Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File:                     rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier:          viCw6toFBPhumiHN9oir3AJYXV+QK98ykBOz0vhYZS4=
Subject key identifier:   D4:64:D0:E8:A3:FE:4E:19:F0:55:CB:9E:73:4A:BF:15:48:59:98:17
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer:       /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial:       018F8F02CF3A29BD1A65AF02D8D0971548BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number:          0BD7
Signing time:             Sun 19 May 2024 04:01:17 +0000
Manifest this update:     Sun 19 May 2024 04:01:17 +0000
Manifest next update:     Mon 20 May 2024 04:01:17 +0000
Files and hashes:         1: Jabrq9hrAJzjVUbkACteaMvNHjg.roa (hash: yRzmXBOSLFJ88Wge2/H1BE0KgpR6yvsJ6fE2M2Zj6T8=)
                          2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: F/+3gYD9k2c7zrWcyJWYrTV9SPiHsbVqScy4D++yc04=)
                          3: w3dSY8E242uK1E5wvfOn6BH0l5I.roa (hash: Fo/irukysXgrD3dDC+3R3PLFRX3CZGWuKFlfdPGZVD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:cf:3a:29:bd:1a:65:af:02:d8:d0:97:15:48:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
        Validity
            Not Before: May 19 04:01:17 2024 GMT
            Not After : May 20 04:01:17 2024 GMT
        Subject: CN=d464d0e8a3fe4e19f055cb9e734abf1548599817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:20:d2:18:19:aa:73:2c:ad:76:a9:5c:fd:
                    83:0b:71:1e:6a:ed:d0:e9:f4:b3:9f:95:58:27:12:
                    fa:c2:ba:88:be:af:46:8d:28:b0:5e:71:21:4c:3f:
                    61:37:1c:25:1b:df:59:dc:f9:3e:40:c3:76:10:c6:
                    7c:37:c7:08:6e:79:9b:af:da:96:97:49:cf:41:75:
                    72:80:16:5f:b0:16:39:e7:c0:5d:a6:6e:e2:bf:3e:
                    4e:82:2d:2a:d2:e7:f7:b8:d6:3b:38:cd:f6:d3:ec:
                    22:a4:78:fb:7b:8e:50:96:b8:c8:75:ca:02:7f:9c:
                    8b:4b:37:d0:37:50:e3:f2:4f:4b:e4:5c:f2:6a:6e:
                    ed:f8:03:4e:c1:ae:c8:87:30:dd:67:7c:90:b4:0b:
                    76:da:8d:cf:c1:7c:84:d3:b6:e2:d3:b6:68:e9:d1:
                    c5:9f:d3:9d:f7:c1:e4:c6:b9:9f:49:f8:3a:14:21:
                    9e:6b:08:15:c2:9a:c4:fe:d5:c1:19:a8:51:c3:af:
                    3f:d9:07:cc:16:24:21:73:fc:cc:2a:2f:04:e4:05:
                    67:fa:3b:cb:47:7a:f0:8c:51:f7:df:1f:b2:17:04:
                    3f:e8:e8:40:bc:d4:96:1d:d2:f2:8d:dd:81:a4:ab:
                    73:8f:b5:ad:23:4d:b9:86:fe:10:a4:d9:23:97:18:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:64:D0:E8:A3:FE:4E:19:F0:55:CB:9E:73:4A:BF:15:48:59:98:17
            X509v3 Authority Key Identifier:
                keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:98:f4:fe:cc:b4:85:36:db:b8:6e:64:b0:a9:4e:b6:7f:15:
         29:4f:76:41:e1:13:0a:f8:43:ba:85:d9:e1:39:34:29:de:aa:
         a8:5f:ef:04:e7:8f:0e:1e:2d:63:4b:50:62:fa:a1:61:17:31:
         a4:96:a7:6d:10:b8:04:9c:02:ad:c3:80:f2:e1:af:63:10:98:
         b0:6c:03:13:8b:17:05:24:6a:c4:5c:76:8a:cc:93:c3:f2:4b:
         a5:69:f4:d1:8b:47:69:5d:07:33:33:d3:e5:2c:87:d0:ce:01:
         9b:1b:a3:35:19:4b:e6:42:bb:16:cb:00:9c:30:6f:d6:1c:b3:
         ed:6c:4a:8f:07:38:13:6c:c2:39:58:ae:41:f0:55:81:88:dc:
         38:e6:de:66:55:83:83:dc:87:8c:04:bf:61:cc:7f:d8:57:45:
         f7:f1:d0:4d:69:f9:59:7a:ec:90:e7:59:16:fd:69:6b:7b:68:
         6c:7e:0a:60:9c:c1:a4:13:3b:e9:bc:d8:65:c7:04:7a:c8:da:
         0b:f8:80:a2:7d:b8:d3:d2:54:fb:05:91:19:c3:15:41:c5:d4:
         52:7e:83:5e:e7:ba:39:df:e8:b3:21:ca:b1:b9:14:94:55:c0:
         9a:a9:dd:88:29:b1:d2:3c:dc:0c:ac:f1:c5:47:78:66:06:63:
         c9:18:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:10:28 2024 by rpki-client on console-fra.rpki-client.org