04:2e:06:40:5b:d4:87:35:86:63:89:18:e4:ae:22:68:51:e2:
         50:a2:0c:f9:2b:44:4e:c4:4a:60:a6:92:e7:f7:f8:b6:cb:29:
         b6:96:00:23:c6:6f:c7:25:29:04:1a:39:87:42:82:4d:96:c0:
         64:8f:5a:00:d3:5d:cf:3e:14:55:f2:44:1d:ec:1e:44:4f:96:
         f1:1a:41:1d:95:64:03:d9:45:ed:e0:98:e0:81:9d:68:d0:f8:
         c9:ce:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:05:04 2024 by rpki-client on console-ams.rpki-client.org