Manifest

$ rpki-client -vvf rpki.co/repo/Mario/1/93C53A7E38698062994AD6400E1CC25BE5E507BF.mft
File:                     93C53A7E38698062994AD6400E1CC25BE5E507BF.mft (raw, json)
Hash identifier:          jT48FJGmORvHQxp6dPBw7jr+cgK/WZnfV1yoZufQAT0=
Subject key identifier:   31:2D:5B:46:04:A9:C7:42:D4:A3:6F:5F:E1:5F:D1:F0:1B:52:F9:FE
Authority key identifier: 93:C5:3A:7E:38:69:80:62:99:4A:D6:40:0E:1C:C2:5B:E5:E5:07:BF
Certificate issuer:       /CN=93c53a7e38698062994ad6400e1cc25be5e507bf
Certificate serial:       696F680EBB6CC9AC9D4F66DB3551D76C6D9BC095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8U6fjhpgGKZStZADhzCW-XlB78.cer
Subject info access:      rsync://rpki.co/repo/Mario/1/93C53A7E38698062994AD6400E1CC25BE5E507BF.mft
Manifest number:          01EF
Signing time:             Wed 17 Apr 2024 23:43:37 +0000
Manifest this update:     Wed 17 Apr 2024 23:38:37 +0000
Manifest next update:     Fri 19 Apr 2024 03:02:37 +0000
Files and hashes:         1: AS50580.asa (hash: LHyBXPdy/W9bEQSMwdwAdt7JovzzlVXfZT/rgpz6W4A=)
                          2: 93C53A7E38698062994AD6400E1CC25BE5E507BF.crl (hash: VVz27jg9nLzQuZdFZMmASXBJbJeisNp6xweKI0G7myg=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/Mario/1/93C53A7E38698062994AD6400E1CC25BE5E507BF.crl
                          rsync://rpki.co/repo/Mario/1/93C53A7E38698062994AD6400E1CC25BE5E507BF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8U6fjhpgGKZStZADhzCW-XlB78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Apr 2024 15:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6f:68:0e:bb:6c:c9:ac:9d:4f:66:db:35:51:d7:6c:6d:9b:c0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c53a7e38698062994ad6400e1cc25be5e507bf
        Validity
            Not Before: Apr 17 23:38:37 2024 GMT
            Not After : Apr 19 03:02:37 2024 GMT
        Subject: CN=312D5B4604A9C742D4A36F5FE15FD1F01B52F9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:32:72:cb:fa:10:90:6d:bc:2b:3d:9c:24:
                    7f:c5:e2:21:9d:12:e9:4e:3d:58:c2:cd:e0:98:80:
                    86:c2:c9:2f:73:3a:f4:51:f6:cb:e0:fd:1f:38:ab:
                    ff:d9:d5:00:93:b3:73:05:54:7e:71:94:58:6a:3f:
                    89:b9:ee:ec:7c:f2:9d:38:f9:ae:ed:e1:57:8b:12:
                    4f:e0:02:f1:8c:ad:a5:2f:1b:60:12:5b:15:b4:40:
                    08:27:12:91:9d:5a:24:6b:84:e9:0c:c8:78:6d:71:
                    e4:f4:b9:0b:a2:1c:41:5d:b9:ea:2c:ed:9f:34:98:
                    e4:ab:88:09:85:d5:6e:62:cc:9b:1b:fb:dd:d5:5a:
                    a4:90:59:d2:f3:14:4a:ee:6a:7c:fa:3d:e2:79:1f:
                    d5:0e:43:b9:80:46:97:01:11:6f:95:e6:bc:bf:90:
                    9a:11:c9:61:15:66:bf:c6:6a:8c:d9:c0:c0:05:ed:
                    3c:f4:f4:9c:1e:aa:9a:65:ca:20:ed:7e:93:92:76:
                    00:4a:d3:e8:7f:26:b4:5e:95:09:be:fc:56:63:47:
                    95:79:b0:a2:cb:6e:ca:5f:bd:6d:20:21:40:c2:bf:
                    6e:f0:9a:8e:19:da:26:59:b9:57:19:e0:fd:a6:de:
                    1b:db:37:e2:d4:fc:79:c4:a3:3d:6c:c6:86:32:68:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2D:5B:46:04:A9:C7:42:D4:A3:6F:5F:E1:5F:D1:F0:1B:52:F9:FE
            X509v3 Authority Key Identifier:
                keyid:93:C5:3A:7E:38:69:80:62:99:4A:D6:40:0E:1C:C2:5B:E5:E5:07:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Mario/1/93C53A7E38698062994AD6400E1CC25BE5E507BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8U6fjhpgGKZStZADhzCW-XlB78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Mario/1/93C53A7E38698062994AD6400E1CC25BE5E507BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f0:09:00:f7:08:da:b3:bb:de:68:53:86:ef:51:1f:35:fd:
         59:ee:d1:34:a0:d6:4b:20:80:88:0f:ae:4f:e3:67:5e:a9:95:
         2d:ff:1f:42:a6:a0:02:38:09:1f:45:31:13:01:b1:47:4c:fc:
         3f:29:da:cd:4b:02:95:84:f7:25:e2:a2:b3:e6:24:76:c6:5a:
         e0:ef:e7:5b:32:3d:ae:a1:3a:6f:21:1e:09:90:c9:b0:24:90:
         25:da:c6:70:3b:ac:5d:fd:2d:a4:c3:98:4e:6c:d7:f9:66:e1:
         e4:60:2f:27:14:f5:dd:cb:cb:f5:0d:af:1f:c7:90:a7:35:e8:
         e8:cf:75:61:46:ab:c3:d6:75:79:e1:33:e8:c9:77:f8:6e:77:
         9b:9c:df:00:11:5c:67:14:0c:d3:e3:28:fb:68:23:51:c7:45:
         ef:61:2d:d4:17:66:17:3c:70:7f:f4:be:ba:f8:30:b4:04:ca:
         cf:a3:3c:64:ca:57:3e:cd:44:96:4d:fc:29:e4:b6:87:0c:ac:
         d4:52:b4:73:8e:cd:16:b4:4d:30:f4:75:18:8c:49:1e:6b:c8:
         a8:61:1a:4d:55:df:d2:67:41:63:ae:51:b4:8d:ac:db:07:b6:
         5a:72:15:91:d6:be:33:c3:ac:9f:fb:83:a3:bc:af:c9:a3:68:
         51:49:3a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 00:13:21 2024 by rpki-client on console-fra.rpki-client.org