Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File:                     S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier:          7QbAhwmraDfAYkSaktHrPJ6keA3mkcTEF8j0mSH0M6A=
Subject key identifier:   C0:58:59:B0:3A:1B:54:FA:B5:A3:93:26:97:F4:D6:01:0F:3B:62:D1
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer:       /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial:       018F836C7C56CD55AB4A9E3411FA10A34C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number:          0E96
Signing time:             Thu 16 May 2024 22:01:15 +0000
Manifest this update:     Thu 16 May 2024 22:01:15 +0000
Manifest next update:     Fri 17 May 2024 22:01:15 +0000
Files and hashes:         1: DNscmTrwDjpnXx6Xf24JJXOkjp4.roa (hash: hjSaW37B3KSQyzYjZeXWdvbj3mXfIz+dkkoryhr4ibY=)
                          2: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: TyqrH3CztgnFPh4embQC6vhshXKFQD0xBBx+fiQn13M=)
                          3: gJL2N-lpjfEGy9e3OPLBYnUsoGQ.roa (hash: fDjV06E2/+/Vcn4UGYdhKNzKtDOcDDDtLLUoX40HEDo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6c:7c:56:cd:55:ab:4a:9e:34:11:fa:10:a3:4c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
        Validity
            Not Before: May 16 22:01:15 2024 GMT
            Not After : May 17 22:01:15 2024 GMT
        Subject: CN=c05859b03a1b54fab5a3932697f4d6010f3b62d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:5a:84:bf:96:9d:61:9a:95:43:75:d6:c2:
                    20:aa:7e:e7:36:43:d0:d5:c5:26:b1:f6:e9:6a:9b:
                    2e:cd:c9:1e:d5:1b:13:80:77:5e:46:41:a5:1c:56:
                    6b:47:97:a2:1f:ed:1f:41:da:25:8d:1a:09:cd:26:
                    ae:73:79:50:56:68:9f:2e:00:1e:7c:e3:f7:9f:fe:
                    9d:aa:1e:c0:72:5c:42:97:67:50:44:87:d1:d8:7e:
                    9f:ce:db:4c:d3:4b:e5:7e:c6:87:41:60:9e:42:db:
                    a6:a7:12:3d:94:a7:7c:d9:eb:5c:6c:a1:36:ab:df:
                    d0:26:b2:81:c9:7e:9a:27:19:93:eb:53:44:41:b2:
                    0a:9d:73:6f:f3:fe:19:c9:3a:6c:ae:50:b0:20:0d:
                    68:1a:dd:46:64:5b:4c:e9:fd:a2:97:63:f8:dc:0c:
                    47:b6:4f:0d:b5:ff:0f:b6:47:48:70:38:4c:0d:95:
                    26:1b:d9:1f:62:a1:e6:5d:8f:be:40:79:68:3e:46:
                    9e:ff:bb:65:a7:e9:77:00:3f:f6:45:8b:60:42:f8:
                    15:3d:ac:8f:5d:f7:aa:34:66:b0:c2:cf:b6:13:9c:
                    f1:ae:b8:31:69:83:fa:03:68:f9:b3:cc:a0:01:38:
                    a9:e6:30:94:66:a2:bd:de:bf:19:59:5e:e6:0f:e8:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:59:B0:3A:1B:54:FA:B5:A3:93:26:97:F4:D6:01:0F:3B:62:D1
            X509v3 Authority Key Identifier:
                keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:6f:90:41:a6:88:9f:bf:7b:00:01:18:09:dc:56:16:90:
         99:c8:3d:a4:f9:f2:82:b0:8d:4b:36:e8:7f:af:72:b5:c0:67:
         b6:5f:46:2c:05:ff:11:65:7e:69:81:50:4e:32:01:49:50:99:
         58:1f:97:30:db:60:23:ed:4e:6f:66:63:7d:e3:f5:e1:2a:b2:
         8f:a0:22:18:ff:ac:1e:25:4f:6d:de:34:d0:d5:87:52:58:eb:
         12:8b:a1:be:34:96:ed:d7:43:a5:ab:b7:7c:68:bf:6b:d1:8c:
         60:8d:b8:dd:79:12:9a:59:ea:1f:1c:4f:f2:71:1c:fa:ba:43:
         66:1a:fc:46:72:22:c1:c9:41:2e:9c:4a:98:da:b1:ac:85:1a:
         e6:11:0a:aa:ba:41:ae:e8:da:f8:34:a0:8f:0f:01:44:3f:2f:
         11:f5:d5:7d:aa:e5:8d:01:a7:d5:eb:c6:34:17:47:ab:8e:08:
         b2:5d:cb:03:06:4b:b3:bf:13:79:82:a8:ad:b8:ba:9b:57:05:
         be:e3:3b:76:7b:31:80:b3:03:56:35:0e:c2:8a:6e:53:c7:fe:
         2c:4f:99:ad:c4:b5:48:9b:0b:8b:eb:a5:f4:18:c5:89:54:df:
         28:49:31:64:3f:d7:a7:55:b8:84:e0:f1:02:ac:e5:1f:1b:95:
         12:76:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:59:54 2024 by rpki-client on console-fra.rpki-client.org