Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File:                     eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier:          oX/fwxV8x/HiPV/k9+W/gcHKQnNUYKuzqXSIWhcmuyc=
Subject key identifier:   27:2C:FA:15:D8:2E:F3:01:4C:E9:05:56:EA:67:6B:D0:23:83:B3:FD
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer:       /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial:       018F885B353635A133892DEA8AD10C517B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number:          0CA2
Signing time:             Fri 17 May 2024 21:00:29 +0000
Manifest this update:     Fri 17 May 2024 21:00:29 +0000
Manifest next update:     Sat 18 May 2024 21:00:29 +0000
Files and hashes:         1: R72GYrk4HwBQWQe_AsSO2kZ6u58.roa (hash: L2G9HPx42ifnYP123qAw3CGoLvdoH6OsKvgkGESdv+c=)
                          2: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: 8zqmNh4CN4XF34DvnM4699eahv95AE+iUtczqmNgtKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:35:36:35:a1:33:89:2d:ea:8a:d1:0c:51:7b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
        Validity
            Not Before: May 17 21:00:29 2024 GMT
            Not After : May 18 21:00:29 2024 GMT
        Subject: CN=272cfa15d82ef3014ce90556ea676bd02383b3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:a9:16:e4:a4:ed:96:d6:60:d0:f2:cf:4d:
                    7b:4e:e2:d2:14:ed:67:f6:77:26:85:49:84:bd:28:
                    a7:78:d0:ef:b3:14:ef:b2:63:6b:45:76:b1:04:7c:
                    10:f2:51:9e:6f:82:8f:31:72:8e:70:a2:0f:88:e7:
                    5b:69:72:0c:a0:78:57:d8:3b:f3:da:d2:27:4a:61:
                    a9:20:e0:4f:1f:e8:7a:aa:17:37:f7:a4:bd:cc:de:
                    7d:54:62:80:0d:32:ed:94:c0:97:f0:44:27:21:04:
                    1f:4f:ac:0e:1b:1f:35:9f:82:87:fd:94:a4:81:04:
                    4d:49:5b:68:be:46:dc:ed:32:cf:30:00:c7:2e:90:
                    9b:e5:76:78:5f:8e:66:33:72:4a:2a:e6:6d:45:76:
                    40:a1:a2:a0:1e:dd:3e:72:1d:c2:44:d6:36:2d:fb:
                    e4:d8:89:d8:7d:6f:e3:96:f5:04:41:78:40:e1:b5:
                    98:8b:2b:79:26:46:e5:65:f9:ff:62:20:83:1c:b1:
                    4c:e0:00:d7:ac:0d:16:c4:21:15:f2:e9:df:94:3a:
                    6c:29:1b:b1:8e:ef:54:b2:a5:63:6d:31:95:b4:a5:
                    81:48:be:99:0e:b0:9c:f2:c8:19:d3:d3:8b:aa:b2:
                    1b:04:82:40:88:c7:ce:60:7e:29:21:d0:bf:dd:33:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2C:FA:15:D8:2E:F3:01:4C:E9:05:56:EA:67:6B:D0:23:83:B3:FD
            X509v3 Authority Key Identifier:
                keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9a:2f:fa:c4:c9:22:a7:dc:06:9e:7a:e3:4d:16:79:87:13:
         1e:80:ac:49:ac:a2:4f:ea:c1:b9:1a:dd:06:4d:d2:2e:a4:7c:
         db:4d:86:e5:19:4d:1c:9c:04:ff:28:00:61:8e:c2:b8:d0:06:
         90:4e:cb:af:7b:0e:91:b0:75:ce:1b:94:fc:f9:36:16:58:a3:
         cb:7c:e8:17:a4:e3:5f:5e:a6:4e:a2:21:73:6f:43:96:64:32:
         4d:88:bf:a5:73:12:e3:f8:08:7f:ee:6d:33:b1:db:79:78:bf:
         53:90:71:93:47:37:a7:6d:bb:ea:7b:e8:7f:de:a3:a4:27:05:
         33:35:4c:95:15:8a:7f:fc:2a:12:5e:8b:cb:d3:38:8d:5b:9b:
         f4:61:02:9b:03:9a:54:77:5f:ab:b2:84:a1:63:3e:33:1a:85:
         2f:69:a6:cb:ea:3c:1d:fe:b1:0e:53:ae:b9:05:1a:81:42:7b:
         56:b5:73:08:69:e5:48:c7:e2:79:6f:de:3e:81:a9:cc:7d:65:
         26:df:c8:e7:5d:51:9d:e8:9e:7d:ac:10:94:96:ce:6b:1b:c8:
         db:3b:40:b4:ca:bd:0f:50:35:95:6b:fe:dd:24:ab:50:fe:4d:
         d5:21:7b:cf:2d:7f:f9:f9:e2:c6:ee:09:bc:41:6f:b5:dc:9d:
         6e:d2:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:46:03 2024 by rpki-client on console-ams.rpki-client.org