Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File:                     rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier:          TNg6bfi7EudvNSAc658l+1gFVVLsPWYHgCXh8U27z90=
Subject key identifier:   84:61:CE:D2:5B:06:2B:F6:78:A7:06:4F:41:50:43:75:17:97:C9:FE
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer:       /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial:       018F855A2A6DB3AAB7ED8A4628272B3EC352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number:          1113
Signing time:             Fri 17 May 2024 07:00:29 +0000
Manifest this update:     Fri 17 May 2024 07:00:29 +0000
Manifest next update:     Sat 18 May 2024 07:00:29 +0000
Files and hashes:         1: 0Nd21FLbycmx78NdUehfrieGVPQ.roa (hash: 10CZZgm4EZ9W4TjZxDGmXh2eb3ZS2rzAVekWW6U6GTo=)
                          2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: AUy/ZH+mpnd0fXKQ3N9afmfEYXI7x3rdCsPA5mV1Z6M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5a:2a:6d:b3:aa:b7:ed:8a:46:28:27:2b:3e:c3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Validity
            Not Before: May 17 07:00:29 2024 GMT
            Not After : May 18 07:00:29 2024 GMT
        Subject: CN=8461ced25b062bf678a7064f415043751797c9fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:89:12:b9:8f:1a:0b:c1:f9:7e:ca:0f:f3:
                    df:05:1e:62:53:57:c6:61:ec:49:fb:61:17:2f:e4:
                    d1:63:9a:17:a2:3e:3d:12:69:48:e2:8f:92:ac:5f:
                    bf:7a:c4:6e:80:ba:ec:85:6e:3d:e6:07:5d:ce:25:
                    c9:94:2d:09:db:cf:e1:5e:9d:97:56:c1:36:09:4d:
                    63:d6:fd:05:cc:a5:4c:f3:0e:3b:a4:65:15:e2:36:
                    96:84:86:d9:4c:d2:ee:89:1a:e3:c0:98:16:81:67:
                    f8:8b:f2:82:f1:76:b8:52:2b:e4:6f:81:9c:28:fd:
                    3b:64:ce:30:b1:fc:76:8e:23:a6:77:f6:1f:4c:ab:
                    26:53:fb:b2:65:3d:e1:c7:ea:33:8c:16:ec:90:78:
                    8f:62:5e:57:18:fa:a2:d5:7f:6f:70:37:82:80:47:
                    27:a5:aa:2a:2e:80:66:e3:76:43:28:36:ff:5e:e9:
                    1a:03:ae:08:28:a5:50:ef:56:27:5a:08:7c:89:03:
                    8d:f2:74:38:06:e5:1a:a0:fb:d0:29:9c:5e:4c:0c:
                    ba:f6:44:18:25:b2:5e:8d:42:4d:33:df:50:c7:ed:
                    17:c9:d1:bb:8c:b4:26:cc:71:2f:b3:0f:38:2e:2b:
                    be:c8:0f:8d:28:b2:16:a7:bf:99:31:64:98:c8:cd:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:61:CE:D2:5B:06:2B:F6:78:A7:06:4F:41:50:43:75:17:97:C9:FE
            X509v3 Authority Key Identifier:
                keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4d:16:25:44:92:7e:a9:29:f0:c0:cc:31:76:61:08:c0:16:
         30:e7:3b:64:83:9f:4a:97:6e:f0:99:56:24:3f:59:84:16:aa:
         6c:75:b7:03:0b:0c:49:cd:27:f0:3e:55:df:30:52:77:00:4c:
         8b:a0:38:fe:9e:a2:46:42:66:1d:7f:dc:32:26:dc:f9:7a:fd:
         eb:2b:70:77:9f:92:ee:13:de:10:c9:07:ac:fa:02:8c:53:cc:
         b7:75:b8:af:60:6c:55:98:c6:33:0f:60:70:0f:72:71:4b:ba:
         85:01:fd:41:ed:80:81:cb:72:e6:91:81:61:72:17:77:94:9b:
         15:33:b0:b9:fa:12:f4:ba:a5:95:0a:a5:5c:6f:5b:30:7b:5e:
         1f:ae:54:78:fa:63:17:82:42:6f:b9:cc:2f:7f:b3:6e:2c:79:
         be:ba:da:64:22:22:51:fc:34:f2:8e:39:27:14:2b:1c:c2:d0:
         fd:34:79:a5:a5:6e:05:e2:38:35:b7:40:de:af:bc:2f:e4:ae:
         bb:77:1d:b1:ba:72:fc:9b:e4:dc:6f:fb:52:2c:d8:cd:b1:2f:
         64:46:30:aa:89:ca:52:09:cd:99:29:35:46:66:8b:36:f0:0d:
         22:a3:7e:de:ad:82:49:cc:22:92:c0:5f:40:22:26:c9:d9:6e:
         28:a0:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:32:59 2024 by rpki-client on console-fra.rpki-client.org