Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File:                     cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier:          rc8Nuy3CIiHLvZEtIzSj5nS9Cq2SEKROK0vJOKvZJ8o=
Subject key identifier:   FE:D3:E8:68:0B:FC:06:88:D0:05:82:00:DA:C2:F7:53:66:45:95:88
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer:       /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial:       018F87ED5541C096095289A56616F653617B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number:          0CBC
Signing time:             Fri 17 May 2024 19:00:29 +0000
Manifest this update:     Fri 17 May 2024 19:00:29 +0000
Manifest next update:     Sat 18 May 2024 19:00:29 +0000
Files and hashes:         1: 5f7GEW8n8oFksnYjWuNRYvpHYuQ.roa (hash: nXOaoaDUUT/h/WBjJFTDkTb6c8lvmCn+pEflndjgboY=)
                          2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: TeT64/O8LAuNCLDlj8kYS2HW/zMpiOtO7k2vuDKpAAE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:55:41:c0:96:09:52:89:a5:66:16:f6:53:61:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
        Validity
            Not Before: May 17 19:00:29 2024 GMT
            Not After : May 18 19:00:29 2024 GMT
        Subject: CN=fed3e8680bfc0688d0058200dac2f75366459588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:a7:04:f6:15:fa:20:ee:b1:f4:b9:74:5d:
                    eb:b9:4d:5e:54:21:6a:2a:4a:56:ec:ab:e3:90:d6:
                    b4:1f:f2:55:35:66:c7:1b:a4:3c:cd:6e:88:ad:f4:
                    77:34:b9:8b:18:62:cd:08:c4:d7:1c:70:74:0c:ed:
                    7f:75:df:28:e1:69:ee:d7:f5:d5:24:6a:d8:62:cf:
                    11:75:a6:f5:90:94:5b:17:f1:55:98:5b:76:1a:8e:
                    c8:94:e1:fb:9c:43:55:54:85:a7:99:f0:ed:cf:be:
                    67:33:df:24:b7:bc:aa:c2:77:47:d4:f0:e1:d4:3e:
                    04:62:32:6c:33:e0:fe:84:38:9a:88:40:d6:24:b2:
                    30:1d:9f:f4:3c:96:48:36:7e:bc:30:bb:f1:f0:1d:
                    2b:b9:7a:a5:36:a7:e2:4d:68:f5:6b:52:c5:4c:57:
                    72:94:d7:16:bf:7a:43:f3:c1:9b:a2:45:1b:1f:30:
                    40:42:07:bb:87:e8:bd:c0:f7:3c:a0:04:0a:67:d4:
                    f6:c3:09:a7:32:3e:58:7c:37:23:12:ef:78:e1:22:
                    59:f0:62:84:4a:32:96:53:0a:b1:5c:b3:e8:6a:2d:
                    9c:14:6e:d7:4a:3b:2e:7c:04:f8:a1:64:b8:86:1f:
                    42:8b:91:e2:ee:84:0c:93:8d:b8:8d:88:fe:12:60:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D3:E8:68:0B:FC:06:88:D0:05:82:00:DA:C2:F7:53:66:45:95:88
            X509v3 Authority Key Identifier:
                keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:57:3a:aa:52:b7:06:69:59:14:73:e3:a7:b4:24:f4:8f:77:
         21:4d:22:20:31:48:32:0d:64:f3:6e:ab:a7:76:ea:4a:9c:81:
         c0:fe:0d:42:f5:e3:e9:a4:7e:95:e8:7a:f5:b7:f1:fa:bb:fe:
         05:07:46:a5:5e:60:dc:66:2e:ce:57:00:6a:46:64:a0:e8:4a:
         92:c1:11:95:e4:3d:d0:48:2a:65:fb:37:f0:17:3d:c0:d6:58:
         9f:fd:6f:28:e5:29:ce:3f:e1:fd:2d:66:68:38:f6:68:41:f8:
         2f:10:18:48:fa:87:16:c5:9e:f5:7f:b6:6a:96:17:d4:32:6c:
         6c:86:67:5c:f8:66:bf:ac:eb:3d:a2:1a:b2:f1:1f:de:92:f9:
         65:ec:a7:f5:83:e4:48:bb:21:1f:5f:82:d2:91:50:55:b8:b2:
         dd:65:6d:f6:35:9a:02:db:53:37:18:42:a0:c2:b7:54:97:01:
         c6:fe:bf:77:43:7c:bc:43:5e:ff:7c:5a:40:f5:ad:f0:4b:1b:
         42:5b:83:a6:4f:9c:97:8c:db:a8:92:40:d6:3d:e4:9a:23:92:
         1f:c5:a4:fa:b5:74:9e:ef:92:00:09:88:c1:f0:d7:3e:45:2f:
         92:6e:94:f2:bf:a8:1c:3e:d4:b7:cd:4b:bc:af:a5:08:38:ae:
         7a:e7:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:17 2024 by rpki-client on console-ams.rpki-client.org