Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File:                     PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier:          DRD8lvyB49U5FIwyDSXc7DTVjzwVez7jYlzdf8iFqMQ=
Subject key identifier:   18:A2:01:98:62:EE:DA:CD:A9:B8:89:49:F9:AE:84:77:E6:D9:17:47
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer:       /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial:       018F87495FD7304534D0445ABCC156E5E371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number:          0C36
Signing time:             Fri 17 May 2024 16:01:23 +0000
Manifest this update:     Fri 17 May 2024 16:01:23 +0000
Manifest next update:     Sat 18 May 2024 16:01:23 +0000
Files and hashes:         1: 64kTOl9PHCRC4WvJUZhf0xqBGt4.roa (hash: XLLzxX1qQLov4ATE3UOA4HA7nWxRTSSliy2UskN8ldk=)
                          2: 6rPBlspAliQsyBwRK5xlIM1S83g.roa (hash: bUEQSQ1Nz0K20Ik0s9H7aTpKRuRypjg8WE1O+QHoENc=)
                          3: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: PmqygzCb14FOd60mzHcu4jGVcwwwOwRFFeraZ77STSE=)
                          4: cGU-6BFVEBoovwsnWJRDzRH5wLI.roa (hash: Jvk6dJVoXHMO7mLmHuHIncyTThaxV5N+IM+z5b5TWck=)
                          5: kHMNDTeuy1HKXnNQGKLmfNQH-3M.roa (hash: 7vf/DyXIXLjBLwyKotqv3fXV78zBjDKwQYKNIm9oN/I=)
                          6: pUM70Q0Im8j5DGEAHmNC-laF0M0.roa (hash: zJIJA0SzT0tUsS91uTtcnr0tNgKrCmAFm7XTP2RAQAo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:5f:d7:30:45:34:d0:44:5a:bc:c1:56:e5:e3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
        Validity
            Not Before: May 17 16:01:23 2024 GMT
            Not After : May 18 16:01:23 2024 GMT
        Subject: CN=18a2019862eedacda9b88949f9ae8477e6d91747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:39:56:7a:33:a5:7c:16:33:b8:2d:49:ed:
                    db:09:70:bd:ce:76:d2:84:8d:7d:ac:e0:24:54:c0:
                    12:2b:74:90:2f:73:83:7d:35:45:1d:74:81:81:ea:
                    d9:32:55:4b:b3:e0:2e:e0:6e:b1:d9:99:a9:d2:0c:
                    a1:2d:f0:72:9f:01:26:68:eb:71:dc:8e:55:d7:26:
                    74:62:b7:49:ed:8d:6b:2c:ff:2b:8a:65:58:be:b8:
                    c9:8f:dc:72:0f:8d:a6:56:0e:b8:4f:97:58:1f:cc:
                    ee:71:96:4c:6f:04:af:3a:3d:b3:9f:48:2e:ca:1f:
                    05:33:b3:20:71:1f:b6:93:25:cd:54:5d:36:32:01:
                    0b:03:4a:74:89:d3:6d:1e:d0:62:3d:77:ca:91:2b:
                    2e:6e:58:57:78:6d:d4:10:bd:f4:1d:78:21:e8:55:
                    cd:41:be:1e:ee:00:e7:0f:1e:95:39:5a:86:9c:2e:
                    69:a9:12:a3:57:a2:9a:ad:6e:a7:26:63:88:70:9e:
                    74:af:9b:7b:c9:9e:0a:1b:7c:fa:cb:e4:a9:32:bc:
                    25:51:df:29:e0:0f:1d:93:e2:10:22:ad:2a:09:01:
                    d6:b0:e0:f6:37:20:cc:73:cf:7b:80:f9:0e:04:1a:
                    fd:94:61:58:e1:65:16:6a:14:ea:0e:0f:f1:54:8c:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A2:01:98:62:EE:DA:CD:A9:B8:89:49:F9:AE:84:77:E6:D9:17:47
            X509v3 Authority Key Identifier:
                keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:45:fc:ef:cf:e2:28:54:18:9a:49:ef:dd:ec:68:98:a9:a4:
         1c:f6:ad:1a:94:ad:e6:30:31:a7:01:86:b1:c7:f4:15:80:45:
         60:e8:21:47:d7:ae:aa:9a:81:2e:12:33:e1:77:22:df:98:36:
         1c:e9:2f:6b:80:e4:eb:15:89:92:7e:f5:52:66:b5:64:33:30:
         b8:83:4d:23:8a:e6:68:4f:43:4f:fb:c6:2e:d4:ad:59:87:59:
         f2:89:76:5e:ba:65:ab:fd:03:7c:30:4c:8c:74:3b:55:ec:b7:
         f1:ee:8a:d0:86:84:83:37:ab:6a:3d:09:be:59:7f:fa:af:cc:
         8f:e9:01:3f:dd:f6:84:82:e3:f2:5b:bf:51:82:5a:fb:af:a0:
         56:ba:20:13:89:86:7a:94:46:79:39:05:f8:d5:d1:f7:01:ba:
         82:ee:72:f7:34:fb:36:48:80:51:20:33:8a:87:f3:32:bc:09:
         01:ac:33:43:b2:af:75:dd:e2:3c:92:9c:1a:88:7e:cd:7b:28:
         18:5d:b9:8d:db:fb:5a:2a:cd:54:a2:64:6a:70:bb:96:1e:25:
         3b:f7:2a:52:fc:1a:94:9b:7d:b3:ff:04:81:dd:c0:d1:00:3d:
         be:ed:2c:b5:11:aa:d7:3b:37:a3:00:c9:a6:dc:71:13:41:7d:
         9b:72:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:59:18 2024 by rpki-client on console-ams.rpki-client.org