Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
File:                     Lw47dY4ki4AfwfMNNF1giwevG_Y.mft (raw, json)
Hash identifier:          KkKC/hEc5DC/K42RL44Rz+rt4ecbeTVNsBtweOfLMl0=
Subject key identifier:   47:16:F7:1C:51:A2:B6:BB:D4:96:A6:A6:AE:9C:9B:37:DA:44:96:2D
Authority key identifier: 2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
Certificate issuer:       /CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
Certificate serial:       01904FE9B922C7A409DFF1569FEF17C541D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
Manifest number:          0205
Signing time:             Tue 25 Jun 2024 15:00:35 +0000
Manifest this update:     Tue 25 Jun 2024 15:00:35 +0000
Manifest next update:     Wed 26 Jun 2024 15:00:35 +0000
Files and hashes:         1: Lw47dY4ki4AfwfMNNF1giwevG_Y.crl (hash: qtbX9tkhGrli+4gdi2niYu0zAHAhdnbBokGjMumi4NM=)
                          2: NWrVvTh6es5CiCcwq6hmKNdO6pg.roa (hash: zYKRI9uHL9uxlwMy6E2d6JOZfYlb+GoB6MHJE3xgOLE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:e9:b9:22:c7:a4:09:df:f1:56:9f:ef:17:c5:41:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
        Validity
            Not Before: Jun 25 15:00:35 2024 GMT
            Not After : Jun 26 15:00:35 2024 GMT
        Subject: CN=4716f71c51a2b6bbd496a6a6ae9c9b37da44962d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:1b:79:75:05:95:40:89:69:89:6a:35:ae:
                    cb:75:d7:69:4b:0a:3e:2a:0e:e7:03:56:d2:b1:1b:
                    7e:40:b3:91:d9:4d:0c:8c:7b:19:31:3b:c8:79:ba:
                    97:28:d2:92:e5:92:dd:bd:fd:41:fd:c7:35:da:45:
                    7e:8f:05:fc:91:6c:8e:38:57:a6:91:d3:00:00:a4:
                    d9:d8:79:4e:da:bb:cf:02:22:a7:41:19:1c:5e:82:
                    3e:23:23:39:2d:30:2a:cb:11:a1:61:ca:c7:e9:e7:
                    e8:9a:56:f8:c5:51:6b:98:f2:af:93:00:39:5e:57:
                    d8:42:a5:26:51:b8:3f:3a:b8:7d:cf:93:93:1e:66:
                    a0:a1:95:b8:1b:bb:ee:84:0d:cb:09:11:e7:d1:5f:
                    2d:73:51:d6:2f:4a:6a:5f:4a:db:ff:50:6e:89:7e:
                    7b:8e:75:ff:a2:27:d1:4c:13:06:eb:ae:94:32:8b:
                    c8:bc:e6:fd:6f:0c:9d:6f:b0:59:08:60:45:b7:4a:
                    a7:48:57:ad:a6:c0:58:62:20:a0:26:3c:e4:e5:b7:
                    fd:5e:33:95:4c:48:6f:3d:e4:1b:dc:b6:38:b1:96:
                    19:64:a1:9b:ed:71:25:8d:5a:c9:9c:fe:f0:f1:2e:
                    e6:d6:d2:65:71:26:a6:6d:39:8f:b9:21:b9:63:01:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:F7:1C:51:A2:B6:BB:D4:96:A6:A6:AE:9C:9B:37:DA:44:96:2D
            X509v3 Authority Key Identifier:
                keyid:2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:2c:46:0d:7d:de:9b:62:75:22:1d:23:c4:71:89:b6:26:
         63:6b:50:80:0f:49:bf:3f:80:a7:0d:12:55:dc:44:30:46:29:
         4d:74:fa:5e:b1:5b:36:24:44:71:54:93:2d:93:f4:14:86:f5:
         01:10:bf:47:84:fd:e7:7b:65:68:45:6c:6c:10:a1:ba:45:a1:
         8c:d4:90:f8:70:98:3e:fc:67:76:0e:80:36:23:e3:14:7a:2f:
         2b:14:3e:f9:bf:68:bc:d2:38:42:2e:53:52:d1:48:b7:75:e2:
         1b:9c:93:54:87:44:c2:87:0a:be:fa:59:40:0f:44:c8:7f:ea:
         86:45:ae:84:c3:da:95:20:58:20:24:56:8a:e3:45:f2:d2:04:
         2a:86:39:36:c1:1a:96:bd:29:22:47:8b:48:a4:59:fe:3b:0e:
         d8:01:65:03:ad:d7:7c:d4:cb:f3:1a:ab:fd:a6:9a:4d:40:3d:
         bf:58:e3:d8:da:04:e3:a6:73:aa:00:7d:03:ec:b8:32:7e:9d:
         ab:e8:3f:94:73:3d:46:dc:35:ad:9b:48:f9:6e:67:b8:39:98:
         58:82:6c:a9:cd:02:57:ba:8d:c9:3d:18:93:06:08:98:bd:18:
         eb:47:05:81:1f:4f:30:ea:61:6a:b9:84:dd:38:86:7d:34:92:
         af:e3:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 00:09:07 2024 by rpki-client on console-ams.rpki-client.org