Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
File:                     lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json)
Hash identifier:          rSLE9/EcyjxorhwwtbfbCaPnjPwmGYwg+Na/DRgIpAU=
Subject key identifier:   39:3F:2A:4E:59:A8:E1:39:04:47:C0:A1:C5:F2:A5:06:7F:9B:DD:A6
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Certificate issuer:       /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial:       018F885B1A175BEF869A596618D0463CB386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
Manifest number:          066C
Signing time:             Fri 17 May 2024 21:00:22 +0000
Manifest this update:     Fri 17 May 2024 21:00:22 +0000
Manifest next update:     Sat 18 May 2024 21:00:22 +0000
Files and hashes:         1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: iQgxgALg3lM3AbNnXY2DssMhfHg1xkPgdI33w8GdkSg=)
                          2: w5L3U8w9DvYrm3gKtN5L67YpgVk.roa (hash: 8gzrK7a9VY/OBNpk0fQ30Tn+mhFDwqK6C2GbbWrIGOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:1a:17:5b:ef:86:9a:59:66:18:d0:46:3c:b3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
        Validity
            Not Before: May 17 21:00:22 2024 GMT
            Not After : May 18 21:00:22 2024 GMT
        Subject: CN=393f2a4e59a8e1390447c0a1c5f2a5067f9bdda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8d:40:eb:58:de:75:49:95:ca:c7:cd:d7:f0:
                    84:ff:3c:40:12:17:1c:23:a2:cd:b2:c0:59:48:c2:
                    93:ee:64:b9:d1:98:37:e4:3e:26:a9:d3:47:4f:c9:
                    b3:db:5a:f4:62:6a:69:be:66:c2:b6:28:f9:34:ae:
                    85:f3:f3:50:06:c3:db:ab:8f:fe:1c:d4:7a:34:47:
                    12:35:11:55:02:56:60:85:e3:0d:9d:6d:89:8d:ab:
                    be:7c:21:b1:9b:2d:1e:9d:2b:90:50:4f:a2:03:9e:
                    88:6d:f9:78:10:99:a5:40:a1:86:13:1d:23:78:35:
                    ae:cc:b2:d0:92:01:50:b0:a6:09:78:9b:ab:42:ee:
                    86:97:ea:6b:e5:2d:16:18:e2:66:3c:f7:28:cb:dc:
                    f0:bf:c7:34:ee:3f:1a:a8:c5:42:0e:65:e9:ec:66:
                    10:b1:c9:5d:6d:6f:8e:9e:ab:0d:7d:22:2a:f5:ae:
                    34:cb:ae:fc:b5:e2:92:6a:a0:e4:7c:63:1d:e1:2d:
                    01:34:61:5c:52:86:5c:5b:25:c9:a2:06:f4:88:7e:
                    f7:37:58:1a:cd:1e:a6:7c:be:f6:7c:0f:38:73:ff:
                    9c:ba:c6:2b:5e:3a:9b:02:1f:49:88:2b:59:8f:73:
                    d4:82:ed:96:79:cf:b5:d2:06:3f:1f:cb:68:59:57:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3F:2A:4E:59:A8:E1:39:04:47:C0:A1:C5:F2:A5:06:7F:9B:DD:A6
            X509v3 Authority Key Identifier:
                keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d9:b9:23:3c:1a:19:53:87:84:9f:2c:d2:f8:be:59:15:0e:
         df:ca:04:e3:4c:ec:9a:0c:33:be:7f:51:5b:c4:c7:1c:1e:7b:
         6d:6c:bb:60:de:15:91:5b:a6:69:8a:40:17:1d:7c:a7:28:79:
         7b:8a:17:fa:77:37:ca:23:a9:7b:5c:cd:f1:8f:2b:de:1b:38:
         39:2b:2e:7b:40:35:d4:0c:02:1d:a2:3e:fc:48:10:2d:e9:14:
         df:ce:6e:a0:33:d1:7e:d0:cd:d8:ed:27:28:84:73:99:92:9e:
         68:08:65:a6:dd:41:ca:09:89:69:21:7b:d3:86:06:40:af:ea:
         e6:ae:31:33:82:b3:c0:97:84:3e:c4:34:9a:d0:73:ff:cf:d7:
         a8:1c:04:8d:34:a2:8b:44:bc:86:51:f5:d8:40:b0:33:3b:a0:
         59:61:22:29:25:09:b0:87:49:5f:e5:60:a5:e7:bb:df:e1:e3:
         e2:a5:75:43:d2:78:a5:99:e7:3d:d4:f9:62:02:e7:aa:0e:98:
         66:7d:d9:18:8a:bc:71:66:a7:e4:89:c4:44:eb:9a:8e:3b:cd:
         ea:35:04:4f:e9:f9:af:bd:e1:c0:95:23:69:0e:6b:c1:6e:61:
         68:fc:49:2d:de:e7:d1:8f:72:6d:37:fb:da:0e:62:84:d9:08:
         07:4d:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:40:43 2024 by rpki-client on console-ams.rpki-client.org