Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File:                     fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier:          s3LizlIEDnUnNeLwJ/5F2AaHOb40IBAz2/kfObAl9Ys=
Subject key identifier:   99:15:28:69:85:07:63:85:AC:80:36:46:26:62:16:43:C4:35:99:32
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer:       /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial:       018F98AB11790FA6AB8BA7B70682C28B286D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number:          0C3E
Signing time:             Tue 21 May 2024 01:01:38 +0000
Manifest this update:     Tue 21 May 2024 01:01:38 +0000
Manifest next update:     Wed 22 May 2024 01:01:38 +0000
Files and hashes:         1: OZJun1Q-CVUcx3YjhwoASyQC3kg.roa (hash: AerFdTKvnElQ0HlH3KxN8PEvtOTqyGZOqgZ1hav9nNg=)
                          2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: MOYWTXYFbd8S6pTHWZuCbJHjyev8Ro37BSLndUgKLVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:11:79:0f:a6:ab:8b:a7:b7:06:82:c2:8b:28:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
        Validity
            Not Before: May 21 01:01:38 2024 GMT
            Not After : May 22 01:01:38 2024 GMT
        Subject: CN=9915286985076385ac80364626621643c4359932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:44:48:bb:33:92:b2:15:49:3b:42:30:b4:
                    a4:fc:eb:d6:ac:dd:4b:a0:e3:18:c6:52:08:38:6e:
                    04:51:53:e0:4b:f8:76:e9:1b:9d:7d:de:ba:45:9f:
                    f0:08:61:3b:3c:e0:e8:c2:9d:48:f5:85:c2:98:f5:
                    56:94:9d:eb:f4:eb:fa:f7:39:e6:e1:76:f6:a1:97:
                    ac:90:fc:0a:94:41:14:0b:0a:92:62:fe:bf:5f:e5:
                    d3:56:14:3c:e7:be:53:24:e1:c9:a0:5c:f8:bc:fb:
                    b9:51:70:0c:3c:e6:44:b2:05:be:8a:da:9e:1f:9f:
                    44:63:fe:66:c2:90:2d:61:63:7e:39:49:ae:39:d9:
                    29:96:5c:07:24:7c:09:e6:27:49:4b:bc:8e:99:7b:
                    15:ed:06:3f:fc:60:e9:30:91:02:d7:62:b9:ab:ad:
                    2c:1c:f8:06:ea:d0:10:f1:4b:4a:39:8c:17:7a:fe:
                    d0:ff:26:d2:4d:71:21:56:97:73:4d:e2:f3:20:13:
                    8a:07:ed:d6:ed:0b:3f:4b:62:b9:c5:9e:16:ba:0b:
                    21:25:3c:55:38:87:70:1c:6f:7f:2b:82:70:ec:05:
                    f5:16:dc:ae:b6:1f:d0:26:b9:6c:43:b0:a5:03:18:
                    7f:cc:9b:17:50:5e:c6:42:9b:f1:bf:99:18:82:e0:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:15:28:69:85:07:63:85:AC:80:36:46:26:62:16:43:C4:35:99:32
            X509v3 Authority Key Identifier:
                keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ea:1f:02:bf:77:b9:13:fb:e7:7f:bc:83:4f:23:2a:dd:64:
         ca:ca:83:af:04:ee:26:8c:e8:0f:d1:50:d9:91:5e:25:db:f7:
         3e:1a:4b:77:db:0e:ed:f5:14:ae:ac:3d:b6:df:65:e0:df:76:
         ed:ea:f8:e1:74:ba:85:f3:1a:7f:2f:d6:93:8a:ca:5b:ce:0a:
         68:e6:62:19:aa:fc:39:c7:42:c4:08:f4:89:5d:84:5e:74:2f:
         49:88:ce:cc:57:a8:61:94:c6:44:70:c2:e5:94:7f:2a:db:12:
         f8:0d:31:33:d1:b5:5e:af:a2:8c:b1:63:d9:8d:e2:1e:74:8e:
         1d:fc:bb:31:57:ea:74:9f:88:0f:c7:5d:e6:a2:de:67:84:b4:
         fa:0f:dc:e9:44:78:0e:bc:ac:6b:1f:b5:8d:30:5b:cf:c1:e8:
         8f:8b:2d:2d:82:e6:b7:fe:7c:50:5a:99:58:aa:06:fe:b4:fa:
         96:eb:80:c6:de:59:3b:dd:46:28:ca:b1:62:6c:d5:17:cd:6a:
         bb:10:de:1b:e8:b8:aa:58:3f:7f:91:f8:b4:c9:48:6e:27:dd:
         94:2d:41:d9:b4:ea:66:5a:ac:eb:f7:23:24:c2:8e:ed:13:fd:
         7c:45:dd:3e:e0:f0:27:a1:fc:6a:cc:52:ac:7e:05:b8:69:64:
         31:e0:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:02:06 2024 by rpki-client on console-fra.rpki-client.org