Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File:                     Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier:          pHpvFDhHazxXH4KK62lWBUDvpxlBtfzcb/P/b35XnHo=
Subject key identifier:   30:83:AE:03:25:10:6A:27:C7:65:8B:AB:F8:3C:C6:C9:4C:B8:87:37
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer:       /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial:       018F8A804CA8C76DA376795F0127C3001A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number:          0E3C
Signing time:             Sat 18 May 2024 07:00:14 +0000
Manifest this update:     Sat 18 May 2024 07:00:14 +0000
Manifest next update:     Sun 19 May 2024 07:00:14 +0000
Files and hashes:         1: F49yx8hGQzJ4t6eIZe9ekZxFZes.roa (hash: heAC7Bufoonp/l9iASjQp8m3k+bQf5wrs+uiGQcH9rs=)
                          2: IXMlx0S8JiiILOX9Df9JwcR9-7A.roa (hash: EBWqhcIVG6iM5EothtWLeTsBZiviPSYitsxMWEI41Tk=)
                          3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: zWf4mZ8Rh04okphxc/JVNx7jrEgYRWrTo0pncUd2OmY=)
                          4: U1eKmWYm-OPwdrEjvBh936w4zBk.roa (hash: u8yTS7QsRs27pU56GhAi9ZnkYPwilbnGyAX1liXbHjQ=)
                          5: bM2-VyfDytezhMkkPP84yhmUfIM.roa (hash: Ty1j3ftxovvQMBCZIlIgsTUyQKG7uk7ctvpnTJte21c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:80:4c:a8:c7:6d:a3:76:79:5f:01:27:c3:00:1a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
        Validity
            Not Before: May 18 07:00:14 2024 GMT
            Not After : May 19 07:00:14 2024 GMT
        Subject: CN=3083ae0325106a27c7658babf83cc6c94cb88737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:84:3f:e9:4c:e6:ac:3b:13:46:50:4d:8b:
                    f8:f6:c0:99:b3:c9:b5:3c:04:60:10:40:65:2b:be:
                    ad:df:6f:53:c1:4a:b3:9d:8d:2f:c7:15:79:d9:65:
                    6d:96:3a:22:2a:47:12:2c:89:0a:ce:a7:9a:36:64:
                    ed:37:d1:3a:d5:22:8a:a2:68:06:7b:33:f3:b3:2f:
                    24:1a:18:ee:e7:6b:ae:b7:c3:cd:9b:a7:fd:19:dc:
                    b0:2b:9e:b6:28:54:70:1d:be:4c:56:4e:a1:4f:7d:
                    e5:03:b9:0d:a8:21:46:f7:11:ec:f0:d3:f3:0d:6a:
                    a4:aa:bf:0d:1f:79:8f:f9:78:d7:69:10:28:28:35:
                    92:d6:f6:d0:50:53:46:08:45:3e:2c:32:18:12:dc:
                    68:83:bb:d1:31:4c:ff:f2:65:d5:ab:af:55:b1:36:
                    d4:bd:b8:2e:2b:4e:6b:87:43:6c:b8:a6:95:9c:4a:
                    ca:37:98:41:91:a2:95:ab:c9:f9:33:0c:57:f7:eb:
                    52:c1:4d:d4:d5:c8:6d:a9:1a:7c:00:23:ab:26:50:
                    a5:34:0f:d1:95:c1:0a:ce:79:f3:0b:e8:3b:0a:c1:
                    a1:85:b4:ca:a8:44:90:77:5c:8c:7d:bc:67:d0:11:
                    6c:c6:62:0d:7e:51:dc:6b:a7:e3:60:25:ca:b2:e1:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:AE:03:25:10:6A:27:C7:65:8B:AB:F8:3C:C6:C9:4C:B8:87:37
            X509v3 Authority Key Identifier:
                keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:36:58:85:80:07:9f:20:18:20:de:ba:69:bd:ba:8e:b1:f8:
         57:8f:e2:88:f9:36:20:a4:43:5e:b3:65:71:54:bc:d2:e0:ec:
         b6:dd:13:d8:fe:57:d2:d0:fb:79:52:e0:08:3e:79:a1:2d:e7:
         de:d7:09:2b:34:64:89:86:e9:47:61:2c:04:08:71:bb:d5:d6:
         e6:d8:26:8f:39:ca:d4:20:89:88:bd:2b:b2:fd:74:e0:55:21:
         ad:51:bd:04:81:03:4d:40:da:a6:60:60:0e:6e:33:a9:a3:77:
         78:78:68:ee:5e:89:00:33:80:87:1e:96:03:cb:0d:29:64:47:
         e5:28:9f:20:b6:ad:19:83:f0:9b:28:13:48:02:ea:f8:98:62:
         c1:5a:ff:c7:b2:c0:b5:e7:4d:fd:89:ac:f0:66:f7:02:96:04:
         ec:73:3d:0f:98:f0:7d:54:74:b2:73:90:45:a5:e6:60:0d:0c:
         9b:9f:e6:a5:c8:86:aa:90:a2:67:0c:f6:a8:9e:77:87:58:fb:
         85:16:d5:bd:66:82:ae:c3:a8:e6:cc:a7:ac:0e:95:ac:1d:c9:
         a6:22:0c:fa:98:af:8a:e1:f6:7f:54:14:81:aa:e4:98:08:01:
         56:cb:d3:d4:a9:28:64:30:5a:b7:7b:87:35:8a:5a:60:ac:c0:
         a2:b3:e3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 08:11:11 2024 by rpki-client on console-fra.rpki-client.org