Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File:                     AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier:          Yzf+H8qGWJs4f527Kzwt0bGempBeEpbTi4fqjkjHEPc=
Subject key identifier:   42:F4:F0:5E:1C:02:0D:BB:76:19:F5:BA:98:BC:23:C2:55:53:2C:D6
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       018F5437BE70EE8565BA676D33399D581C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number:          03AC
Signing time:             Tue 07 May 2024 18:01:30 +0000
Manifest this update:     Tue 07 May 2024 18:01:30 +0000
Manifest next update:     Wed 08 May 2024 18:01:30 +0000
Files and hashes:         1: AiuJFdU139095247ceXn-qM_CWs.roa (hash: 6eqrR6Vd8z0QZNBGpFi9HgzUo3rVbDF+l0txeIMmIHU=)
                          2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: iN/JxvTKqLkB/ESLaOQjI6g8PfFg/VbtQKe1gSRt1q0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:54:37:be:70:ee:85:65:ba:67:6d:33:39:9d:58:1c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: May  7 18:01:30 2024 GMT
            Not After : May  8 18:01:30 2024 GMT
        Subject: CN=42f4f05e1c020dbb7619f5ba98bc23c255532cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:76:a8:59:46:d8:72:a7:32:48:1d:a2:ee:
                    07:49:e2:3e:27:0c:a2:f6:26:95:98:79:8f:7f:77:
                    a7:4a:62:14:ed:b2:10:fd:61:97:53:6a:7c:8c:9c:
                    f2:1b:55:5d:ec:9c:de:d9:db:6e:37:94:ab:aa:ec:
                    0a:80:e9:da:34:01:88:5c:59:8f:d3:2a:79:7e:8a:
                    0a:5f:06:02:9e:cb:a8:da:d0:eb:b6:b2:46:5d:52:
                    97:78:bd:0c:6b:90:52:7e:1d:17:59:91:89:cd:d8:
                    76:e0:b5:c9:16:a8:7e:01:a8:54:7c:a7:b1:6e:99:
                    8b:4f:fd:5f:e2:d8:a1:6d:b1:de:69:79:6b:65:4c:
                    bf:60:3e:82:03:07:3f:be:2f:ae:dd:2a:b1:95:02:
                    b0:68:9d:64:2a:47:0d:e8:7a:92:8b:6a:0e:00:50:
                    9d:18:08:68:f4:79:ef:b8:33:9f:42:0d:80:f9:09:
                    0e:e8:fa:95:91:7e:69:47:c9:b4:50:56:72:fa:5c:
                    3b:f5:2f:38:17:70:6c:59:29:5f:b1:2d:44:6f:4a:
                    25:71:96:70:b7:32:6e:1f:18:71:52:16:bb:2e:9a:
                    e3:83:c4:ae:e8:74:63:7f:f6:61:09:75:4a:d3:ce:
                    9a:41:06:bd:40:23:58:74:90:46:b9:88:dd:96:3d:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F4:F0:5E:1C:02:0D:BB:76:19:F5:BA:98:BC:23:C2:55:53:2C:D6
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:45:72:10:33:49:6e:e9:f8:04:a8:c6:43:9a:67:44:f8:8e:
         f6:2a:ca:f1:74:da:7a:70:f2:5e:55:c6:59:7a:d2:0b:c6:b5:
         ca:43:62:5f:f5:af:0c:f4:bd:37:1a:39:89:6f:c4:24:34:49:
         81:90:2a:d9:92:d3:25:8b:30:72:74:14:19:0e:b9:ce:1a:ca:
         cb:4f:24:85:56:25:af:85:33:4b:fc:4a:31:2c:93:dc:33:73:
         79:34:86:06:fd:02:d6:c1:1b:b0:a8:8c:7d:a6:9a:8d:b2:a2:
         3d:78:f5:44:d5:5b:03:7c:ba:c2:2b:72:06:1b:cf:f1:a4:c2:
         81:ee:d6:21:d4:25:fd:a4:1d:d1:00:5d:9f:49:d5:c7:eb:04:
         60:01:43:e5:ca:9f:fa:05:ff:e6:91:f7:0b:a6:de:37:7e:8d:
         8a:51:9a:33:33:dc:3d:6f:c5:2c:10:2c:d7:7e:be:6b:e9:7e:
         5d:28:4e:65:e4:7b:81:85:d7:0b:42:02:14:3d:95:e6:72:c1:
         5b:a9:7a:ad:3d:45:43:11:52:8d:1b:7a:68:1b:e6:a7:28:4c:
         ea:a1:2f:de:00:c5:18:e5:41:21:3a:5e:d6:28:2e:82:02:c5:
         00:3d:c4:f9:c2:32:5e:9b:f2:77:97:1d:a0:6d:ad:d5:01:b0:
         cb:99:84:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:53:15 2024 by rpki-client on console-fra.rpki-client.org