Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File:                     XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier:          EKVxrRxbgvjmLIBNphXC4sIrOPkVl9JFzSA76zsxioU=
Subject key identifier:   BE:20:6E:B9:29:F6:99:F3:DE:3C:71:F3:73:3D:9F:E6:07:F1:70:19
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer:       /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial:       018F89379E8A1E13E4AF42994F9B6604E0ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number:          0D36
Signing time:             Sat 18 May 2024 01:01:14 +0000
Manifest this update:     Sat 18 May 2024 01:01:14 +0000
Manifest next update:     Sun 19 May 2024 01:01:14 +0000
Files and hashes:         1: ERKT15aoWtvhe4YS1Giiu_xrnvA.roa (hash: Y7Yjz/HsFv6D9FSNuNAqqy28xrJtmpEs/0mKyCzXx2E=)
                          2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: dY6nR6sO38ZFUk3IkaFKGoa57zLfyKUFRuvLJ282neU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:9e:8a:1e:13:e4:af:42:99:4f:9b:66:04:e0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
        Validity
            Not Before: May 18 01:01:14 2024 GMT
            Not After : May 19 01:01:14 2024 GMT
        Subject: CN=be206eb929f699f3de3c71f3733d9fe607f17019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:fd:da:4c:f4:fa:02:57:58:19:35:35:7b:
                    c0:52:cd:0e:25:b3:a7:a3:80:b2:85:eb:11:67:e3:
                    7b:1c:eb:d6:f1:63:51:b8:0f:f7:2c:cc:70:3b:c4:
                    7b:d5:7d:de:1c:b7:8f:d8:e8:f4:97:d5:77:2f:e2:
                    77:34:89:fd:e7:db:86:00:2d:c3:23:55:a1:3c:2c:
                    ed:4d:75:bf:88:f7:0d:f9:36:c7:ab:c4:bd:86:5c:
                    7a:6c:99:a4:a2:d2:07:af:ec:8e:bc:52:51:9b:5e:
                    79:65:ad:9b:ca:67:8e:26:10:19:59:14:dd:1d:7e:
                    17:90:10:a6:7c:72:1e:14:78:2d:5b:26:ea:bf:99:
                    2b:0d:50:5e:c3:23:40:75:6f:34:cb:3c:44:4a:c9:
                    2b:c0:d6:be:85:78:03:3d:b2:eb:58:4d:fd:bf:48:
                    df:c8:29:2f:80:90:42:ad:cd:af:43:f3:9b:40:77:
                    07:14:48:4b:03:d3:41:bf:53:e8:b1:e9:7f:e8:c2:
                    83:7b:40:3f:82:e0:f8:bd:0f:de:3e:70:f6:04:10:
                    39:4c:67:56:d8:f1:45:ce:98:87:fc:19:9f:69:88:
                    cb:c1:d5:5a:e8:94:21:89:b5:b8:e2:a5:80:ba:15:
                    41:59:c2:e2:e4:b4:10:d1:6b:9d:3a:f6:08:aa:12:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:20:6E:B9:29:F6:99:F3:DE:3C:71:F3:73:3D:9F:E6:07:F1:70:19
            X509v3 Authority Key Identifier:
                keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:78:29:74:b3:ae:0b:bd:df:aa:52:47:60:0a:8e:26:e0:65:
         27:a4:66:54:e2:1e:d8:8e:e8:a0:b8:00:f4:26:61:0b:71:ff:
         03:f2:e8:32:e1:b1:9c:90:d8:4f:d5:5c:51:fa:93:fd:06:5c:
         13:cd:e5:d2:70:91:ed:0f:a3:f5:18:a6:07:92:ec:5e:0f:ad:
         41:75:c6:ff:80:23:74:fb:b6:c3:94:79:2d:44:78:12:c5:3a:
         dd:11:de:8f:78:14:67:e0:7f:83:69:f1:98:e3:08:a0:db:47:
         d6:ae:f7:bc:17:ec:cb:df:09:8b:32:a9:30:dd:26:8c:a6:3a:
         9e:79:01:13:4a:f4:e5:b8:24:3e:78:69:f1:86:d5:6f:b4:4a:
         34:71:bc:20:13:ca:58:c3:01:04:5d:6c:d9:d2:d7:e6:b5:31:
         17:1e:aa:21:d0:a1:14:b9:06:d9:91:66:eb:8e:ee:56:de:d8:
         fa:28:be:41:41:a9:7f:56:b8:39:f1:1a:19:27:92:44:a4:b7:
         e6:8e:8e:66:f6:8a:41:4f:de:90:3f:34:24:1e:41:37:bf:84:
         79:6e:0f:64:71:c9:9e:9d:1d:3b:04:86:9e:2a:6b:ba:61:ea:
         5e:a7:c7:88:23:4d:72:87:cc:8c:b4:a1:2a:38:66:52:6e:35:
         69:7b:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:47:53 2024 by rpki-client on console-fra.rpki-client.org