Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/S0PbJxz_w8s8pOiRKGj5eiQPanM.mft
File:                     S0PbJxz_w8s8pOiRKGj5eiQPanM.mft (raw, json)
Hash identifier:          JjMGcYOPWuW5ywxT9ZTxVqxJEB694WYuF8ZQDRRzttg=
Subject key identifier:   EB:E2:09:35:59:D6:CB:D4:36:C3:CB:21:F0:56:F1:36:EE:1A:59:6C
Authority key identifier: 4B:43:DB:27:1C:FF:C3:CB:3C:A4:E8:91:28:68:F9:7A:24:0F:6A:73
Certificate issuer:       /CN=4b43db271cffc3cb3ca4e8912868f97a240f6a73
Certificate serial:       018F87ED08FE24FFDF2D88C2A2DEB5FEE53F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0PbJxz_w8s8pOiRKGj5eiQPanM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/S0PbJxz_w8s8pOiRKGj5eiQPanM.mft
Manifest number:          0442
Signing time:             Fri 17 May 2024 19:00:09 +0000
Manifest this update:     Fri 17 May 2024 19:00:09 +0000
Manifest next update:     Sat 18 May 2024 19:00:09 +0000
Files and hashes:         1: OEsJhMwRJkIR92wWIYE2ncQtrzs.roa (hash: 9vt4q79G7qHxeV9w5tjflMb8yGsuM7bEjbl1CxJ8ejs=)
                          2: S0PbJxz_w8s8pOiRKGj5eiQPanM.crl (hash: 1YLza4IXg9MHj/ooEWsIEqA9YffZetHCXVElXC+ovTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/S0PbJxz_w8s8pOiRKGj5eiQPanM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/S0PbJxz_w8s8pOiRKGj5eiQPanM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0PbJxz_w8s8pOiRKGj5eiQPanM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:08:fe:24:ff:df:2d:88:c2:a2:de:b5:fe:e5:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43db271cffc3cb3ca4e8912868f97a240f6a73
        Validity
            Not Before: May 17 19:00:09 2024 GMT
            Not After : May 18 19:00:09 2024 GMT
        Subject: CN=ebe2093559d6cbd436c3cb21f056f136ee1a596c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:05:01:c9:8a:2a:e1:e5:de:cc:33:65:aa:
                    a9:5a:be:23:73:42:f4:07:45:db:aa:78:a1:ec:e6:
                    31:c9:93:66:a3:88:19:9f:70:56:b5:b0:9b:64:27:
                    6f:6e:e3:a7:49:5a:f6:06:00:65:9e:1e:fb:42:d4:
                    78:32:99:1b:82:fb:ee:5a:2b:3b:a4:ce:42:f6:1d:
                    bb:da:71:16:1a:0a:20:8b:12:74:34:36:90:40:85:
                    24:46:23:5d:38:03:94:74:42:43:25:b3:68:3b:34:
                    d4:09:c1:c5:32:9d:12:6a:87:bf:35:3c:54:72:53:
                    e4:e0:28:b6:ab:08:15:55:69:50:ac:38:43:c9:83:
                    da:bd:04:18:d3:51:6e:52:00:e5:2f:54:3c:60:c8:
                    69:5f:e2:0f:f3:14:99:51:f7:b8:dc:65:79:77:dd:
                    c4:a5:d3:1c:76:67:4e:30:58:47:05:9d:b3:a5:15:
                    6c:87:0d:8a:04:0a:6f:49:da:2e:ec:50:05:75:c0:
                    6c:41:09:d7:4b:cc:48:c8:ed:78:02:e8:db:38:5c:
                    e7:20:2b:d0:99:57:b3:c9:0c:e6:7a:5b:f7:c9:37:
                    d2:fa:83:33:e5:4d:11:6f:63:c3:95:23:f5:04:f7:
                    59:77:96:1b:c5:cf:f5:bf:d5:7f:cf:3c:04:12:00:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E2:09:35:59:D6:CB:D4:36:C3:CB:21:F0:56:F1:36:EE:1A:59:6C
            X509v3 Authority Key Identifier:
                keyid:4B:43:DB:27:1C:FF:C3:CB:3C:A4:E8:91:28:68:F9:7A:24:0F:6A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0PbJxz_w8s8pOiRKGj5eiQPanM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/S0PbJxz_w8s8pOiRKGj5eiQPanM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/S0PbJxz_w8s8pOiRKGj5eiQPanM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:7a:9b:7a:f6:b8:83:16:23:80:39:cd:19:48:3e:bb:a7:
         e2:95:ec:c7:7c:80:aa:c9:ba:6b:02:1f:e1:2b:3b:3f:69:0a:
         80:1d:f7:77:ce:df:ad:04:89:a9:a0:ec:0d:79:38:64:51:10:
         bc:48:75:7e:29:1d:83:c0:46:59:64:09:f1:90:a9:f8:d4:e0:
         e6:b7:54:1b:1c:39:dd:46:29:5c:ad:b7:31:18:7e:ac:0b:0b:
         3a:5f:10:13:f7:78:5d:d6:ba:19:5f:67:3a:96:75:3f:34:d7:
         37:11:35:61:26:35:cc:e2:89:10:bc:77:34:07:08:07:6d:ab:
         fb:95:86:55:be:a7:45:2e:1b:42:6e:64:71:90:7b:61:ae:f6:
         e6:f7:4e:94:70:1f:81:e6:31:0b:66:df:cc:db:cf:71:f4:be:
         6d:7b:58:97:be:45:63:f5:bf:b0:31:c1:37:38:9f:03:a7:e8:
         22:0e:b1:26:f0:71:b3:20:e6:68:7d:92:0c:9f:9c:a2:9c:84:
         05:79:3a:be:cc:5e:11:b4:b3:36:97:89:36:85:d1:14:10:aa:
         7b:b9:47:0f:f2:42:a2:15:1b:41:45:c6:1f:fd:ec:3b:82:4c:
         f4:00:c2:fd:ae:da:48:59:a0:e1:e0:22:e4:ab:2d:8c:82:95:
         db:43:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:08 2024 by rpki-client on console-fra.rpki-client.org