Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File:                     zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier:          Kv2OW6KLr3YTFg7CahfAyzGwNs+9mpBq+rli+P6aKA8=
Subject key identifier:   D1:84:CC:AC:58:0F:3A:F4:09:91:A8:77:C5:6E:48:AD:7C:0B:A1:04
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer:       /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial:       018FB233E68B16E9E263730E30DCEE2D4D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number:          0134
Signing time:             Sun 26 May 2024 00:01:36 +0000
Manifest this update:     Sun 26 May 2024 00:01:36 +0000
Manifest next update:     Mon 27 May 2024 00:01:36 +0000
Files and hashes:         1: 60OZGqbdIA3xp1MCKmT04tIbSUs.roa (hash: ZZWuWvA/QU/EBhEjocxiupa3ENX71OYDCFObvTFDqq0=)
                          2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: OUS31WIdnoF+C1VEzSsy6oN6IK7jA5brUpzxfn0PKEk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:33:e6:8b:16:e9:e2:63:73:0e:30:dc:ee:2d:4d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
        Validity
            Not Before: May 26 00:01:36 2024 GMT
            Not After : May 27 00:01:36 2024 GMT
        Subject: CN=d184ccac580f3af40991a877c56e48ad7c0ba104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:f6:cc:32:37:c8:03:3e:65:d5:79:89:de:
                    7a:e8:96:15:44:21:ef:79:ca:11:ae:1f:69:41:8a:
                    f2:aa:4b:98:a9:0d:4e:c4:20:26:90:41:86:8f:89:
                    a5:c3:b5:8a:58:38:f2:9d:69:b6:25:48:27:75:cc:
                    26:a0:cb:80:71:47:fd:0f:f7:80:64:72:64:4a:54:
                    07:de:ff:2e:f3:4c:d9:fb:dc:bb:50:7a:38:f9:38:
                    22:df:d8:c6:6a:38:03:1f:ca:4c:d5:bf:8a:34:bb:
                    18:b4:16:d3:31:11:ca:2b:fb:21:54:57:00:97:ad:
                    31:00:b0:bf:2d:87:18:4c:13:db:bb:d4:20:a4:ef:
                    c7:6b:f6:27:e9:3d:19:88:13:d5:55:51:72:ae:98:
                    5d:84:34:69:b0:1c:7b:70:d9:62:3f:55:4a:4f:fa:
                    dd:9a:c3:7e:a8:68:e6:45:46:09:59:13:f3:db:83:
                    0d:54:c9:09:e9:dd:38:5f:8a:0a:ff:30:52:0b:3f:
                    2a:bc:df:9c:0a:95:3c:b0:4e:9a:02:db:c8:4b:d0:
                    60:c3:e5:e1:a2:9a:91:68:2c:b0:af:0f:f9:a1:fa:
                    5e:f6:fd:b7:29:ef:c1:ac:63:e9:77:f6:a5:e1:65:
                    b1:4a:d9:a3:e4:48:ed:ad:7c:82:e4:42:1e:b7:2b:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:84:CC:AC:58:0F:3A:F4:09:91:A8:77:C5:6E:48:AD:7C:0B:A1:04
            X509v3 Authority Key Identifier:
                keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:a6:6e:ec:3c:b8:f1:12:c5:4f:50:31:c9:f5:8a:e4:66:57:
         27:6b:fc:ac:bc:9c:da:ab:ea:83:70:74:b5:d1:ac:35:df:ba:
         65:45:61:01:14:eb:6e:00:f9:a6:f2:ad:0d:07:aa:75:50:c4:
         87:7e:e8:75:0d:32:cd:37:15:73:7f:36:84:e6:4a:5d:83:3d:
         42:21:cb:63:02:f7:b3:e4:12:4d:cc:5f:dc:fb:ef:32:ef:24:
         b0:85:85:c0:ae:3b:25:05:64:76:16:2a:07:7e:44:c1:e9:ab:
         69:75:94:c1:e9:b8:6c:13:10:7d:3d:b6:4a:36:49:a0:4a:9b:
         79:73:b7:37:06:86:7c:92:36:37:1b:97:ad:05:45:91:cd:c2:
         07:2c:7b:8a:23:bb:91:c6:74:eb:93:22:0c:58:6d:49:2c:9d:
         97:5a:a2:5b:1a:29:2c:2e:aa:41:45:f9:75:36:ea:fd:5e:05:
         72:ad:62:3b:54:6c:ba:1f:aa:64:89:b4:a8:e7:87:cb:3a:db:
         5c:73:b0:46:93:69:5c:91:44:c7:45:ab:0f:10:ca:b4:c8:22:
         eb:09:42:6f:14:d1:9e:d4:17:3d:30:38:93:9f:16:46:01:51:
         49:59:30:f2:d9:7c:aa:db:f2:fb:a7:26:ec:f9:24:9c:e1:10:
         d2:d5:d0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:44:26 2024 by rpki-client on console-fra.rpki-client.org