Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File:                     iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier:          mJTuVgCRPZQzQJe/IiaYPk21rPxiG4aJUDtZTcN/8l0=
Subject key identifier:   34:04:F2:5B:7A:97:67:68:12:83:85:C3:CE:AA:56:B6:86:6E:B4:F1
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer:       /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial:       018F87B69E6FD54505424C04F76EB5E93D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number:          0822
Signing time:             Fri 17 May 2024 18:00:43 +0000
Manifest this update:     Fri 17 May 2024 18:00:43 +0000
Manifest next update:     Sat 18 May 2024 18:00:43 +0000
Files and hashes:         1: dv2KRNewtlMaGFlsZ78NX4zicy0.roa (hash: UUKFwtkkCqiUeLybFNWfX36h5zpkB9MEzu8rzJiJcqs=)
                          2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: qJcM3eeBg47N4D+Gd4fgeuVHAFTMcD13zWLTwgeGDKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:9e:6f:d5:45:05:42:4c:04:f7:6e:b5:e9:3d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
        Validity
            Not Before: May 17 18:00:43 2024 GMT
            Not After : May 18 18:00:43 2024 GMT
        Subject: CN=3404f25b7a976768128385c3ceaa56b6866eb4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:3a:54:99:20:55:e8:93:02:9f:bf:4a:5a:
                    a6:dc:64:1f:30:95:2e:95:39:da:21:64:72:27:8a:
                    af:92:d0:2c:5e:51:62:98:53:9d:ed:62:17:05:53:
                    95:5f:68:f2:61:f0:0c:a2:10:79:2e:9e:19:9a:2e:
                    37:95:45:26:d9:7f:6a:0b:53:7b:0f:da:2e:64:db:
                    c8:13:24:bc:43:b7:c8:f1:55:5a:12:8c:ac:83:cc:
                    4b:40:8a:a4:3c:c7:89:95:50:d2:c5:1e:d5:01:a0:
                    7a:37:ef:7f:b0:ef:7d:07:0c:eb:e5:5d:6b:23:44:
                    44:cf:15:a1:d3:65:4b:89:ea:c5:10:96:9b:56:3c:
                    d1:46:29:88:2c:b7:ae:2b:34:b2:ff:96:b0:f7:73:
                    83:15:84:4c:3e:ff:00:43:95:6c:5d:a0:15:7e:5a:
                    44:8f:ae:63:b6:20:9d:d5:f0:91:b0:96:64:22:d9:
                    3b:8c:1a:88:25:9d:e1:05:e2:22:3e:12:b4:e7:fd:
                    8a:59:28:6c:3a:ec:32:ca:17:2a:f8:e1:2a:2b:b0:
                    bd:ea:ad:1d:c6:c0:81:c8:0d:30:1e:62:09:5d:5f:
                    9a:85:7e:46:98:26:b4:69:e7:bc:f4:71:79:6e:8d:
                    39:20:57:5f:11:21:22:14:36:e4:a0:dc:69:7f:2d:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:04:F2:5B:7A:97:67:68:12:83:85:C3:CE:AA:56:B6:86:6E:B4:F1
            X509v3 Authority Key Identifier:
                keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:be:c7:ea:0f:86:8e:ea:12:fd:12:34:65:93:33:0b:37:eb:
         2e:f4:61:5b:77:96:fb:08:87:e9:69:1b:c4:8a:37:64:1d:10:
         7e:14:1f:fa:c6:6b:3c:d8:1f:cb:72:77:a3:52:4a:96:6f:c7:
         ee:49:15:8a:24:f3:26:9c:d8:c6:d3:32:5a:92:fe:10:91:62:
         3f:20:24:d6:36:e0:49:5c:66:87:c5:01:d0:58:ee:2a:c0:30:
         7e:e4:52:f5:4e:f6:ac:d3:75:2e:58:1d:c9:70:1e:6c:27:31:
         82:2b:57:2a:e0:06:1f:97:c2:bf:88:47:1e:fe:7a:54:14:59:
         08:77:9c:2c:e7:a2:58:83:3e:78:54:4f:26:f5:b3:a9:0e:da:
         63:6e:6e:15:27:68:db:60:d1:f3:cb:5c:32:24:a5:45:76:ac:
         65:01:c3:df:45:e9:01:f1:ce:4c:64:34:0e:d2:0a:c3:dc:31:
         c3:39:6e:24:a8:9c:a5:84:c9:0b:df:cf:c1:f2:a2:1c:62:63:
         de:eb:b2:4e:d5:e5:8a:24:14:39:3a:7a:94:42:c8:46:7c:3c:
         73:b5:89:3a:ac:a3:29:4f:78:fe:e6:6f:fe:91:df:40:01:a1:
         0f:77:8b:0d:f2:40:5d:07:c6:60:12:79:9a:68:0a:d5:0e:f8:
         86:79:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:14 2024 by rpki-client on console-fra.rpki-client.org