Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
File:                     bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft (raw, json)
Hash identifier:          bRw9llKgoICJC/yrxYtgS2bj3M6zdiDQAxDKXvMX5jc=
Subject key identifier:   2A:36:A4:AD:3D:96:1A:FC:0F:AB:72:6D:6E:DD:17:6D:14:29:D3:2C
Authority key identifier: 6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E
Certificate issuer:       /CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
Certificate serial:       018F96BDC33DE7E9F4B8DED7626A33AE3507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
Manifest number:          0D8B
Signing time:             Mon 20 May 2024 16:02:49 +0000
Manifest this update:     Mon 20 May 2024 16:02:49 +0000
Manifest next update:     Tue 21 May 2024 16:02:49 +0000
Files and hashes:         1: QvwvKaL59eQh_Eah1ut4EIC3B68.roa (hash: xjQQwYippUG0T92RE4ooQMqfZj/+zz7rn0WWYKKeUn4=)
                          2: bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl (hash: NCVF0QUjiUuBMFYP9INjciw5Y7mGjrGkvBp2QZYv7i4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:c3:3d:e7:e9:f4:b8:de:d7:62:6a:33:ae:35:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
        Validity
            Not Before: May 20 16:02:49 2024 GMT
            Not After : May 21 16:02:49 2024 GMT
        Subject: CN=2a36a4ad3d961afc0fab726d6edd176d1429d32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:7e:eb:f8:7b:dd:6d:83:ca:fa:ab:93:c9:
                    66:1b:e3:0a:82:86:5e:a7:07:c9:29:21:4b:74:9b:
                    90:a5:55:76:d9:52:94:c5:62:de:9b:9d:73:75:81:
                    94:ad:c4:7f:34:f9:45:7e:cd:2a:1d:0f:eb:fd:2c:
                    9f:7c:58:86:1a:20:63:03:d6:97:94:9a:a8:7b:52:
                    66:ad:88:6c:6c:70:ad:58:d8:5d:b7:6b:32:83:77:
                    41:f1:88:f4:35:27:3d:b7:4a:3d:18:72:80:80:49:
                    16:67:dc:01:81:41:7e:3f:32:d2:93:f6:89:1e:b4:
                    02:ac:c9:5d:71:db:a9:d1:0e:5a:03:46:32:d9:a0:
                    2a:4a:68:60:d0:5c:42:13:42:bb:4c:18:a9:e6:c2:
                    ce:b3:ed:c3:44:cc:85:be:e0:89:ea:c3:d1:76:a1:
                    9f:43:8f:01:89:d6:53:c0:21:8a:d2:85:d8:bc:c0:
                    5a:e8:a8:14:f5:e9:9a:56:61:5a:75:7e:d9:79:d3:
                    45:ca:81:1a:f5:a9:10:1c:ab:9e:59:e5:5c:6b:79:
                    9a:b6:e0:59:ab:43:4e:85:c8:2f:9a:72:69:e6:b4:
                    e7:23:ff:ce:aa:d0:b8:87:eb:0a:a8:91:a0:1a:62:
                    cf:03:2b:ab:64:ad:6d:fb:22:99:e3:ce:8f:c4:b8:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:36:A4:AD:3D:96:1A:FC:0F:AB:72:6D:6E:DD:17:6D:14:29:D3:2C
            X509v3 Authority Key Identifier:
                keyid:6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:fb:4d:8b:ea:7e:c0:bf:68:a6:0f:2e:4f:f1:e8:56:45:
         6f:e4:b4:98:c9:73:be:9e:e1:6a:84:25:3a:bc:41:cb:54:00:
         28:f1:f5:e9:e5:2f:3e:77:4d:e5:da:d8:f3:f0:27:75:fa:ee:
         40:e7:aa:22:8d:8f:ee:04:21:43:39:cd:57:c0:10:30:b2:c6:
         26:2c:5e:34:95:6e:da:9f:c9:b1:a8:24:07:18:5b:6a:e1:94:
         02:7d:18:91:76:33:14:9b:a4:9a:b1:9e:d4:2f:d9:95:de:9c:
         b0:0b:99:d5:bb:a1:eb:a0:29:f3:47:e0:2d:1e:de:86:bf:7c:
         e4:0b:07:3b:e7:1c:e8:fe:05:72:76:78:db:4c:a1:83:e5:25:
         42:a0:55:73:5c:e2:fe:28:8c:10:16:13:0f:fa:46:ee:13:04:
         04:59:7c:6c:05:dd:c2:3a:54:72:11:30:f2:66:e5:61:74:5e:
         cb:ab:3c:22:3c:ba:08:56:f4:9d:e1:e0:94:e1:eb:12:a6:b8:
         db:12:4e:6c:5a:6a:d9:a0:1b:19:bc:90:da:85:95:48:a6:16:
         7a:12:dd:4b:30:32:50:db:a4:59:a0:86:2f:a9:3a:39:95:50:
         9a:07:02:a6:39:2c:3b:15:0c:14:cb:ec:7f:b1:b0:74:4c:e0:
         1a:1a:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:52:15 2024 by rpki-client on console-fra.rpki-client.org