Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File:                     2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier:          Sfw6GJKSrNgGW6V3QFVjJigiEQwMU7QlkrqvI3Vnt70=
Subject key identifier:   44:D8:55:DE:D2:CA:AE:C7:1D:D0:5E:FA:A0:49:09:DE:CC:FB:8F:D9
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer:       /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial:       018F49EAEE082C8292EFA5FE1C3755FCCB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number:          0BCF
Signing time:             Sun 05 May 2024 18:01:24 +0000
Manifest this update:     Sun 05 May 2024 18:01:24 +0000
Manifest next update:     Mon 06 May 2024 18:01:24 +0000
Files and hashes:         1: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: c8uEWLG2tDB+GjI7ZYz+ABpyRq7ErXFaYXNEZY95gak=)
                          2: NXaOFjXYkWQ80r-3Jg9gst32sRc.roa (hash: 2AaTRAopZxBnmsf45eDDNl0cqCYytfwWlR327OuPmMg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:ea:ee:08:2c:82:92:ef:a5:fe:1c:37:55:fc:cb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
        Validity
            Not Before: May  5 18:01:24 2024 GMT
            Not After : May  6 18:01:24 2024 GMT
        Subject: CN=44d855ded2caaec71dd05efaa04909deccfb8fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:c6:ea:0a:43:a9:36:a9:ba:85:d7:42:0a:
                    7a:5c:b4:d3:5d:4c:68:08:b7:d6:45:d6:97:6e:b6:
                    53:89:5a:47:ca:14:b1:bd:de:33:fc:15:05:2e:a9:
                    25:80:24:ca:57:48:91:b2:d5:75:a5:28:3f:d6:10:
                    5d:3c:41:f3:1f:e7:21:92:ec:78:fa:10:df:89:f6:
                    0f:a4:43:4f:0c:28:f1:31:3f:e2:f1:25:88:c9:83:
                    70:13:4d:19:0d:8c:c0:3a:48:f0:d8:0c:5e:3b:98:
                    54:a2:ed:d0:d8:75:91:6d:0c:af:2e:21:c0:71:8e:
                    33:3b:34:c4:e6:9b:08:a1:c7:a8:4b:79:dd:57:f2:
                    6e:98:4a:b3:2d:9d:d8:6d:66:49:6b:00:2a:1d:89:
                    f1:cf:ec:d7:16:15:78:05:54:24:10:3c:e0:51:8b:
                    be:42:66:5f:10:25:90:80:eb:2f:cb:9f:41:88:8b:
                    22:3e:f8:b2:db:ba:9e:2f:da:0e:2b:74:8a:3e:ab:
                    57:d5:f9:07:ba:d0:4b:c2:13:9e:f6:2a:01:46:28:
                    e8:a2:6e:89:9b:1e:59:eb:70:8e:48:86:41:87:52:
                    18:ab:ef:de:0e:5d:08:4f:7b:da:86:8e:74:4c:8d:
                    96:dd:78:f3:bb:0d:26:5d:9a:c8:76:ef:70:be:32:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D8:55:DE:D2:CA:AE:C7:1D:D0:5E:FA:A0:49:09:DE:CC:FB:8F:D9
            X509v3 Authority Key Identifier:
                keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:c6:f3:56:a0:b4:db:c9:07:8a:a3:40:f6:9b:49:1d:4d:
         89:d6:e8:3f:c5:18:33:50:62:da:ef:5e:53:af:7c:9e:3a:83:
         19:97:4b:a4:02:d5:7f:ed:99:da:b3:98:9f:85:79:11:2e:df:
         59:1b:d1:b8:ff:dd:80:5f:0f:22:d3:fe:93:59:87:e2:47:75:
         a8:34:a3:15:f8:d5:77:fa:bf:94:a2:cc:78:fa:61:eb:22:a9:
         4e:30:7e:2a:61:32:15:31:38:8d:49:a9:28:7c:fb:0e:87:3f:
         6c:7a:89:e2:99:6a:c0:9a:00:f8:2c:88:7f:a8:92:a8:16:ac:
         e3:b0:ec:19:5d:b1:e4:fa:75:e1:b0:4e:63:51:c2:67:38:cc:
         04:82:bd:47:eb:40:7d:dd:a8:94:de:b3:b5:fe:07:3c:98:f2:
         21:af:ca:28:de:98:e8:28:eb:fd:b7:52:26:4c:ed:e8:a8:e0:
         2a:a8:11:1c:08:42:19:46:4c:2c:dc:d4:bc:70:96:2d:78:9c:
         e0:92:86:b6:78:09:f9:66:ae:ca:08:3d:82:be:fe:33:35:20:
         9b:14:b4:67:60:f0:82:18:f0:32:42:45:28:91:6e:d4:7d:10:
         ae:9c:7d:6c:ed:74:0f:74:db:70:e8:c1:77:bc:5f:4d:04:53:
         b2:f9:cf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:14:37 2024 by rpki-client on console-ams.rpki-client.org