Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
File:                     _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json)
Hash identifier:          J/KB6QY05tScLrKB+k85mBGXrMX9C6nJDSgfNcXRMjc=
Subject key identifier:   2B:DF:E0:4C:94:65:3A:CB:EF:C3:71:EF:7D:C0:49:BF:9F:82:B4:D3
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Certificate issuer:       /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial:       018F88241FA76E236B808B6A7675A156E900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
Manifest number:          065C
Signing time:             Fri 17 May 2024 20:00:19 +0000
Manifest this update:     Fri 17 May 2024 20:00:19 +0000
Manifest next update:     Sat 18 May 2024 20:00:19 +0000
Files and hashes:         1: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: wb8Fte1jV7iB4idQlaifvsNrR8gqPrLrcJL/zpYp6Sg=)
                          2: e4SSucYbzifgFfCqaUB7YzHLqqE.roa (hash: Ve9DmYQxUlLm4M2yveWtwwnFRafiW0F21FePhYBLWxU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:1f:a7:6e:23:6b:80:8b:6a:76:75:a1:56:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
        Validity
            Not Before: May 17 20:00:19 2024 GMT
            Not After : May 18 20:00:19 2024 GMT
        Subject: CN=2bdfe04c94653acbefc371ef7dc049bf9f82b4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:08:55:4e:a4:f5:e7:d4:f7:be:a8:ad:93:10:
                    cb:12:e4:58:76:93:7d:8d:51:de:b8:44:a8:de:c1:
                    0a:79:cf:44:2a:2d:7f:74:32:80:90:8e:cf:dc:33:
                    15:f7:a6:38:84:c5:c7:12:26:6e:28:df:26:ea:d9:
                    41:54:13:0b:79:cf:fc:fa:c4:62:6c:26:0f:49:7e:
                    c2:16:a3:cc:0d:f0:66:f7:1a:a2:40:b6:a0:40:89:
                    35:36:18:1b:40:40:1c:1f:07:b3:58:f8:8e:0f:63:
                    63:6d:a1:47:d8:d1:2d:4e:f2:82:db:fc:de:bb:1f:
                    b5:92:a5:20:c0:10:b3:1c:c9:2f:cd:d9:9d:1f:45:
                    e4:f4:a9:99:66:0a:a6:80:2f:f4:04:07:10:41:90:
                    8b:3e:20:46:31:8c:21:af:a0:e5:1f:7e:e3:0a:80:
                    f4:7f:06:a9:0d:7b:37:91:0e:a0:d2:19:53:84:24:
                    79:91:26:18:73:0f:20:c8:85:40:6b:5f:35:66:5b:
                    51:6b:c1:8a:fa:5e:60:74:a9:be:42:50:e2:6b:c5:
                    3f:b9:ae:e1:f4:77:2b:c5:fb:79:0c:0f:f0:4f:30:
                    de:f4:54:40:93:29:65:f8:57:49:13:8f:63:03:6a:
                    ac:12:e8:28:b1:0e:23:d5:b2:2c:cf:c9:f3:34:d0:
                    5f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:E0:4C:94:65:3A:CB:EF:C3:71:EF:7D:C0:49:BF:9F:82:B4:D3
            X509v3 Authority Key Identifier:
                keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:17:18:10:ed:ad:ac:b7:b1:ba:a8:06:14:b0:32:2e:ec:
         8c:9d:da:74:3a:e2:f2:bd:a5:cd:f5:d8:67:d4:a7:51:21:39:
         e5:36:c8:18:24:04:6e:82:3f:d6:6c:17:62:10:36:07:61:e5:
         d4:27:5d:95:49:16:06:fe:ef:14:69:0e:27:32:33:51:ba:5f:
         f3:d9:88:b9:f5:83:a3:aa:8c:57:bd:92:3e:c4:32:52:7a:dc:
         eb:87:03:31:4e:0d:67:7f:5e:b8:5d:f0:42:5f:de:8b:3e:93:
         2d:b6:aa:bd:da:e0:54:62:17:3a:16:4b:3a:47:57:49:37:bd:
         aa:65:2e:34:43:a0:f7:63:1a:3a:75:32:5a:f5:da:85:d9:f6:
         3d:48:d7:0a:e0:d8:9a:d7:2b:0b:92:53:bd:3f:be:08:52:cb:
         9c:94:22:51:cd:4a:23:5f:19:b6:b7:45:57:cb:5d:31:a8:29:
         d4:96:f6:b8:0c:1e:c7:ac:fa:7b:37:89:cd:e4:c0:ef:75:6b:
         51:67:61:48:c8:ce:db:83:b3:9e:6c:66:0e:5f:72:82:0d:21:
         80:a6:41:fa:e3:0e:dd:ba:d3:c1:fb:41:30:11:ce:a2:10:08:
         09:4a:ac:e0:76:83:de:69:26:89:3f:9e:85:4f:2d:3d:d5:c1:
         6a:2a:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:41:52 2024 by rpki-client on console-ams.rpki-client.org