Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File:                     koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier:          5pqZyFdFpQ/P4aZ9VxMsw480AwrFBtFQM28ms6HKRPc=
Subject key identifier:   02:C9:DA:EE:51:00:45:EA:34:3F:AE:A4:5F:45:9F:18:61:8A:E0:13
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer:       /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial:       018F9A99C45AEA45C1CF412AEECBD0DE30B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number:          05B0
Signing time:             Tue 21 May 2024 10:01:59 +0000
Manifest this update:     Tue 21 May 2024 10:01:59 +0000
Manifest next update:     Wed 22 May 2024 10:01:59 +0000
Files and hashes:         1: 0diCL6YnGvC8QcytYu8N8Ny3qJM.roa (hash: sXVu/6kKr/7x0fFblSoyHceUQ8zM1i7ggAWV0CWrfm4=)
                          2: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: vdLwZsk28PrZyFsr7HbH0KW4j2zPyQ7rwhgGS37BmxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 10:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9a:99:c4:5a:ea:45:c1:cf:41:2a:ee:cb:d0:de:30:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
        Validity
            Not Before: May 21 10:01:59 2024 GMT
            Not After : May 22 10:01:59 2024 GMT
        Subject: CN=02c9daee510045ea343faea45f459f18618ae013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8a:53:fe:b1:d7:aa:1c:0b:05:77:de:99:a0:
                    06:7c:d8:7c:84:17:78:66:32:f4:38:f7:bf:58:7f:
                    8d:d2:10:72:db:61:a0:a3:d1:64:0a:8f:71:69:1c:
                    84:c1:a8:9f:82:4d:47:0c:ff:c1:ae:f0:8b:ae:da:
                    9b:ec:87:d8:90:32:5a:57:43:31:6a:26:e8:2d:ce:
                    c3:1c:88:b5:52:1e:3a:7d:ea:ce:78:8c:6a:20:70:
                    2f:03:f2:b0:ce:34:c3:ec:f5:5e:d9:f7:72:7c:c0:
                    db:9b:55:71:f4:fb:c0:6e:da:5f:ae:de:01:e0:58:
                    b2:00:44:12:44:c6:32:50:27:5a:2e:03:48:7d:fb:
                    5c:66:d8:3c:f8:cb:74:fb:e3:d0:5d:ff:4e:13:1b:
                    38:b6:90:e1:cf:06:d2:26:bc:77:5c:c6:f6:e0:49:
                    7a:c4:81:01:c5:21:d8:ab:31:6f:8d:57:ae:c4:4a:
                    c2:6b:11:e1:c5:d8:75:95:00:a4:0f:ad:ea:02:62:
                    1f:b5:f4:87:dd:35:5e:14:3d:d5:04:0b:07:62:99:
                    a8:4b:1e:51:e5:bd:6c:6c:ee:c7:12:d5:70:be:3c:
                    30:e5:f2:81:ac:15:72:bf:c8:8b:ed:b6:69:5a:25:
                    75:91:b6:35:df:1e:3f:5a:5f:df:40:32:ee:9f:2d:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C9:DA:EE:51:00:45:EA:34:3F:AE:A4:5F:45:9F:18:61:8A:E0:13
            X509v3 Authority Key Identifier:
                keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ec:83:db:37:27:24:a2:a3:88:1b:c0:1a:32:95:72:f7:1b:
         b7:60:98:f6:95:4d:4e:75:e2:ac:17:fc:b3:3d:19:05:74:ff:
         a5:2b:56:2f:12:63:95:3d:2b:d0:18:92:f9:bb:0a:a2:36:c2:
         39:6c:a4:2d:7d:19:70:9a:b1:ec:9a:57:45:94:33:bc:fc:4f:
         30:75:ef:b8:50:80:74:84:34:51:59:c2:e6:bc:10:27:eb:c5:
         a5:29:0b:93:50:6a:33:e8:33:fd:5e:b7:18:7d:ba:ff:18:f4:
         df:93:22:2f:ea:6e:6d:d7:01:f9:0f:89:64:f9:49:10:56:c6:
         b2:fb:d8:95:57:43:80:1f:5a:97:96:49:dd:5e:2c:e6:f4:92:
         e2:30:d7:a6:d7:e3:9a:0e:28:74:9b:ef:e3:29:dd:0f:a0:ac:
         48:cf:30:71:d5:fd:aa:38:34:b3:42:c3:4f:b0:5c:4d:26:12:
         3d:e0:b7:de:aa:f9:7f:27:d0:fa:3d:a8:b8:87:19:9e:d7:df:
         4c:ab:6a:cf:6d:a3:9b:c4:da:ad:68:55:aa:35:ba:d3:6c:d0:
         ad:ac:8f:fd:0e:9c:31:c3:bc:d1:1a:4e:79:4d:05:1b:9a:cc:
         21:83:28:9b:8f:a2:74:b9:e5:c8:a2:35:30:23:f0:1e:27:9c:
         ed:b7:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 18:56:26 2024 by rpki-client on console-fra.rpki-client.org