Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          QyG73an632faXbCa/f+CjLg+jZb22ZR4WmQDQx6+7qw=
Subject key identifier:   4F:39:8B:20:2D:52:BB:30:47:B8:24:8F:3D:9D:CF:20:40:0D:69:98
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       018F874955A92B259586CA0786A0F203C7A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          0C04
Signing time:             Fri 17 May 2024 16:01:21 +0000
Manifest this update:     Fri 17 May 2024 16:01:21 +0000
Manifest next update:     Sat 18 May 2024 16:01:21 +0000
Files and hashes:         1: 1JbSVm_TSV7qQO91puMnIvbq7tE.roa (hash: XelEtwq+ExQZBRlWH/55cwKac6nirDBuO5cBWZ32NJI=)
                          2: 2Z3Mta3zFGG528Wrl3hrespJh5I.roa (hash: +sppo9xnGwVmT1MUIKXDwSoqkdTya9zToLk05Ox3BrQ=)
                          3: evKBUN2_OYObOP7Rz2GKzNu_kg8.roa (hash: 1jYsKAKCRmXXLIY9YmZS4TImmjpP2+LOqiSfhQvGCFo=)
                          4: lAO0AZh-tkGV3_2xFRuCgdN0NcI.roa (hash: ASJ0F4GYGgPXBtlh6PmVHEsxbuyA84xSIRYBfx0A/qI=)
                          5: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: z6fzpiR8GIcnLUBdomZ2l8Dyo+SqPB74epVdgBQNmgI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:55:a9:2b:25:95:86:ca:07:86:a0:f2:03:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: May 17 16:01:21 2024 GMT
            Not After : May 18 16:01:21 2024 GMT
        Subject: CN=4f398b202d52bb3047b8248f3d9dcf20400d6998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:38:d6:17:68:b6:0c:f8:bc:c0:c0:3d:78:
                    75:5f:90:7e:68:39:84:3b:89:f3:86:cb:cc:51:7c:
                    dc:26:2d:3c:26:aa:06:d8:30:94:e2:7d:7b:d0:e4:
                    de:99:4c:df:f6:84:70:42:ed:85:03:73:7a:74:75:
                    2d:74:09:ed:75:9f:1b:ee:d2:e8:14:3c:3c:6b:89:
                    8d:5d:27:a4:e4:73:50:87:c2:1a:2d:3a:33:c8:f2:
                    19:a5:9f:ff:f6:c1:d5:24:34:e7:e3:68:a0:ea:42:
                    45:2f:e2:df:6b:66:27:59:50:63:62:45:a5:49:91:
                    dd:66:ab:6d:94:dd:b1:72:a5:8b:eb:47:e0:b3:ed:
                    fb:ba:37:fb:6d:0b:13:0d:ff:29:7b:b8:1d:68:0e:
                    92:ad:15:aa:a4:ca:80:60:82:b0:61:87:88:cb:78:
                    8a:dd:44:b2:4c:c0:35:05:61:4d:4e:4e:64:c6:46:
                    51:39:06:3e:3b:0d:0f:b8:ee:c9:81:00:b1:d7:46:
                    ca:fc:71:d2:53:8c:ca:e0:61:eb:4b:b9:11:58:13:
                    e2:75:2b:d2:21:ac:b1:82:3c:ca:81:a7:ca:43:fc:
                    1d:ff:c8:97:ae:c0:c7:53:c4:a8:c7:37:3b:a9:54:
                    4a:70:9a:5b:b2:35:68:d5:c9:41:a9:ec:d1:d2:79:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:39:8B:20:2D:52:BB:30:47:B8:24:8F:3D:9D:CF:20:40:0D:69:98
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:69:a1:c0:e3:fe:6e:27:30:c3:2e:22:f4:0e:3e:1c:65:
         12:72:f5:2a:6a:d5:cf:6f:3b:c6:67:f1:73:75:8d:2f:52:6c:
         73:12:19:b1:24:12:22:46:93:e1:d3:73:b6:61:a5:d1:b9:fc:
         0a:6f:33:8d:a5:fb:cf:40:eb:59:e7:6b:53:f4:0b:c8:71:60:
         e2:04:9f:f4:f3:f0:fa:45:df:bc:34:ee:26:0e:40:3e:ba:d8:
         46:c4:8b:d6:9d:62:96:be:27:3f:39:c8:cd:0a:a6:76:66:b2:
         86:88:00:32:d5:eb:51:4e:fe:db:09:79:2f:07:03:8e:fd:b3:
         5a:a6:7d:bf:c7:ef:c4:97:25:ba:68:5d:80:3e:11:e5:44:15:
         89:4e:e5:4b:3d:dd:65:44:0e:b0:aa:3b:fb:d9:2d:f3:f3:54:
         b4:2c:aa:74:a4:4f:fc:42:5b:7e:e9:8f:1a:83:6f:a2:6b:3c:
         a0:15:05:ba:c8:47:09:40:cb:68:4d:ed:33:45:66:89:0f:c4:
         c9:3a:69:3b:62:c4:75:5e:a2:58:92:e2:aa:f7:4a:f1:40:be:
         9e:f7:40:ac:6e:06:e6:88:1b:d8:83:42:2d:ab:9a:87:86:5a:
         6c:42:84:c5:b1:a2:43:3c:c3:dc:aa:d1:f1:1d:64:ae:7b:3c:
         63:3f:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:42 2024 by rpki-client on console-fra.rpki-client.org