Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File:                     Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier:          hMgP2c6e3cAavJdlCZmTXo2s6QE1Tz8ESwX8KtqXJLA=
Subject key identifier:   63:30:3C:6E:3F:4B:2F:E6:63:36:EC:91:61:87:6C:17:1C:63:2A:13
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer:       /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial:       018F4DC807A471435261C9CC705EF463F3A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 12:01:45 +0000
Manifest this update:     Mon 06 May 2024 12:01:45 +0000
Manifest next update:     Tue 07 May 2024 12:01:45 +0000
Files and hashes:         1: 4t-DJXjmTbG8rzWBzlVgl3ev2mI.roa (hash: VjZvWiFc3ruxZJcb3q6M4N1w8Xk/kQMIaO+XQnSjF1Y=)
                          2: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: QHU8XyOs+BURx0VCmNVZSJqvfBlM54rpi3jU9pfMt8k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c8:07:a4:71:43:52:61:c9:cc:70:5e:f4:63:f3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
        Validity
            Not Before: May  6 12:01:45 2024 GMT
            Not After : May  7 12:01:45 2024 GMT
        Subject: CN=63303c6e3f4b2fe66336ec9161876c171c632a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:80:d4:d5:7c:f1:5c:3d:af:d0:99:4b:af:
                    f7:31:4d:77:15:60:9a:ea:83:ad:b6:9c:96:fd:49:
                    5e:f7:bd:ef:7d:33:30:64:dc:c9:39:11:33:c7:a2:
                    96:9f:c9:93:68:23:18:cc:eb:c0:7b:94:42:0d:fe:
                    bf:30:5f:63:ef:3f:33:3f:b1:70:e1:38:a4:36:ef:
                    eb:a8:02:89:54:2b:48:f5:b0:9d:b8:4c:4d:de:c6:
                    27:0b:17:69:f8:5d:72:1f:99:7e:82:31:7c:44:30:
                    1f:1b:1a:b1:6c:73:aa:dc:63:66:72:19:01:50:77:
                    ef:af:d6:d0:32:23:fd:0c:a2:d5:5c:6c:ec:4d:3d:
                    d7:ac:02:5e:73:8d:94:8c:2f:cf:4d:91:5a:b1:ef:
                    df:2d:82:07:7e:1c:cf:b1:47:29:8b:01:df:3d:9c:
                    27:f3:a2:c9:41:d4:7d:6c:54:73:5d:0c:3d:e5:61:
                    64:9b:12:f5:0c:70:ed:bf:d5:50:40:2e:33:05:d1:
                    b3:25:77:a2:38:dc:30:67:73:7a:7c:c4:cb:b2:0b:
                    f0:29:d0:6c:62:52:8a:6d:6f:cc:3c:3c:31:63:ae:
                    60:99:25:1b:4c:16:db:81:51:e3:f6:c1:f8:27:3c:
                    6f:cf:cb:a7:07:fc:e5:11:3e:d4:a0:ca:c0:a2:5f:
                    6e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:3C:6E:3F:4B:2F:E6:63:36:EC:91:61:87:6C:17:1C:63:2A:13
            X509v3 Authority Key Identifier:
                keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3c:fa:eb:aa:6b:24:75:b1:75:28:d9:2f:7b:b9:5b:76:4c:
         b5:b6:d5:46:b1:ff:56:b5:00:96:0a:19:ec:6d:da:85:bd:9b:
         a1:6f:79:1e:11:d4:d9:d2:eb:a3:f8:1d:e4:c8:6b:75:a5:3e:
         74:93:c4:b0:78:4b:31:29:ed:e7:01:eb:ce:89:a3:b4:41:2a:
         30:44:dc:7f:c5:9a:ab:31:44:d5:8b:33:25:64:88:e9:4e:53:
         a6:3f:43:92:96:c2:f2:47:3b:e0:fd:1e:6d:c9:38:13:aa:8b:
         4e:5a:16:4d:1e:9d:d4:1a:95:76:05:c3:bf:0f:42:80:25:65:
         3b:03:42:1d:84:d1:00:cb:02:54:35:59:1d:11:f3:6d:a6:d3:
         40:20:33:a4:12:90:9b:f7:4d:84:32:f9:10:c1:0d:66:16:d5:
         b1:03:e4:96:d2:5e:a5:70:75:8d:18:96:32:96:bf:ae:79:73:
         ba:aa:55:2c:31:c9:73:af:47:ee:d6:2e:dd:ba:49:7a:db:fd:
         49:fa:2e:3e:3e:30:35:03:b7:21:b2:b1:ea:cd:b8:25:0e:07:
         ba:b8:a4:53:87:94:ea:ea:ad:0a:4d:0a:6c:22:f2:3a:a1:61:
         a1:9f:f9:8a:bd:0c:8a:91:38:cb:4a:a4:06:f8:26:31:f3:49:
         c1:81:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:09:08 2024 by rpki-client on console-fra.rpki-client.org