Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File:                     S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier:          S9dL0kFPbc7kB0XFI3uRQkIwjsLGuhFvKxwliCEPo2I=
Subject key identifier:   F5:6A:CB:86:FA:71:CC:47:C9:05:71:AD:5C:E9:FD:9C:F0:01:AA:0E
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer:       /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial:       018F885AF1C553F6114F4492165A5A6DE39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number:          104B
Signing time:             Fri 17 May 2024 21:00:12 +0000
Manifest this update:     Fri 17 May 2024 21:00:12 +0000
Manifest next update:     Sat 18 May 2024 21:00:12 +0000
Files and hashes:         1: DmXD3tMyr2oKZP2fuOlovEtepcA.roa (hash: MPmQ297/YRzbHgWzJH0hExcNns4Fu0hjy2rC/+qAlAo=)
                          2: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: NhD5Mg+lk2sfJ973v7Y2hR1u39XwkEL87QPTdsXowBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:f1:c5:53:f6:11:4f:44:92:16:5a:5a:6d:e3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
        Validity
            Not Before: May 17 21:00:12 2024 GMT
            Not After : May 18 21:00:12 2024 GMT
        Subject: CN=f56acb86fa71cc47c90571ad5ce9fd9cf001aa0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:6e:e9:a8:2b:27:2f:eb:ff:37:92:dd:8f:
                    76:ab:3a:ec:06:d8:31:39:aa:b2:66:70:31:f9:91:
                    fa:dd:2a:d6:01:07:17:77:1d:a4:ef:f7:5c:f2:81:
                    e8:48:cf:6b:ec:3b:2a:3f:96:60:c8:6d:9e:fc:7e:
                    9e:7e:5d:0d:70:08:4e:68:a5:ea:d5:b6:11:9f:23:
                    93:71:04:29:2d:51:a7:76:b4:23:02:0f:05:36:6d:
                    92:13:57:5e:06:71:71:f9:08:3c:c6:f9:97:6c:26:
                    5a:c1:61:81:87:32:e3:22:3e:8a:2a:c6:77:8a:be:
                    2b:28:44:ed:ae:c0:c0:c1:c9:d1:4e:b0:cf:4d:40:
                    91:5a:72:5b:77:97:fc:dc:ec:b0:d9:cc:fc:f3:c5:
                    b9:8f:93:55:e9:25:0b:5a:64:76:05:62:b7:32:1b:
                    29:1a:3a:3d:26:c1:f5:39:b2:f5:60:f0:34:a3:17:
                    c2:7b:83:0a:67:d8:eb:89:7e:f4:9e:57:02:5d:21:
                    96:9c:23:1e:31:57:e1:69:db:0e:ba:0b:d3:08:e1:
                    1d:8e:dc:9e:04:d8:c7:7b:f4:f3:7e:9e:0b:d6:b4:
                    23:2e:61:25:df:63:1b:7e:49:51:95:17:97:e7:12:
                    27:a2:12:63:5a:4f:0b:7f:69:7c:7f:dc:e8:eb:a0:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:CB:86:FA:71:CC:47:C9:05:71:AD:5C:E9:FD:9C:F0:01:AA:0E
            X509v3 Authority Key Identifier:
                keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:2c:41:02:8a:f1:38:16:84:98:ab:ff:9e:8c:91:3f:b1:
         c7:8f:c5:df:eb:ca:fe:83:1a:9f:09:92:34:ec:44:1e:55:67:
         0c:d8:33:59:32:5d:29:5d:b9:a6:4a:58:34:25:bd:b7:30:80:
         69:5e:31:b6:50:13:16:3b:2a:d4:30:bb:84:fe:3a:22:e6:99:
         45:cc:06:a4:ab:2b:a8:16:80:cd:80:43:0c:dc:87:b8:0c:85:
         a1:9a:4a:62:ab:d4:f6:57:11:f7:ec:16:ba:35:a1:e3:b4:0d:
         c3:17:cd:25:e4:70:43:45:29:c7:40:e4:9f:7b:33:f9:8e:72:
         81:c8:4b:ec:1f:bf:c5:4f:89:97:ab:6a:70:a9:fe:51:36:79:
         e6:5e:44:4c:c9:29:48:a8:5c:52:d0:d6:f4:72:54:a4:c9:00:
         d1:72:dc:49:ef:0c:38:8e:60:59:da:04:a4:af:6d:b4:bb:8f:
         c4:25:db:64:fe:c3:3e:52:e4:be:37:b9:c8:a4:c6:db:16:7f:
         f2:c4:fd:a3:a4:48:4d:3c:81:3b:25:17:79:2e:02:07:88:b8:
         46:98:42:ca:28:73:c2:19:f5:89:e4:b9:59:bb:38:5a:c4:a7:
         c6:4e:09:c9:27:87:e6:68:bd:74:64:a9:94:a8:ea:98:24:d6:
         ba:12:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:38:13 2024 by rpki-client on console-fra.rpki-client.org