Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File:                     S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier:          Y+l37STnLsjvQSc7U9dJ0X7SSi2SIkQQHSwFeslEet4=
Subject key identifier:   56:00:35:97:67:F5:8D:EE:93:27:CE:DD:3C:B1:6E:9B:DD:3E:F9:F6
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer:       /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial:       018F87B6AEDE1223E5941AC9E442FE0982CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number:          0E65
Signing time:             Fri 17 May 2024 18:00:47 +0000
Manifest this update:     Fri 17 May 2024 18:00:47 +0000
Manifest next update:     Sat 18 May 2024 18:00:47 +0000
Files and hashes:         1: AbOQ5V9r-ExuFlkwKNzEHFFLF98.roa (hash: sWsRSa5OGkPQtqPM7e6jLNpZjc4CQv+VFTOiZEty5e4=)
                          2: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: ewRUOyhnsZXNH0ERjx7m+eX1J5XoUwpJVZA9MwkkAGo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ae:de:12:23:e5:94:1a:c9:e4:42:fe:09:82:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
        Validity
            Not Before: May 17 18:00:47 2024 GMT
            Not After : May 18 18:00:47 2024 GMT
        Subject: CN=5600359767f58dee9327cedd3cb16e9bdd3ef9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:b6:f9:8e:38:e5:f5:ec:d7:68:ae:46:4e:
                    3c:c8:4b:c0:1e:90:7b:0b:78:97:ec:d1:90:4a:c2:
                    f9:fa:17:6b:4d:81:ce:19:32:13:07:6b:6a:8a:f5:
                    f6:1f:63:4e:1e:43:d2:17:e5:28:13:1c:72:ee:b6:
                    14:00:9b:e0:01:bb:ce:19:21:ee:a7:f4:18:b1:65:
                    73:29:bb:a5:84:82:61:4b:06:62:8b:f5:75:5e:bd:
                    a0:77:fc:36:17:ca:52:1f:f8:7e:c1:fc:df:8f:49:
                    24:09:79:9d:1b:93:c1:60:36:d1:cc:d3:ac:11:45:
                    68:31:c3:41:ef:f1:8c:9f:7e:30:fc:ea:a6:06:4d:
                    f9:8d:f6:da:d7:88:1c:83:a4:31:b0:fa:93:26:2a:
                    71:f5:fc:ca:8a:67:eb:f9:2e:c2:e0:fb:f8:12:e1:
                    78:df:cd:f2:25:79:4a:85:c9:91:57:2c:76:9b:92:
                    90:26:8e:00:30:a1:eb:c8:c3:f4:d6:d0:8f:15:ba:
                    04:5e:75:4d:17:d3:72:3a:dd:26:f1:5c:64:fa:aa:
                    32:fb:23:bd:e0:d5:c7:56:6a:06:cf:10:ae:03:43:
                    cb:80:09:4b:62:5d:33:9b:2d:3f:36:4d:ea:e7:8e:
                    7b:e8:7e:73:f1:ab:48:74:93:18:c7:27:c8:2c:93:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:00:35:97:67:F5:8D:EE:93:27:CE:DD:3C:B1:6E:9B:DD:3E:F9:F6
            X509v3 Authority Key Identifier:
                keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:3b:eb:a1:54:1e:00:96:43:d0:26:73:7a:e8:f3:84:4d:
         71:20:f1:3b:1b:14:cf:54:d9:26:b6:be:01:40:61:36:33:1f:
         ea:e8:8e:f1:0a:b0:dd:7c:0c:09:f0:86:62:f5:2b:13:d0:de:
         55:75:68:88:a6:0c:7c:c9:8d:93:64:70:bc:ca:96:51:5d:c8:
         d9:17:c3:05:d9:ac:ee:31:49:db:c8:5e:62:a5:e2:41:a3:be:
         1a:4b:92:0e:7f:c6:77:ab:3e:cf:dd:db:40:be:d7:f6:41:f5:
         3d:cd:56:e2:10:c7:cf:00:e4:86:8a:b9:ea:76:71:85:d6:75:
         2a:ca:b4:81:3e:b2:07:d0:03:f5:18:0c:71:26:c6:31:4b:67:
         a5:70:ad:2b:89:c8:63:c4:49:2c:c7:fb:41:d8:50:40:40:89:
         3f:c3:e4:43:65:9e:d8:f7:2d:ef:4a:73:0c:95:51:42:23:29:
         5f:42:b7:ea:7b:d1:a9:c0:9a:cc:b1:a6:a6:88:d0:29:6c:23:
         af:c2:b8:5b:bd:05:b4:a6:6d:dd:d3:28:4f:07:a3:1d:73:48:
         5a:90:e7:3c:39:0c:4d:16:62:d7:bc:e5:c8:42:d4:66:39:59:
         33:a2:fc:0e:32:93:37:18:ad:42:6c:5c:7c:d4:67:22:d8:09:
         8e:35:a9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:41 2024 by rpki-client on console-fra.rpki-client.org