Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File:                     am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier:          I2Gzag6SCzbrtCpTzhFrXgZLk7HwsFIy8qXR0/mc/zA=
Subject key identifier:   10:06:2E:BF:5C:89:22:D0:1F:D6:E5:26:9C:6C:B8:40:2B:3C:6C:06
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer:       /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial:       018F87B609FE6BC24B340F9EB6F5F48A6C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number:          04DB
Signing time:             Fri 17 May 2024 18:00:05 +0000
Manifest this update:     Fri 17 May 2024 18:00:05 +0000
Manifest next update:     Sat 18 May 2024 18:00:05 +0000
Files and hashes:         1: 1yez8jll16otjuZRO0WWIQhsGIg.roa (hash: F7NG9b0SjTKE1ABmGvuYd0evqCKE/1BZ7b3PaBd2cc8=)
                          2: GAmVA6t-D-FFxXbwPrnr_RENf6Q.roa (hash: XeZwS4x8ksnMz5eJDqtAOrLJUVJVEr2NJQUwGoWnHNY=)
                          3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: ce2ok8l9CLkLqgTw2WJ1OLvRdmdXXro9AKQsfV9e+iw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:09:fe:6b:c2:4b:34:0f:9e:b6:f5:f4:8a:6c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
        Validity
            Not Before: May 17 18:00:05 2024 GMT
            Not After : May 18 18:00:05 2024 GMT
        Subject: CN=10062ebf5c8922d01fd6e5269c6cb8402b3c6c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:b0:ea:54:00:a4:25:6b:0b:4d:bf:6d:ff:
                    bc:15:57:99:f7:82:e1:b9:7a:b4:4a:2b:86:ca:4c:
                    ca:51:d7:4f:ad:46:d6:bb:cd:87:7f:86:c8:c7:56:
                    14:c6:fd:3f:aa:12:a0:cb:9e:fb:49:8f:c0:8d:90:
                    62:46:d7:54:7d:6b:9e:f5:39:5d:ee:72:b5:d7:cb:
                    7e:5e:f2:70:b1:32:1a:93:cd:1c:69:e4:e2:78:92:
                    0a:80:e4:a0:29:1b:de:aa:5d:70:b0:30:b0:2e:9d:
                    19:af:73:8c:1f:64:27:af:fc:85:43:4c:ac:72:d1:
                    cc:7b:4c:70:36:49:78:fc:92:32:79:4c:8b:05:e5:
                    02:7c:0d:4e:ff:7b:1c:a1:2e:73:b4:01:52:c3:66:
                    0d:52:4e:07:65:82:2c:9f:2a:27:b9:49:13:9a:63:
                    f3:aa:25:ae:73:59:72:e5:ae:98:1c:9a:cd:e7:9f:
                    03:25:1e:72:4f:2b:56:73:cb:19:32:7a:9b:3c:9f:
                    17:e3:89:56:1a:15:6a:12:4d:f6:14:0a:45:5b:aa:
                    26:27:e0:42:51:b7:70:43:6f:bb:05:6f:08:cb:92:
                    8f:6d:42:2b:2e:6b:73:25:ec:7b:21:da:a1:77:46:
                    a9:75:3a:3c:f3:76:ec:fb:d4:99:27:28:f7:8d:e3:
                    94:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:06:2E:BF:5C:89:22:D0:1F:D6:E5:26:9C:6C:B8:40:2B:3C:6C:06
            X509v3 Authority Key Identifier:
                keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2e:93:69:b9:04:1a:c0:6b:d8:e2:55:97:ab:0f:5c:19:e6:
         7b:2c:40:e4:64:c8:b4:07:7c:c2:9b:38:01:30:85:0e:f2:ad:
         20:af:ec:1c:13:5a:aa:c9:06:94:bd:4d:a4:82:d0:21:f0:d0:
         ed:4e:06:47:96:ae:78:ac:e4:82:20:58:41:d0:28:c4:f0:53:
         2e:8b:61:0c:69:c9:0b:ff:b2:76:d7:aa:1c:59:9a:50:8c:e2:
         89:b5:32:bc:23:d1:e5:9b:f7:b1:be:d2:15:19:1d:ba:bc:fd:
         ff:21:33:46:5f:7a:3a:c8:62:46:05:33:1e:f9:2e:40:8c:c7:
         72:6b:b0:5e:d4:ab:99:f0:fd:e1:bc:ea:42:b2:78:e9:94:db:
         77:d5:33:d8:31:c7:0e:cd:21:71:ea:15:99:ac:3b:d1:54:52:
         27:37:a3:e6:e5:2d:35:73:b7:dd:3c:b0:b6:b7:8f:4c:b9:bb:
         ae:b5:e2:96:0e:ff:79:61:b2:db:78:5f:91:e8:42:79:d1:ef:
         5f:e5:ab:58:02:8b:36:f9:83:54:24:9e:9a:94:a0:26:98:77:
         32:8d:ee:84:03:f5:66:4e:21:ba:49:f0:5a:11:68:e5:ee:a5:
         23:54:5e:16:c0:0c:d4:95:73:44:d0:f9:86:bf:8d:6c:76:c9:
         64:1b:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:16 2024 by rpki-client on console-fra.rpki-client.org