Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
File:                     e0iUW51xbNR_veKGDYEA_NqYdJY.mft (raw, json)
Hash identifier:          /rktAEWCfN4NidfW7XbyBTiqEriwLhylEy44zNi3pPU=
Subject key identifier:   DF:45:B7:96:13:88:46:6A:0F:56:20:FA:B9:B7:B8:2B:34:E7:1E:DF
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Certificate issuer:       /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial:       018F8C01011923B6DE649B227373B73E9FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
Manifest number:          0C3B
Signing time:             Sat 18 May 2024 14:00:26 +0000
Manifest this update:     Sat 18 May 2024 14:00:26 +0000
Manifest next update:     Sun 19 May 2024 14:00:26 +0000
Files and hashes:         1: 1-KZFvutnbzjx8rBN7ofFM15a-M.roa (hash: n4XuT+bij3B830rKeyUYfw9G33AouYEH8/cA1VGNYV4=)
                          2: LJCyQ9PDCkU1Ez34OZ_BtkylUFQ.roa (hash: Ktf2MnMqyy+5h6asitUxeOYJEXYzKdFkLmEbXzMZl9k=)
                          3: e0iUW51xbNR_veKGDYEA_NqYdJY.crl (hash: aiosb1HYfmrLQsAvVui5QcrHxwpOT1a+meGrZDZWUh4=)
                          4: j4SwGDj0K-YXdHGcNPpGsnqfX5M.roa (hash: vkbtk1lTxoIeOIDIV10/lx4JGPGZmbYoZ2uvKUunihs=)
                          5: usJ0h9h0KZ-1ASPQeebo0yTbN3U.roa (hash: b0k0q3tUqrCnajtU8AJkI/y0Aazw3DwBKDnxveviNzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:01:01:19:23:b6:de:64:9b:22:73:73:b7:3e:9f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
        Validity
            Not Before: May 18 14:00:26 2024 GMT
            Not After : May 19 14:00:26 2024 GMT
        Subject: CN=df45b7961388466a0f5620fab9b7b82b34e71edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:06:9e:95:12:30:db:27:29:0e:b2:b5:13:0e:
                    52:ab:ce:61:3d:43:22:d4:63:c4:60:a8:d1:21:70:
                    2a:07:a8:16:c7:60:9d:a4:8e:0f:03:f4:17:57:5f:
                    59:ec:db:4f:fb:d4:e9:dd:26:a7:7d:20:c0:5c:41:
                    2f:40:ba:cb:34:44:74:b6:6b:40:7a:05:7a:5a:de:
                    22:06:19:83:f3:84:32:51:52:3f:a8:13:b8:0e:bb:
                    91:c3:b4:d1:ce:a5:6c:18:b2:ac:49:8b:28:84:f6:
                    a8:8f:e5:ad:3d:28:84:f2:ae:64:2c:c2:e5:eb:be:
                    f5:d7:8a:e2:21:3e:43:bf:d3:77:1c:c3:d2:99:49:
                    fb:da:01:6a:f6:b5:f3:d4:07:20:c2:af:2d:7c:18:
                    4c:13:95:07:91:93:a5:e7:3f:ee:fd:db:ef:30:20:
                    a0:b1:0f:bc:3f:4d:55:37:60:6d:46:92:30:2e:a7:
                    05:14:fa:94:c0:fd:c8:21:4d:23:73:6d:1e:53:6d:
                    b1:20:e4:1b:86:58:22:e1:5d:58:91:47:d2:b6:9f:
                    7d:c5:79:a7:73:64:3a:26:58:cd:b2:ab:9c:d1:b7:
                    67:f9:08:50:29:68:ea:2f:66:b5:22:c9:05:e0:72:
                    22:7f:db:7a:8c:a9:eb:5b:54:59:73:3c:b7:fd:f6:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:45:B7:96:13:88:46:6A:0F:56:20:FA:B9:B7:B8:2B:34:E7:1E:DF
            X509v3 Authority Key Identifier:
                keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:53:9d:e6:c4:a3:4a:de:ec:c4:03:3f:8f:9b:3a:e1:23:eb:
         36:ee:77:ff:6f:2b:33:a9:1b:d6:ef:de:56:e0:0d:29:c6:4b:
         d0:5a:0f:a9:19:84:b6:3e:32:87:7b:34:f2:83:82:08:bd:96:
         af:58:f7:bc:d6:af:25:b5:c3:51:39:9d:de:98:f3:56:59:0d:
         52:fe:27:bb:3a:8c:cf:a2:68:17:48:01:85:1d:c0:27:7e:bb:
         2c:68:c9:82:5f:c4:0c:56:ff:6d:0a:a6:1f:fc:c2:ad:7c:0a:
         88:be:0a:b0:97:a8:84:a9:9b:62:1b:fb:99:69:27:d7:4d:03:
         b9:c7:ce:25:1f:3e:d3:5a:da:5f:ab:cc:92:29:36:c4:f0:e8:
         65:1d:fc:f4:1a:fa:bd:0f:d5:11:e7:72:ea:6a:08:a6:a9:d4:
         6b:ef:5b:6e:c6:ac:d8:13:3d:b0:1f:74:b4:d4:49:18:c1:e2:
         fb:7d:ea:2f:49:4d:28:04:25:0c:3d:a0:33:a0:39:38:80:65:
         f5:e8:a5:9f:77:b9:19:d3:2c:d9:f2:87:08:51:b2:69:cc:a5:
         fd:2d:71:64:1c:ab:57:e7:cb:1b:1d:e3:f7:e6:2c:97:73:0e:
         e1:35:70:42:bf:be:be:1b:65:2f:90:57:da:49:36:20:09:e5:
         79:33:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:22:47 2024 by rpki-client on console-ams.rpki-client.org