Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
File:                     MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json)
Hash identifier:          6j0oPs14nF89hdZwr+LpDXKzd4AVXJdAyxPIkqEyLwg=
Subject key identifier:   0D:C9:1D:2D:D7:35:B1:BC:32:73:AE:B5:7C:E4:CB:83:A3:C3:4B:F3
Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91
Certificate issuer:       /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
Certificate serial:       018F87483E6235A885C31BE4B44C2331C018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
Manifest number:          10CD
Signing time:             Fri 17 May 2024 16:00:09 +0000
Manifest this update:     Fri 17 May 2024 16:00:09 +0000
Manifest next update:     Sat 18 May 2024 16:00:09 +0000
Files and hashes:         1: 4y27jSbydZOcYcs6zuy-M2jdxRU.roa (hash: EDTyCKhN+ZJCdaTKIgno0hqpC5MxeZXVxA99qIMz4bU=)
                          2: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: J2UIuC3l7QiLrfnN8CpQSrvr731f0Jid4K+YDHlktrw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:3e:62:35:a8:85:c3:1b:e4:b4:4c:23:31:c0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91
        Validity
            Not Before: May 17 16:00:09 2024 GMT
            Not After : May 18 16:00:09 2024 GMT
        Subject: CN=0dc91d2dd735b1bc3273aeb57ce4cb83a3c34bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:84:88:3d:cc:42:f6:08:52:e2:44:fe:18:
                    52:a0:aa:56:73:cd:1d:28:c6:ba:76:cb:9a:cd:a3:
                    3b:31:dc:0e:93:c8:a6:3e:e1:cf:27:f1:bb:fb:72:
                    be:ea:99:80:77:5c:00:8e:c0:1c:44:0c:df:20:50:
                    3d:7d:9c:4e:b2:5c:5d:cb:95:40:f4:51:73:00:e7:
                    34:a5:36:27:cc:79:e2:06:d8:58:67:b7:9e:98:3d:
                    27:14:93:36:9b:43:80:b9:63:44:60:1c:b8:e5:c9:
                    a6:95:9a:0a:09:28:ee:df:f0:ce:80:d0:6e:ec:27:
                    74:3e:57:78:d6:37:89:df:bb:52:96:a8:5b:6c:98:
                    32:7c:d8:46:2b:1f:34:78:85:0f:36:09:c1:da:e5:
                    a3:37:ba:04:71:b0:83:52:e8:86:49:52:5c:87:2f:
                    3e:f2:63:18:41:78:33:9c:71:03:59:20:5c:30:f8:
                    92:2e:1c:84:e3:c4:28:88:92:a3:ae:83:83:69:2a:
                    4d:99:d0:bf:01:54:05:9a:8a:a0:0f:a8:62:93:6e:
                    21:88:ab:41:eb:61:1a:7b:99:99:c1:94:5c:08:59:
                    9d:5a:f7:90:3c:8f:e8:8d:2f:ee:9f:2d:4d:94:e5:
                    da:b8:5d:d9:8a:d4:38:ad:1a:f6:0b:2d:aa:9b:0c:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C9:1D:2D:D7:35:B1:BC:32:73:AE:B5:7C:E4:CB:83:A3:C3:4B:F3
            X509v3 Authority Key Identifier:
                keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:31:65:a6:80:02:0c:78:0f:9d:7e:08:74:67:85:33:98:
         fc:fa:d0:6c:5a:3c:65:cc:d1:a1:13:36:ec:4f:7d:3f:5a:a8:
         57:05:03:31:3b:dc:93:ce:83:03:5b:44:90:f9:00:d4:15:d8:
         cc:74:e2:d4:f2:8d:3f:63:bf:a9:d8:99:69:f8:ad:32:d1:47:
         0f:47:f6:94:86:e5:88:a3:09:80:38:0c:e4:eb:e1:51:3e:4f:
         0c:67:4b:a0:08:52:cc:b4:e2:50:e4:4d:cf:ef:25:98:4c:74:
         ab:a9:26:1e:cb:ec:52:82:65:33:24:1d:49:bd:12:52:47:45:
         bc:d2:ff:42:94:10:59:42:9c:a6:3a:50:a4:54:f2:1a:e9:cf:
         5a:ea:e1:91:b9:20:60:8a:98:cc:9e:75:4e:c0:df:91:1e:2a:
         e6:5e:6e:0e:ef:d3:54:93:77:10:e0:52:10:02:b1:95:11:fa:
         fc:95:32:6b:44:e7:51:a0:0b:9e:81:f9:a8:49:3c:e7:8b:df:
         5a:56:e4:c6:88:37:ba:03:c5:ea:71:03:34:c2:55:26:af:00:
         ed:76:ba:1d:4a:da:6f:7a:c1:cc:25:11:9d:8b:9b:a8:12:81:
         7c:2c:ce:3b:93:93:d8:5a:a6:51:63:77:54:99:8d:6c:ee:09:
         64:10:c9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:48:27 2024 by rpki-client on console-fra.rpki-client.org