Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
File:                     RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json)
Hash identifier:          LU8NnFpdpm6rAvxsXts99Jskc/tmUctS6T+CjKgtLzk=
Subject key identifier:   5E:29:28:CD:A2:01:5D:CB:40:0D:30:EA:18:20:E8:FE:6C:E0:A8:CA
Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A
Certificate issuer:       /CN=467350d5975a272a88bfb8810af45981cd55935a
Certificate serial:       018F87ED10E14647ABC7A3CCC86901B93012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
Manifest number:          0A72
Signing time:             Fri 17 May 2024 19:00:11 +0000
Manifest this update:     Fri 17 May 2024 19:00:11 +0000
Manifest next update:     Sat 18 May 2024 19:00:11 +0000
Files and hashes:         1: DERKl7Uj5te0OHgglTER-FWfA-s.roa (hash: cuTtyIeIzoarm0DZ5qkrV3t6rH6hyR6yw0xnPOGo7Rc=)
                          2: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: XR64MQm3RxZoLfNrajxM+XySkEnLrEYFQgM6kxyZwes=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:10:e1:46:47:ab:c7:a3:cc:c8:69:01:b9:30:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a
        Validity
            Not Before: May 17 19:00:11 2024 GMT
            Not After : May 18 19:00:11 2024 GMT
        Subject: CN=5e2928cda2015dcb400d30ea1820e8fe6ce0a8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:ef:c9:cf:03:22:f3:04:0f:58:71:9a:21:
                    bb:ce:e1:68:8b:ac:7a:ac:97:e4:b3:47:16:03:57:
                    3a:05:a6:b7:b5:51:c2:88:05:61:3c:3c:ff:72:10:
                    e7:fb:2a:aa:6b:d6:66:49:c2:57:ab:20:db:fa:c2:
                    e0:63:eb:71:bc:fd:af:2a:f1:86:06:b3:4d:cd:ba:
                    50:f7:6c:c0:2b:9c:fd:13:a5:e7:7a:37:7a:7d:1b:
                    75:4e:ee:7a:39:02:42:91:65:df:63:5b:43:23:3f:
                    f6:16:21:75:d1:5f:c8:6c:95:cb:60:8d:49:0e:40:
                    a3:43:e1:ce:0c:7e:61:55:78:03:88:8c:12:ae:2a:
                    c2:cd:e1:05:37:1d:42:67:3e:bc:65:7d:6a:eb:49:
                    2e:40:2a:54:81:bb:64:29:43:3f:90:5e:10:4c:41:
                    8c:10:ea:72:6c:38:61:9f:e6:95:7a:f1:54:f7:37:
                    4e:51:4a:2f:11:ac:44:d7:2b:af:ea:1c:1c:e0:82:
                    2d:3e:cc:96:5e:0d:fd:c8:ed:13:ce:6e:f1:a0:5a:
                    2e:4c:89:f5:2e:dc:42:7f:4c:39:42:e4:70:63:4a:
                    41:02:9d:2e:c9:c5:ec:3e:d6:f0:9d:eb:07:b7:62:
                    d0:a3:20:66:a1:68:41:39:22:4a:a3:5f:d2:76:f7:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:29:28:CD:A2:01:5D:CB:40:0D:30:EA:18:20:E8:FE:6C:E0:A8:CA
            X509v3 Authority Key Identifier:
                keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:85:a9:6b:b7:f8:3a:40:a2:44:c9:07:f2:26:67:4f:d0:70:
         f4:4b:1d:65:0e:f1:38:23:d7:32:d4:11:6d:31:5a:68:02:c9:
         06:e1:3f:98:71:c7:ce:b8:3f:0b:8b:a1:7d:62:de:ce:19:f7:
         22:60:4f:bd:48:9d:90:b9:43:7b:8b:b2:c6:ce:13:1d:d5:d9:
         6f:b5:e7:b9:b9:28:eb:66:4e:fb:a8:f3:36:43:c5:c8:e1:6b:
         f4:76:58:ef:fb:b2:10:c5:49:38:dc:9d:c6:15:98:f1:4e:56:
         3b:af:86:41:e2:f1:ba:a2:33:62:14:6e:4d:f9:3e:b3:16:34:
         b6:72:9b:aa:3c:eb:a4:41:9a:c8:f1:11:48:ed:8c:33:de:62:
         51:59:5c:66:bc:7b:c2:3e:fc:89:3d:87:2d:66:ad:3b:24:b3:
         d0:7d:02:4c:fc:f1:b9:71:52:e4:bb:dc:72:79:a5:89:e5:0a:
         50:17:c2:e1:0d:47:14:64:ce:6e:bb:6c:66:7b:68:4c:1b:28:
         fb:d4:ab:ad:a1:31:1d:7a:15:fa:0f:28:7c:32:03:87:db:78:
         9f:37:ee:28:a0:93:e3:d5:95:ab:64:de:86:33:da:97:a1:31:
         9f:35:c7:e7:70:58:cd:b1:d0:b4:6e:ea:61:01:4c:ec:0b:81:
         6a:0f:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:39 2024 by rpki-client on console-fra.rpki-client.org