Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File:                     fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier:          PVyR9eUD6J2VVn3cYEC7enBnxRH94O8cIhgy7jp91ww=
Subject key identifier:   BC:B6:16:B6:87:64:ED:BA:C0:EA:E5:26:DA:2E:E0:34:CC:BC:41:AB
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer:       /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial:       018FB3B51B70F86C9BC36DED15C2DBF50FDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number:          03EE
Signing time:             Sun 26 May 2024 07:02:21 +0000
Manifest this update:     Sun 26 May 2024 07:02:21 +0000
Manifest next update:     Mon 27 May 2024 07:02:21 +0000
Files and hashes:         1: TaqicLu5vVv-vbVrNWOeKL3Wj9U.roa (hash: mljfwLp1fjqfzvI+bmFrmdx6AQzg63a6Dhz9eHYDeqw=)
                          2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: z24Ft6rFGa/rpubJzQSE9Yg1Bbm6zvGziGWc3TRZLz8=)
                          3: o4ajNcsXNuds7whWbEEiB8N48Sg.roa (hash: VhGoFDXA8q9WuqYcjRwzGIiXmDseGSRa3R378JsK3+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b5:1b:70:f8:6c:9b:c3:6d:ed:15:c2:db:f5:0f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
        Validity
            Not Before: May 26 07:02:21 2024 GMT
            Not After : May 27 07:02:21 2024 GMT
        Subject: CN=bcb616b68764edbac0eae526da2ee034ccbc41ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:f2:71:a7:16:77:4b:71:32:c6:1f:9c:0d:
                    2e:6e:9e:28:08:e2:ab:e8:39:1d:a7:3a:72:b1:32:
                    4f:12:26:cb:a0:b1:62:54:f1:33:84:77:da:d3:65:
                    43:fd:70:83:e4:17:57:f3:34:22:53:90:3a:9c:ea:
                    06:36:13:f1:13:02:36:e9:d9:6f:25:e1:21:e9:74:
                    6e:35:0a:e5:aa:29:44:bb:50:6c:23:55:40:cb:96:
                    8d:ba:18:a7:7d:2e:b2:a2:9b:f4:f2:11:0a:c4:3a:
                    55:68:39:a4:a7:cc:40:79:8d:ed:ec:43:b4:83:b6:
                    a3:c0:b5:16:ac:17:5d:cf:21:05:1e:2d:20:82:1b:
                    88:7e:c3:b7:30:1b:3a:77:78:16:ba:e2:c6:04:0f:
                    81:80:02:cf:dd:6f:10:58:e0:1f:fe:e5:0e:1a:f7:
                    0d:23:58:da:af:46:c3:f1:1e:1b:eb:83:33:32:84:
                    99:16:fd:14:7c:71:25:e4:0b:44:c0:4d:2c:22:f1:
                    9a:0c:b2:d0:1a:dc:57:74:ec:f0:91:f6:7e:20:e5:
                    f3:b0:be:97:8e:3e:61:00:d0:6e:5b:d5:13:da:b2:
                    37:a0:ed:a2:92:ad:ae:42:40:5b:72:54:16:1f:e7:
                    86:f1:cb:74:c1:ba:ce:c5:3e:a7:2e:2c:2b:8d:ad:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B6:16:B6:87:64:ED:BA:C0:EA:E5:26:DA:2E:E0:34:CC:BC:41:AB
            X509v3 Authority Key Identifier:
                keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:2d:ef:7c:9d:18:2e:08:4e:ce:dc:27:be:1f:ad:1b:7e:46:
         ab:55:af:55:ac:88:7c:83:79:f1:45:b4:e9:75:9b:41:9a:68:
         f9:80:e5:d6:40:1a:6a:9a:ab:d5:1b:84:1c:cf:d7:91:d0:b8:
         b7:5c:e5:63:02:66:84:e7:3f:7e:0f:dc:0e:1d:2f:3a:7f:f0:
         36:66:76:b3:98:8d:30:0b:de:ea:29:f4:98:b8:68:47:c9:d0:
         d1:8c:ed:c1:11:1c:f7:3f:79:5c:99:83:18:92:b2:86:4f:18:
         15:d3:90:08:e6:80:44:fa:96:ae:4b:e5:a1:5e:63:21:c9:2a:
         14:92:a4:e9:c8:de:bc:53:d7:79:d5:d5:64:8e:4d:e3:f6:28:
         59:25:ef:2b:98:92:e9:0a:30:d1:ae:23:9f:fd:8d:7c:73:5e:
         ad:de:2b:ae:b7:d7:ea:81:d7:f7:86:c2:f3:67:c8:fa:71:25:
         4e:6f:bc:0b:6d:64:1c:9a:9d:35:f7:48:8c:85:06:a2:2e:d4:
         90:38:66:0a:22:c5:b6:6f:e7:6c:bf:9d:c6:cd:ff:ce:98:ef:
         33:54:4d:52:95:7d:1e:eb:1d:c8:7e:ba:a9:c7:43:d2:83:0f:
         65:f8:56:0c:4e:23:ce:df:d7:63:8d:57:f7:83:d6:64:bd:d6:
         40:10:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 11:47:54 2024 by rpki-client on console-ams.rpki-client.org