Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          jc7p7sDvPSeuqxxn+mQHOMLlisRTfpIl5zL6EMYBFDg=
Subject key identifier:   94:DE:46:8A:D1:7B:5F:AE:87:3D:CE:B8:5A:72:0B:07:A3:92:CD:CD
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       018F9202FD1C092976F38A5E1B3726B47A25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          0427
Signing time:             Sun 19 May 2024 18:00:20 +0000
Manifest this update:     Sun 19 May 2024 18:00:20 +0000
Manifest next update:     Mon 20 May 2024 18:00:20 +0000
Files and hashes:         1: 5tIRJUWhSgC6K3fbONY0TlHh_Ug.roa (hash: exZXlC5tp5Ncby035mIkwRxEgXIOaUuOizKj1xfLuAE=)
                          2: 7pWnyk23Vjj4NNEiCc-cqztR34E.roa (hash: P3qdoryeXznjt6QZyLx/b5He5ZQmSpjbDDpCF4trDtc=)
                          3: KtGUu0rYF8em9PknAOPnK0Fun6g.roa (hash: M449wwFe7Tth3ql5CCaj6Yv+Glfa/g2X89sKhsWedPk=)
                          4: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: 2OwkIUa72dmKPK+vHiG0v3jTJBR59YUM9GumvdnQLbA=)
                          5: jwB2o6JG9EAG_mVAX3jktwB3VcA.roa (hash: R2191C89qJTizGI4N92Dsl4OLlbzKd3P86QUnxi1E+w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:02:fd:1c:09:29:76:f3:8a:5e:1b:37:26:b4:7a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: May 19 18:00:20 2024 GMT
            Not After : May 20 18:00:20 2024 GMT
        Subject: CN=94de468ad17b5fae873dceb85a720b07a392cdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:90:b7:16:a0:a6:0e:52:2a:49:73:ed:f6:
                    ee:78:5c:52:6f:c7:7c:8b:c4:05:f3:f7:d2:c5:77:
                    a7:bd:9c:2a:e0:e2:2f:9f:30:85:e9:02:c4:0e:af:
                    01:4d:53:be:d9:db:6d:4f:1d:89:36:e2:09:85:48:
                    c9:fb:fb:43:87:9d:c3:a2:5a:3b:20:e8:24:24:95:
                    87:dd:be:ff:ca:67:a9:dc:1b:85:7d:a2:54:15:f1:
                    d8:6a:ef:9c:d7:8d:62:52:ad:e3:c4:da:02:22:f0:
                    80:be:e6:5d:a5:ea:56:98:1d:3b:1c:5c:f5:cc:63:
                    55:5f:c3:e9:58:55:4f:c9:84:02:54:a3:45:ce:40:
                    e7:cc:72:2b:56:7a:80:32:ba:8c:89:7f:72:c3:ad:
                    54:a1:df:a7:78:47:5c:1c:6c:b7:4f:a3:56:70:7a:
                    ee:e6:15:e6:dc:92:22:40:c5:17:10:0f:39:35:bf:
                    df:d9:17:28:c5:da:0e:8b:20:41:a2:60:83:d6:fe:
                    f4:98:2e:12:60:f1:97:18:66:25:33:fc:2e:fe:7f:
                    94:aa:ed:19:da:36:96:de:65:51:61:ff:5f:a9:00:
                    5e:d6:3e:83:9c:87:ff:35:99:23:e1:2f:7e:df:1d:
                    b5:f2:3c:c1:63:c6:c1:16:0e:8e:ec:e5:fa:3d:0f:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DE:46:8A:D1:7B:5F:AE:87:3D:CE:B8:5A:72:0B:07:A3:92:CD:CD
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:71:c8:09:58:2a:65:4a:63:9d:4c:01:19:f5:4f:d1:02:dc:
         a3:1d:d4:2c:6a:a3:a4:b9:46:9b:67:1c:4b:2a:a8:bc:d3:ec:
         11:a3:f4:56:c0:f7:65:b6:1e:35:1c:1e:2b:a1:7f:4b:2c:a3:
         d4:44:5b:0a:49:7a:1d:f5:25:9e:f2:10:b2:26:37:9c:3e:f1:
         9c:d1:25:3c:50:18:a7:2a:02:58:96:f2:2d:78:f4:b9:25:cd:
         a6:cf:10:61:6c:51:29:5a:c5:7e:85:b6:22:0f:15:b6:57:b9:
         df:6c:05:9c:4a:2b:19:12:27:45:12:63:82:a4:67:46:85:1f:
         24:1e:60:e0:c6:46:20:6e:ce:55:0d:43:70:49:b3:37:37:6a:
         ee:9d:f9:62:78:eb:4a:ab:98:6e:f0:b1:a1:72:7d:80:71:d1:
         d2:4a:d4:e6:cb:3f:a1:25:8e:47:c2:21:51:2f:d1:7e:79:bd:
         2c:4e:ef:f3:01:5d:28:05:13:a5:dd:ea:3e:ef:fc:c2:11:2b:
         ea:64:95:ad:6f:57:d0:5b:7d:af:e5:06:08:26:55:3a:08:ab:
         10:82:86:21:8b:9f:aa:53:3b:fc:bf:fe:8f:8b:a0:fd:36:2d:
         44:31:39:dd:7b:5d:c3:f4:65:17:d0:ce:75:7b:41:c8:6b:2a:
         c5:15:63:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:21:55 2024 by rpki-client on console-fra.rpki-client.org