Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.mft
File:                     xU6sFR_6npl6ou5g87OBMt7M1Jw.mft (raw, json)
Hash identifier:          SdhxoPl1YqdOuxXF7GDYukCHm6sJXZi1sOpQnbQV9jY=
Subject key identifier:   08:4A:21:09:55:74:0C:27:21:3B:4F:1B:19:66:E3:AA:43:E8:D3:60
Authority key identifier: C5:4E:AC:15:1F:FA:9E:99:7A:A2:EE:60:F3:B3:81:32:DE:CC:D4:9C
Certificate issuer:       /CN=c54eac151ffa9e997aa2ee60f3b38132deccd49c
Certificate serial:       018F8823F5ACAFADB4DAE2D16FB1B1FD173A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xU6sFR_6npl6ou5g87OBMt7M1Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.mft
Manifest number:          09A8
Signing time:             Fri 17 May 2024 20:00:08 +0000
Manifest this update:     Fri 17 May 2024 20:00:08 +0000
Manifest next update:     Sat 18 May 2024 20:00:08 +0000
Files and hashes:         1: RNnQuS8DiVDElTOjHJ54EQ7Qfhs.roa (hash: S7daPWscsZjPCZGVxwKhi9pcQEnMxU38KlU8FVP7jGY=)
                          2: xU6sFR_6npl6ou5g87OBMt7M1Jw.crl (hash: /4Gd5B3j4Aw/AFNnLzXIlN3IIXgPjlL6+zHoP8Ks5n8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xU6sFR_6npl6ou5g87OBMt7M1Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f5:ac:af:ad:b4:da:e2:d1:6f:b1:b1:fd:17:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54eac151ffa9e997aa2ee60f3b38132deccd49c
        Validity
            Not Before: May 17 20:00:08 2024 GMT
            Not After : May 18 20:00:08 2024 GMT
        Subject: CN=084a210955740c27213b4f1b1966e3aa43e8d360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:f9:06:cc:64:48:a7:5d:61:05:aa:86:a9:
                    ac:82:3c:b9:2a:53:88:08:39:f3:68:58:f5:ca:8b:
                    55:a7:13:3e:5a:98:a8:49:d2:f9:1a:7d:0e:62:80:
                    3c:74:f4:79:0e:72:e1:33:0c:33:eb:be:72:70:58:
                    57:7e:56:6c:ef:78:72:3c:6c:63:3e:a3:4f:84:e9:
                    c6:d5:2e:0d:25:9c:e7:71:05:96:9e:f7:a2:5e:b5:
                    f3:21:df:76:09:b0:58:24:82:dd:b7:f0:66:97:41:
                    e8:78:8b:94:62:40:d7:01:9f:67:f1:be:5e:f0:46:
                    b9:76:23:33:4f:86:d5:04:09:e6:ac:2e:b6:6c:99:
                    72:15:c0:b5:3e:c0:35:70:9a:cb:2f:cd:c6:8d:b4:
                    d9:20:b7:ea:50:65:71:11:62:7e:29:bb:2c:27:b1:
                    71:ce:81:36:fb:32:1c:4b:d8:c9:4f:e4:70:e1:b0:
                    4b:cf:e7:ef:e2:6a:42:9a:4a:f5:4d:df:a6:61:8f:
                    9b:43:44:95:67:80:23:ca:03:ce:eb:ed:b2:7a:a5:
                    1e:86:e0:77:7a:0e:f4:65:44:be:5e:2c:a5:83:6e:
                    09:50:6c:a3:42:6f:d6:2f:62:e7:05:17:f1:28:f6:
                    44:67:e2:e2:24:76:02:e2:f6:19:3a:95:85:d1:f8:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4A:21:09:55:74:0C:27:21:3B:4F:1B:19:66:E3:AA:43:E8:D3:60
            X509v3 Authority Key Identifier:
                keyid:C5:4E:AC:15:1F:FA:9E:99:7A:A2:EE:60:F3:B3:81:32:DE:CC:D4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU6sFR_6npl6ou5g87OBMt7M1Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:76:39:36:b1:cf:39:df:7d:53:ce:12:d0:df:8f:7e:b8:
         b1:8f:e1:50:c7:5c:b4:62:53:d7:6b:c1:57:a2:15:37:04:90:
         a5:6a:76:24:80:58:79:6e:2a:1a:a1:6f:86:c5:16:74:1b:01:
         06:43:6c:2b:8b:30:62:4c:b6:74:c1:66:d2:a3:15:30:b0:b5:
         75:4e:2d:8d:52:e9:c4:83:c8:05:ff:38:56:f9:7f:d6:08:95:
         57:14:ea:25:b7:d9:6e:f3:ea:46:60:ce:fe:6b:f1:6a:9c:13:
         83:b3:90:3b:6f:94:2e:ec:60:86:0b:c6:b2:2e:2f:83:1d:83:
         62:4d:ce:b5:ea:1f:69:d4:1d:6b:3f:20:38:f1:be:ad:87:36:
         14:53:f2:5a:d0:b6:2b:9e:68:e0:b5:fa:5f:f3:c9:a4:ea:44:
         a4:df:ab:a4:89:dc:dd:d7:b6:76:b9:8b:81:7f:17:1d:0d:64:
         11:3a:15:3c:61:af:82:3f:c2:c7:ec:3b:dd:a6:96:01:77:47:
         83:52:0f:03:a8:9e:ed:0e:14:65:24:06:53:66:e6:ea:1d:84:
         24:63:dc:e8:b8:5c:27:26:70:14:0a:2d:81:6e:1f:2e:82:8d:
         30:36:7b:87:a4:81:36:87:ae:70:e5:3c:db:8b:f1:f8:84:87:
         b4:2f:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:36:38 2024 by rpki-client on console-fra.rpki-client.org