Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File:                     S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier:          SxNZO4G5klKjTXA9jNt0ofzdAEJb9Ir3ldFs2aoPL78=
Subject key identifier:   55:A7:A0:90:EB:DD:DC:31:9A:E1:CF:12:D0:A5:07:6C:BA:29:2E:68
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer:       /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial:       018F874AE062ACA1E80DF88C22D31F2C626D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number:          0E98
Signing time:             Fri 17 May 2024 16:03:02 +0000
Manifest this update:     Fri 17 May 2024 16:03:02 +0000
Manifest next update:     Sat 18 May 2024 16:03:02 +0000
Files and hashes:         1: DNscmTrwDjpnXx6Xf24JJXOkjp4.roa (hash: hjSaW37B3KSQyzYjZeXWdvbj3mXfIz+dkkoryhr4ibY=)
                          2: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: xsU4BPVHZ6yECO0/72sCWWR0M8PD68zGmXqkvHtuMVE=)
                          3: gJL2N-lpjfEGy9e3OPLBYnUsoGQ.roa (hash: fDjV06E2/+/Vcn4UGYdhKNzKtDOcDDDtLLUoX40HEDo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e0:62:ac:a1:e8:0d:f8:8c:22:d3:1f:2c:62:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
        Validity
            Not Before: May 17 16:03:02 2024 GMT
            Not After : May 18 16:03:02 2024 GMT
        Subject: CN=55a7a090ebdddc319ae1cf12d0a5076cba292e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:f3:d5:93:c1:67:b4:fe:0a:f4:5c:9e:12:
                    0b:e4:a7:5b:ed:7f:14:d6:e8:33:8c:94:0d:37:f2:
                    9e:65:97:6b:c7:85:d9:db:3b:c9:bb:fa:c9:0d:01:
                    85:62:40:c0:3f:1c:a0:3e:15:75:15:fa:fe:5b:30:
                    98:3e:8c:79:7f:55:af:65:94:10:0a:39:27:8a:7b:
                    ba:d4:1a:75:07:f9:fe:1e:13:34:6a:20:10:a1:ff:
                    7f:ec:6d:03:24:af:8b:7c:f3:96:be:88:83:44:46:
                    44:64:ed:45:f9:f9:b9:1a:db:1e:a6:c4:b7:3f:1a:
                    d0:02:33:88:a1:b2:f4:5a:93:4e:bd:80:51:7e:77:
                    7a:49:2c:80:f2:92:7e:72:b0:9e:ec:f6:ff:76:62:
                    16:f2:f7:65:15:67:a7:2b:e6:60:2c:33:5d:4c:10:
                    94:a8:42:96:b5:5f:a6:34:9d:2e:b7:bd:66:54:04:
                    33:ed:24:89:7c:ce:d0:28:d9:eb:cf:37:3e:24:67:
                    b4:16:4a:cc:8b:42:93:f5:96:27:47:3e:fa:0d:79:
                    16:b2:2c:0f:5c:6a:0a:2c:ef:5d:9c:47:ca:2c:e1:
                    bb:9a:76:7f:c9:26:41:1b:be:a8:3d:7d:09:c0:f9:
                    81:97:8e:7c:c7:16:e7:8e:2c:12:13:49:ee:ea:cb:
                    ce:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:A0:90:EB:DD:DC:31:9A:E1:CF:12:D0:A5:07:6C:BA:29:2E:68
            X509v3 Authority Key Identifier:
                keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a5:32:ec:24:bf:73:46:a1:2c:4c:29:f9:c5:ff:62:c6:03:
         90:58:02:24:79:d9:01:e8:93:af:41:79:25:2a:0b:8d:cc:61:
         62:3f:78:b5:93:84:12:74:a7:46:72:30:38:7b:35:3b:1d:c6:
         45:d4:c5:41:65:f6:59:a4:ad:5a:80:25:f2:e1:a9:76:29:e6:
         ae:76:dc:06:72:85:67:18:f7:f6:64:be:ae:84:e9:b1:58:25:
         c7:1d:aa:1e:3a:cc:84:35:02:6f:6e:ea:68:b7:0e:c2:16:42:
         f2:3e:aa:a6:ed:70:39:e9:da:94:b9:11:d0:a2:1b:37:2f:81:
         87:77:1a:b3:71:1e:c3:75:ac:74:90:d6:48:96:7c:52:5d:c5:
         66:0a:a4:3c:cf:36:f3:7b:3e:04:04:2c:f8:d5:8a:37:47:b9:
         1b:c8:dc:ff:8a:9a:07:a3:1d:bc:1f:51:be:8e:af:80:26:d7:
         ae:50:53:47:82:9f:88:77:58:84:b8:ad:c4:b7:06:9e:93:ee:
         ab:ac:75:db:09:a7:f2:7f:02:bd:7e:a4:cb:9e:b2:98:b7:bc:
         1e:7e:72:d6:c8:a4:43:ca:81:42:52:87:6e:9b:d7:a4:fb:6e:
         cf:cb:b8:15:c1:58:ef:e0:3f:e9:7b:1b:27:d7:ae:a5:f3:11:
         ca:24:c9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:36 2024 by rpki-client on console-fra.rpki-client.org