Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File:                     c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier:          hjBj6cB88FE/MrNznJcoyUI0dpwxjWAmQZpfEXEO0fQ=
Subject key identifier:   DC:62:E7:B6:FD:AD:4E:62:19:17:19:77:59:41:55:31:AD:CA:BB:71
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer:       /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial:       018F8749ACAA3EA47090CC9488396C5EB978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number:          0F94
Signing time:             Fri 17 May 2024 16:01:43 +0000
Manifest this update:     Fri 17 May 2024 16:01:43 +0000
Manifest next update:     Sat 18 May 2024 16:01:43 +0000
Files and hashes:         1: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: Ld8W1gFyB5bI8QmYHF4hbayuLl76QzsnA5xHpWpSM0E=)
                          2: sTkATklgSOu2C1kf9Hshk6E5hh0.roa (hash: RRJHljOw31v6UbTEAdu+iK+txwpEvxNKHTzo8GZ5KXw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ac:aa:3e:a4:70:90:cc:94:88:39:6c:5e:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
        Validity
            Not Before: May 17 16:01:43 2024 GMT
            Not After : May 18 16:01:43 2024 GMT
        Subject: CN=dc62e7b6fdad4e621917197759415531adcabb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:70:82:ee:37:37:94:f5:05:1d:e6:50:47:
                    76:53:b2:50:19:a9:ac:71:52:49:b8:bb:b5:72:d7:
                    e2:47:97:82:42:5d:b8:bb:5b:f9:a3:3c:a0:70:75:
                    6d:0f:25:69:41:77:b9:2b:fc:a3:09:27:86:a4:ff:
                    11:1c:3b:ff:eb:e2:a4:86:57:be:34:78:9e:c4:dd:
                    46:73:37:3a:49:5b:35:9a:61:8d:bb:bc:f2:b1:5a:
                    95:97:9d:af:a7:c1:52:36:e3:8a:7c:9e:a9:8a:71:
                    ce:58:a7:eb:b7:be:60:39:e3:3b:6a:7a:72:c3:86:
                    32:27:63:42:72:c7:97:3e:24:6b:e7:81:b8:32:ae:
                    5c:0a:29:14:e0:c4:1b:0b:19:35:33:d7:20:28:5d:
                    25:42:ad:a4:97:1e:7c:ed:91:df:bd:fc:61:78:1f:
                    84:70:cc:b9:12:76:92:ed:f6:f4:81:93:fa:9c:fa:
                    95:30:5c:d2:ac:bd:d4:c3:35:fa:fc:f4:ce:45:e7:
                    16:dc:b7:b9:be:37:9a:f8:84:b8:ff:ab:cd:a4:26:
                    25:40:fb:ab:12:fa:54:a7:87:41:e5:d8:65:21:16:
                    63:5d:b5:0e:8e:db:43:b7:46:5c:fa:e5:2e:1a:94:
                    ed:46:3e:ee:d8:c7:3f:df:cd:e9:c5:2f:f0:98:5e:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:62:E7:B6:FD:AD:4E:62:19:17:19:77:59:41:55:31:AD:CA:BB:71
            X509v3 Authority Key Identifier:
                keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ad:78:7e:9a:b2:4c:6a:bf:0b:3f:82:6f:cb:bc:6e:88:85:
         ab:f4:06:fc:6f:49:de:7c:87:81:6c:56:e5:66:a4:58:b1:5d:
         a0:c6:a1:35:4c:fc:52:72:b1:94:86:c8:74:32:34:10:56:00:
         0e:e2:b3:ce:68:ff:1e:b1:9a:6b:36:11:9e:33:c1:af:e2:6c:
         e8:3d:de:b0:3e:a0:c6:d4:5d:45:ed:1b:f8:3f:aa:3b:cb:59:
         cd:f7:b9:05:17:cc:50:80:50:db:66:aa:16:d2:13:b1:65:43:
         2e:f0:ec:ba:36:2f:35:6e:a7:9f:fe:03:17:bc:81:96:b2:9e:
         ea:b3:22:92:e0:92:bf:ca:03:82:d4:e6:f3:69:e3:7a:9b:98:
         34:68:48:b4:15:7f:5e:8c:76:6b:90:93:50:f6:b3:33:17:8d:
         ad:84:f8:f9:90:85:51:90:2c:05:2b:76:d3:61:da:d8:d5:67:
         7a:04:74:87:d8:34:0d:fa:da:18:4e:d3:c2:a9:f6:da:68:fc:
         bd:fc:8c:cf:5b:83:1a:07:93:e8:23:d1:94:1d:c3:ac:79:45:
         de:d6:55:7a:81:dd:21:6f:df:0b:35:aa:50:91:95:c8:67:d1:
         b5:59:9c:b9:ab:3a:34:3c:ea:22:58:cb:e5:db:a3:58:43:07:
         c0:2e:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:55:23 2024 by rpki-client on console-ams.rpki-client.org