Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
File:                     s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json)
Hash identifier:          N8PdBDnALPtLMMMsYIduQsKoq3/+mOpyQtvbHVoMyK4=
Subject key identifier:   01:0D:5C:64:20:74:78:1C:95:F4:AC:26:7C:AE:52:9A:95:17:4E:98
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Certificate issuer:       /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial:       018F8B5C01AAB5E0B47680F94AB2EE0B4D81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
Manifest number:          01EB
Signing time:             Sat 18 May 2024 11:00:13 +0000
Manifest this update:     Sat 18 May 2024 11:00:13 +0000
Manifest next update:     Sun 19 May 2024 11:00:13 +0000
Files and hashes:         1: S4gtWYTYDEjS39eHVUxbFmHGZV4.roa (hash: zKLPTHhzh4CAXPLKwlgSG4GwY02X+J75JpY4N3k3zgw=)
                          2: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: 7bF9tYy6YolOjWIX2ajREEm5uaovYU9qoxr9zudNErM=)
                          3: wEztfgDsD3VgXR_6I7E9tHgko-0.roa (hash: csoAzGEEjkxJQ7QLqTKr0Z1Z0z14AnLYZP4PrJptqYE=)
                          4: yil-i8cAnOl5qnTClU7qPnqdIuU.roa (hash: EymTDlfA1ToaMHTTSx0gGlKgcMeq9SrJOmk8zxrHtBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:5c:01:aa:b5:e0:b4:76:80:f9:4a:b2:ee:0b:4d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
        Validity
            Not Before: May 18 11:00:13 2024 GMT
            Not After : May 19 11:00:13 2024 GMT
        Subject: CN=010d5c642074781c95f4ac267cae529a95174e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:bc:2a:e7:98:08:98:bd:12:de:96:64:f2:
                    8a:36:f3:21:f0:3d:7c:38:66:61:cc:3f:a7:5f:c3:
                    e8:bb:c2:34:d9:b5:50:8e:21:f6:c2:25:96:b2:dc:
                    60:65:3b:ba:8f:73:9e:c5:5b:77:b1:22:2c:b7:f9:
                    d6:9f:b3:a1:46:5d:4b:4c:56:51:85:04:d7:ba:ec:
                    7f:5d:60:83:f5:e2:44:48:e2:26:25:46:64:d8:53:
                    ca:26:81:ac:50:37:df:ed:9f:24:c7:9d:54:72:1f:
                    e7:fc:36:f2:ce:0b:81:6c:a2:92:81:1d:3f:66:49:
                    b4:28:62:7e:48:1d:1d:91:4a:eb:78:f3:26:ca:3c:
                    8c:78:35:61:45:d7:96:fb:44:91:15:53:97:9b:d2:
                    5b:e9:4a:86:4f:2f:7f:1b:32:a3:b7:b4:8b:72:55:
                    6b:e8:4a:2f:3a:c2:47:6b:76:3c:b8:3f:5d:bc:ec:
                    6d:5f:6a:27:3e:a3:89:40:1f:e0:40:d9:b3:ca:b5:
                    5c:13:9d:22:4c:a9:a1:05:00:ec:ba:7e:72:86:d6:
                    f4:1a:96:4a:ca:67:04:7b:54:b4:75:f8:46:35:f3:
                    6c:78:8e:9a:62:26:70:37:d0:da:40:fd:09:16:30:
                    66:4b:f6:a7:44:f1:41:38:7e:76:8b:85:1f:c5:95:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0D:5C:64:20:74:78:1C:95:F4:AC:26:7C:AE:52:9A:95:17:4E:98
            X509v3 Authority Key Identifier:
                keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:eb:e0:bf:55:96:4a:8d:10:43:40:1a:a5:2a:45:97:a0:25:
         be:45:f0:06:0a:3e:73:ca:1d:cd:f0:f9:63:03:59:1c:76:d8:
         65:3d:bf:36:10:f4:df:5f:73:23:94:3d:e2:0e:a5:0d:9d:2c:
         6f:63:71:e4:62:41:8d:f6:2c:7c:e9:88:dc:76:d7:56:7a:f5:
         6d:23:83:ff:f8:1a:e4:f1:74:1d:e7:aa:8c:ab:cd:0b:a6:66:
         e0:38:59:9e:52:17:af:48:72:23:df:60:d0:90:b5:50:44:ee:
         59:00:05:9d:a0:1e:a3:9f:84:c0:d6:69:40:77:c0:09:cf:1b:
         51:05:a8:90:ce:d0:c2:6b:9a:6d:ef:e8:77:b4:be:cf:ab:04:
         95:9e:a2:c0:48:b4:3e:b8:b1:d2:a5:f3:18:f7:f8:62:cc:c7:
         10:65:b0:b4:8e:df:a5:bd:70:97:df:06:92:1a:f6:68:9d:d4:
         a5:db:bc:6f:ed:10:6a:5b:0f:7e:24:89:35:e2:54:40:7e:49:
         7a:b6:fc:29:48:c9:fc:09:8d:2a:1e:36:48:db:d2:02:6b:e6:
         ac:d3:98:6d:2a:27:0b:a9:58:53:44:75:f6:03:1b:18:31:16:
         e0:15:6a:4d:ec:10:6c:61:cb:83:47:d5:cf:4c:16:83:4f:50:
         cc:cf:7f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:57:09 2024 by rpki-client on console-fra.rpki-client.org