Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
File:                     zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json)
Hash identifier:          fZva33P6Fo9WJTddQ+J9BMS7xnpkMVY57izITrMmFmA=
Subject key identifier:   30:75:1D:8B:CE:50:7F:A0:F9:83:76:52:42:8F:71:36:54:00:5C:46
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Certificate issuer:       /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial:       018F874A1D6C60100DBBB99A22A1F94BB676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
Manifest number:          0C01
Signing time:             Fri 17 May 2024 16:02:12 +0000
Manifest this update:     Fri 17 May 2024 16:02:12 +0000
Manifest next update:     Sat 18 May 2024 16:02:12 +0000
Files and hashes:         1: yrVUb2GOLSvwIQBrU4aaJHlqPmg.roa (hash: XRVO9Jj8i9wAZoXyBytzkTxJuOuW8bpEeWX4dIw+kAs=)
                          2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: qr0m2D78h1VmSiVExQ1Xtuejeg3TEuvGuOAiMri+YZc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:1d:6c:60:10:0d:bb:b9:9a:22:a1:f9:4b:b6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
        Validity
            Not Before: May 17 16:02:12 2024 GMT
            Not After : May 18 16:02:12 2024 GMT
        Subject: CN=30751d8bce507fa0f9837652428f713654005c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:02:00:8b:47:22:13:5e:29:2a:a5:7a:37:4d:
                    a1:c1:87:a5:e7:7f:28:73:ad:9e:fe:67:3a:a1:ea:
                    ea:81:7b:55:45:3e:f0:9b:87:e3:c7:84:5b:e8:5d:
                    a1:93:ac:7d:2e:ab:e9:7f:0b:0f:64:02:01:01:cb:
                    7a:8c:d6:fa:80:43:7f:00:f2:f9:fa:ed:75:a2:5f:
                    d3:ba:f1:e5:da:85:d0:b7:4c:7b:77:bc:14:80:27:
                    ec:d5:02:c1:3b:4b:e3:52:36:51:1b:8a:d2:a3:07:
                    5d:4b:68:37:5c:84:b5:57:b6:0c:c1:c4:74:51:15:
                    83:95:14:8c:23:45:1f:be:d9:20:8b:a2:0c:5b:ad:
                    57:9f:47:74:42:37:89:44:85:92:b6:e3:a0:e3:5b:
                    3b:26:65:42:21:48:16:85:f8:5c:37:56:d4:69:c8:
                    d9:31:14:9c:b7:65:7d:3d:7f:49:2f:58:9a:bd:b7:
                    2d:37:90:77:a7:98:df:4d:3f:d5:42:f8:16:7e:62:
                    32:11:39:b1:10:bd:63:1c:21:6f:0a:82:10:84:c2:
                    ae:39:3a:47:4c:4e:85:4d:d5:0c:70:5a:9d:34:2a:
                    b6:a4:78:b7:b3:49:52:b8:a9:55:24:a6:18:8a:83:
                    3d:6c:06:97:77:81:8d:61:a0:2c:86:e9:58:ec:51:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:75:1D:8B:CE:50:7F:A0:F9:83:76:52:42:8F:71:36:54:00:5C:46
            X509v3 Authority Key Identifier:
                keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:95:ea:a9:aa:aa:fc:02:de:69:71:ef:1e:97:8f:2d:c5:b0:
         ab:b4:26:9f:40:63:ab:78:72:db:fd:30:61:ed:e8:0a:ea:70:
         2c:42:1e:e1:fa:37:46:83:36:f8:91:82:6d:b9:6a:a7:f2:b8:
         43:68:f2:dd:f4:a9:20:64:b5:4f:c7:26:53:71:32:64:41:bb:
         6b:6c:cd:e4:d0:f2:42:b2:86:12:0d:0e:6e:62:17:9d:9e:ee:
         3c:c3:14:08:e0:8d:bc:db:5d:d0:43:60:1c:4c:45:3b:2d:56:
         5a:53:83:94:a3:ff:13:24:a1:97:a4:ba:11:04:aa:0e:98:17:
         7f:b5:17:10:18:29:b5:ac:0b:ee:95:8e:f4:f6:79:e9:c6:d8:
         6d:f2:d8:e2:b5:d4:a4:e1:26:0d:9b:bd:0c:c5:e4:38:74:82:
         df:c1:a5:bd:bf:ec:01:1f:cb:58:fa:33:73:a9:0a:e7:d7:ab:
         49:5c:33:52:08:02:8c:ea:ad:eb:64:5d:b6:6a:58:b5:fb:a6:
         50:b1:20:4b:af:93:6f:39:9c:ed:1d:90:11:43:50:35:d8:e9:
         3e:5d:83:29:8c:3b:ac:a9:c5:c8:ca:10:9e:67:bd:e8:b6:0a:
         11:45:39:19:fa:88:c6:15:89:5c:0d:72:dd:c9:81:07:e5:12:
         a2:14:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:38:59 2024 by rpki-client on console-fra.rpki-client.org