Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
File:                     MBpkhyXuJqRgy5scvNnJyDLESa8.mft (raw, json)
Hash identifier:          vErzHpSfDGCZmtPODJtkV4o/62k5CbMDdFkhHTmXC0M=
Subject key identifier:   3C:6E:EB:B2:20:4D:61:3D:EF:54:E9:94:88:DB:DA:43:60:2B:F9:7A
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Certificate issuer:       /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial:       018F87B6A082A8FA1E53E60D31ACCCB19776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
Manifest number:          0794
Signing time:             Fri 17 May 2024 18:00:43 +0000
Manifest this update:     Fri 17 May 2024 18:00:43 +0000
Manifest next update:     Sat 18 May 2024 18:00:43 +0000
Files and hashes:         1: 4-fNDS3Vs0_qJNOBPQ3GCO8iLL0.roa (hash: N3OccWSlKzp2UixMb+DpLmp6JgXFX2Ho4wDOrwLQKjY=)
                          2: MBpkhyXuJqRgy5scvNnJyDLESa8.crl (hash: q0KkYWywamaqs+y2euln3mv4C/Gt/lRqfL/yYZWLDXk=)
                          3: SroUN1XwdSQsx9oMLMmPcyBIM4U.roa (hash: XY6FDshfQn3+Pmo/BrGe6UX+u0HxIU9KCD1JWHDl5Pw=)
                          4: VG0iL6yXn8YW1DsmmbJgJB8nj3c.roa (hash: 0/4bjsEa6FyzdjvxMgLOdUvPxtnwgXz7+x/sNX9+i1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a0:82:a8:fa:1e:53:e6:0d:31:ac:cc:b1:97:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
        Validity
            Not Before: May 17 18:00:43 2024 GMT
            Not After : May 18 18:00:43 2024 GMT
        Subject: CN=3c6eebb2204d613def54e99488dbda43602bf97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:05:f2:5a:4d:10:73:08:5a:f8:aa:09:66:
                    1a:48:af:05:b3:08:bb:d4:56:a5:ba:cd:75:3f:25:
                    44:2f:0d:21:2a:16:9d:20:d5:7c:19:57:86:bd:ee:
                    4e:21:c4:b8:ff:34:09:4e:28:59:f1:03:fd:0c:98:
                    17:ec:f8:4a:7f:b1:0e:e1:67:51:a4:20:eb:95:a6:
                    6f:ea:68:6b:07:6c:d6:91:16:bd:27:b5:91:23:2f:
                    70:f6:09:17:e9:bd:b3:30:9c:aa:37:b6:7e:ce:93:
                    7a:df:b3:09:b8:3d:17:3c:49:80:ef:2e:f0:f6:ab:
                    fc:a7:23:3b:bf:b0:44:61:89:60:74:ee:22:1c:71:
                    fa:45:a1:2b:3c:ae:9b:0c:5f:1e:d2:74:df:21:0c:
                    66:6e:e7:27:92:30:2d:76:3b:12:3a:8c:65:fa:35:
                    50:bc:d6:dd:91:32:60:2d:20:3e:52:08:1c:8b:e6:
                    7c:24:5b:26:ba:62:9c:e5:ce:40:8f:5f:b3:18:15:
                    39:95:e8:1a:5e:40:05:2f:f8:52:0f:e3:07:32:ec:
                    3a:4b:14:51:3b:34:db:2a:6b:9b:da:8d:93:5e:b6:
                    a6:c8:ed:16:ee:8d:18:c3:39:6b:96:1c:72:3b:d2:
                    58:6a:f2:32:05:75:1f:ce:b9:91:9b:86:11:7a:33:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6E:EB:B2:20:4D:61:3D:EF:54:E9:94:88:DB:DA:43:60:2B:F9:7A
            X509v3 Authority Key Identifier:
                keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e8:42:f8:f3:22:2f:14:95:14:0e:f8:d6:03:c0:9e:ef:ef:
         1c:12:e2:dc:0d:0f:b2:97:f9:50:2f:f7:f5:d5:26:75:47:7a:
         bf:1b:19:95:57:4c:07:6e:5c:cf:d3:49:08:c9:38:b3:24:6b:
         14:cd:88:1d:30:6f:c2:99:c5:cb:49:02:46:33:b4:ae:da:83:
         f9:44:59:5c:d7:62:d3:be:31:5f:6c:aa:62:8f:46:a5:80:7f:
         32:df:21:e8:49:aa:f4:f3:ab:dd:d5:54:e6:a0:7a:a4:a2:87:
         7e:83:ef:4b:c8:f1:3d:bb:b4:92:1c:29:0b:ed:88:ea:d8:c5:
         d5:00:b6:bb:14:3f:1b:3b:33:f4:fa:12:8f:fd:a6:f6:e5:4a:
         9f:3b:9e:6d:a7:ac:77:ab:4b:25:fc:ab:b6:78:ea:73:3b:60:
         b8:ab:7b:e3:dd:62:29:9d:17:5b:71:d3:e3:bf:80:8d:7f:87:
         2f:b9:75:af:f6:51:a3:04:76:1a:86:87:51:2e:2a:d0:db:ce:
         ea:c1:ce:6d:e2:ea:6c:b6:d0:6f:94:c2:d2:20:a7:12:e5:d3:
         a9:10:76:49:33:e7:f5:d0:7b:50:a1:ce:d3:7d:86:eb:f7:9a:
         98:91:5d:70:f9:9f:21:0b:6f:c3:da:b9:40:99:77:ec:e0:54:
         8b:89:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:35:59 2024 by rpki-client on console-fra.rpki-client.org