Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File:                     khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier:          /axSH5DZ0PLNs2+xOiCvST6IQfE48QZmFp8X0nAEkAA=
Subject key identifier:   66:47:D1:AE:A9:F4:74:D6:98:B8:DD:5C:8D:AA:3B:1B:28:BB:AF:FB
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer:       /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial:       018F882484092AA9B18BE7F477D6A5554223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number:          0E8B
Signing time:             Fri 17 May 2024 20:00:45 +0000
Manifest this update:     Fri 17 May 2024 20:00:45 +0000
Manifest next update:     Sat 18 May 2024 20:00:45 +0000
Files and hashes:         1: eTOEUNbjSrG2VlTF4-EOHnuknqE.roa (hash: xyXkjWhPbMnqzynHzFpjZcZeLuCmj4Mxdk617FfiS8Q=)
                          2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: +7xD932yTx87kxBcCb7PNgwSzUCPgKgRA0HvIibwtSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:84:09:2a:a9:b1:8b:e7:f4:77:d6:a5:55:42:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
        Validity
            Not Before: May 17 20:00:45 2024 GMT
            Not After : May 18 20:00:45 2024 GMT
        Subject: CN=6647d1aea9f474d698b8dd5c8daa3b1b28bbaffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:5e:2a:a4:0c:eb:6e:72:00:6a:8c:7f:40:
                    b2:7c:7b:da:05:54:db:ed:80:4e:48:e2:f0:bf:c5:
                    d6:fc:aa:5b:b5:ea:a1:34:ce:04:a1:f0:79:04:68:
                    13:48:e8:0b:f4:1c:48:3a:5d:f4:97:d7:3c:5a:27:
                    3f:fb:4e:ef:ae:2d:2e:7b:65:81:38:81:2f:61:0d:
                    36:f2:e3:1f:6b:72:91:9d:3a:72:c5:e3:2f:11:dd:
                    bc:4f:df:63:3e:b5:40:87:cb:e0:b1:39:ed:58:2b:
                    4a:da:48:58:d5:b9:aa:70:36:4e:45:33:36:d7:a8:
                    ab:0f:65:2c:6f:9d:2e:19:8f:12:c8:01:13:ab:f3:
                    d5:e3:e7:db:44:ee:e0:fd:cd:13:0d:ae:1f:af:39:
                    80:ef:bd:9c:bf:51:97:97:f5:99:dd:58:37:29:16:
                    9a:41:e4:54:05:a0:e3:01:a0:85:5b:10:a2:9c:80:
                    14:68:d7:93:1d:d0:df:58:c7:18:60:91:99:e4:c7:
                    3d:f5:a6:29:dd:66:4c:5f:0e:e7:a9:17:68:36:4d:
                    8b:80:2d:63:30:b0:75:9e:c4:bf:77:0b:9f:49:f4:
                    5e:e3:2d:03:3c:13:6b:9a:6d:c7:55:b1:4c:e1:ce:
                    2d:11:a2:e0:7b:66:23:ad:81:84:a9:82:67:de:91:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:47:D1:AE:A9:F4:74:D6:98:B8:DD:5C:8D:AA:3B:1B:28:BB:AF:FB
            X509v3 Authority Key Identifier:
                keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:4d:88:38:78:c5:38:ef:34:26:f2:e4:a6:27:03:d3:a1:
         40:e3:20:a0:12:6b:92:43:ce:25:ad:2d:70:c1:3e:a0:7a:aa:
         1e:12:33:29:2c:34:ef:77:74:c6:d3:47:c0:f8:13:e1:3e:23:
         2c:bb:48:0f:18:ec:d5:5e:a8:df:87:74:5c:4c:0d:b2:44:84:
         6a:64:5b:66:6d:4f:99:99:2f:db:4b:2f:19:48:70:f6:c9:c2:
         4b:5f:45:3f:45:d9:64:51:20:d2:15:90:35:6d:69:6f:44:43:
         50:b7:9e:6d:dc:47:ba:c2:56:db:b7:3d:82:b7:07:cd:4f:6a:
         20:94:f1:0b:f2:a9:33:ad:a7:d3:cc:fd:e4:35:7c:4e:de:7f:
         bd:6f:6b:fa:8d:9c:32:72:38:d2:bd:72:fe:ac:ed:8b:64:49:
         6f:ea:17:b5:e5:b4:46:00:b8:6e:3b:b0:14:1f:2e:c4:ee:9d:
         7a:d0:88:ca:2f:3e:25:f0:89:5a:e6:67:6a:04:e8:ae:00:82:
         64:17:7a:1b:4d:c5:7a:43:5c:ff:ba:19:3d:1b:1f:8c:8e:7c:
         d7:ef:eb:a5:ff:aa:88:39:b8:69:38:2f:49:68:10:d4:5f:f9:
         fc:bf:46:82:79:b6:34:bd:ed:b5:ab:c7:5b:01:4a:4f:36:fc:
         b7:af:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:20 2024 by rpki-client on console-fra.rpki-client.org