Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
File:                     FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json)
Hash identifier:          rLBKB8fW+kmGq863/o/Njp04MCE74/4GHfA/738CmRo=
Subject key identifier:   85:64:84:D1:BA:FC:1B:18:07:F3:86:82:D7:0D:37:D3:0D:CD:70:B4
Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26
Certificate issuer:       /CN=1670e1bc5869c602b642449031d4b7116c9dfa26
Certificate serial:       018F3AE5609FEAF03B43A02EC5393337A3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
Manifest number:          0ACE
Signing time:             Thu 02 May 2024 20:01:01 +0000
Manifest this update:     Thu 02 May 2024 20:01:01 +0000
Manifest next update:     Fri 03 May 2024 20:01:01 +0000
Files and hashes:         1: 5Q2qLHLX-5A3ub29G9tWRqanhNE.roa (hash: 0l89+jc1JyGKdLYOqjkkIiWN+bHE1pXzw+kETQr6kMM=)
                          2: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: m8bKI7QaokIiaazxkJFehRsQ4sxBe0gTgGFyJPrf5ns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:e5:60:9f:ea:f0:3b:43:a0:2e:c5:39:33:37:a3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26
        Validity
            Not Before: May  2 20:01:01 2024 GMT
            Not After : May  3 20:01:01 2024 GMT
        Subject: CN=856484d1bafc1b1807f38682d70d37d30dcd70b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5b:5d:b3:89:a4:19:cf:c0:a8:24:a2:d6:d6:
                    16:ec:f8:e3:b0:70:b7:eb:90:1f:23:04:95:ef:b4:
                    98:8a:ef:8f:09:26:70:3c:6c:94:42:4c:c6:e3:3b:
                    6d:76:0c:68:1f:5e:ca:0e:81:a3:43:b0:c8:fc:8c:
                    bf:f2:bf:f2:47:71:19:6f:29:ec:aa:bd:cc:fe:84:
                    ac:80:b7:e4:5d:62:b1:14:fb:5d:30:f5:88:2d:f4:
                    8b:a4:4c:e7:db:0f:df:42:47:9f:ec:9a:14:f0:05:
                    ca:11:4c:6b:fc:b9:3b:dd:21:bd:bf:f0:4e:be:d2:
                    e6:46:78:47:fa:35:86:2e:e6:d3:42:c0:2f:60:e2:
                    9f:67:2c:a6:05:6a:d1:72:c6:79:ed:33:df:00:13:
                    3e:70:e4:ca:6b:dd:42:93:49:40:25:7e:61:19:47:
                    10:82:9b:36:a8:0c:1e:4d:ca:1f:c9:8a:42:b5:49:
                    18:88:f8:49:13:08:62:d8:07:4d:fd:55:63:8a:0d:
                    e2:f3:d9:fa:c2:1d:42:e5:3f:7a:2d:f2:12:be:c0:
                    a0:30:f6:07:27:62:7e:7b:78:c2:95:a1:44:2d:06:
                    de:cd:50:7f:3c:8d:cc:3b:1a:cb:94:2a:5c:65:c4:
                    01:fa:d0:a2:16:9e:0d:f8:7f:c6:65:b2:b6:6a:0c:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:64:84:D1:BA:FC:1B:18:07:F3:86:82:D7:0D:37:D3:0D:CD:70:B4
            X509v3 Authority Key Identifier:
                keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1e:43:d1:eb:d7:b5:f3:95:bc:c9:c1:dd:c8:1e:7a:bb:f7:
         e1:45:8e:1f:73:f9:ea:cd:39:7d:ef:af:dc:2e:20:98:d3:80:
         26:f9:97:f0:65:3c:51:04:ee:05:9d:4e:21:e3:fb:e7:c0:8a:
         f9:d8:0e:03:31:cc:59:20:62:5b:b6:5b:b7:28:77:17:4e:0f:
         f0:18:50:29:bc:52:b5:fa:90:15:83:33:e6:5f:19:f4:0f:b5:
         f5:86:5f:03:35:95:39:21:67:5a:14:4a:89:bc:5a:41:48:02:
         2d:0c:29:d0:87:e1:cf:11:92:b5:a4:35:b9:b2:23:af:dc:f6:
         95:4c:63:13:e9:48:7a:87:6d:32:db:21:1b:bc:d1:94:4a:8a:
         f2:d4:b1:ca:ff:4d:21:b7:6f:f4:ab:71:89:c5:ba:19:5a:ab:
         d8:59:1c:fc:71:80:99:a2:0d:0b:8d:4d:8b:57:19:e2:7b:64:
         12:85:18:69:86:b1:67:ad:66:bc:c9:f7:cb:7b:9d:f4:f2:a5:
         7f:fa:5a:38:3d:e7:ea:7f:c0:d7:12:17:72:b4:f5:60:a9:af:
         88:49:e1:b8:4a:9a:83:ba:4f:d0:53:1e:d1:e3:73:5b:a8:b3:
         70:f1:ff:9c:51:21:d5:c0:ef:24:92:3f:dd:64:22:16:a0:bc:
         97:aa:25:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:09:47 2024 by rpki-client on console-fra.rpki-client.org