Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
File:                     Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json)
Hash identifier:          KTnDAcj48qK9vex641ixnnklVr2jtlAN3pzF5COSt0g=
Subject key identifier:   E5:41:4A:4B:8C:4C:8E:41:F0:DC:AF:20:00:49:ED:BA:7B:A1:2C:B0
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Certificate issuer:       /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial:       018F874A79D3CDC5A23296BE79D4096E3F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
Manifest number:          02A8
Signing time:             Fri 17 May 2024 16:02:36 +0000
Manifest this update:     Fri 17 May 2024 16:02:36 +0000
Manifest next update:     Sat 18 May 2024 16:02:36 +0000
Files and hashes:         1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: +GENYV3NdP2q+bkPuCn6QkTF5kk4OXgkrA5pdSgJmDE=)
                          2: buTN79lM3bru4-udF4t8hJ5I0bo.roa (hash: 88JuiTRNbnT8uBQ4VAuuWNRFlIhiqkRcYJfY9ddIrhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:79:d3:cd:c5:a2:32:96:be:79:d4:09:6e:3f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
        Validity
            Not Before: May 17 16:02:36 2024 GMT
            Not After : May 18 16:02:36 2024 GMT
        Subject: CN=e5414a4b8c4c8e41f0dcaf200049edba7ba12cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:9f:c3:09:b3:a3:cd:f9:0e:74:27:e3:0a:
                    58:8f:1a:7f:17:77:fa:03:8d:c2:70:ae:f7:9b:2d:
                    ea:c9:ab:e8:97:12:fa:b4:d9:9d:f7:e2:51:5a:7d:
                    87:74:f2:5d:7b:33:a4:90:71:47:fa:23:29:12:f8:
                    40:0a:47:c3:74:4d:9f:f1:0e:24:8e:d2:c2:a0:e1:
                    51:4f:c6:c1:4a:fa:77:01:a4:4a:b3:3c:15:8f:b0:
                    7b:92:85:4f:95:41:5c:d6:ba:5d:c4:e6:89:b1:5f:
                    40:5b:bc:8a:7c:46:9d:73:fa:bc:b7:81:d9:19:43:
                    6d:9c:ed:77:c6:08:b0:8a:97:ac:a0:8e:2a:63:e4:
                    64:aa:35:3e:8f:ad:3a:7b:09:46:b7:1b:0f:17:ec:
                    d7:0e:0d:0e:61:0c:56:26:56:e3:41:e0:0a:e1:57:
                    47:89:06:d6:ea:92:a1:1d:dd:bd:fc:bc:6a:7f:25:
                    88:68:fa:04:37:13:9d:0b:fc:33:99:b5:23:67:c9:
                    11:32:2e:7f:a0:ed:b3:00:ae:eb:c6:5d:1e:e0:1a:
                    34:ad:17:b0:d9:9d:61:9b:7f:59:68:c7:5b:72:6b:
                    42:c1:e3:48:76:fa:54:e1:70:94:e6:51:7b:09:6f:
                    e1:ea:8c:ed:6a:0a:65:31:cf:ae:d4:79:46:5c:13:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:41:4A:4B:8C:4C:8E:41:F0:DC:AF:20:00:49:ED:BA:7B:A1:2C:B0
            X509v3 Authority Key Identifier:
                keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fe:b8:4a:48:5b:04:16:01:6d:68:e4:98:68:bf:1d:85:14:
         f1:1d:98:b1:10:48:b6:71:ee:b9:2a:97:0c:0c:63:52:1b:16:
         c1:b1:69:ea:af:1b:cd:3a:09:6c:27:ec:50:5b:87:38:ed:67:
         1f:f9:99:ec:db:51:b7:3f:d5:32:fb:6b:51:9c:96:1d:b2:da:
         02:94:d1:15:7c:86:a8:c3:eb:05:e9:56:c4:d7:1f:23:d3:bd:
         f6:a7:bc:2f:02:8f:65:88:03:e2:6b:74:06:51:30:c6:aa:1c:
         80:0d:00:15:f3:f8:a8:b8:70:05:34:f2:47:df:f4:57:2a:fa:
         00:12:bb:9c:b5:4e:77:aa:92:a1:c0:8d:2e:91:fc:56:65:f9:
         d1:d6:cf:ae:63:e0:37:27:0e:75:6d:be:c5:d7:3a:16:ac:f6:
         de:2c:9f:4e:c8:a7:1c:c9:ce:f1:6d:40:eb:9d:32:6e:45:f1:
         bf:92:23:9b:1e:7c:99:87:65:14:50:c7:c9:45:8b:eb:93:62:
         30:52:3f:2f:db:e2:b1:bb:9c:3a:3e:5c:5c:cd:4f:1c:68:1e:
         e8:fa:36:fc:2e:a5:ee:8e:ee:a8:e9:90:67:ae:7f:33:19:8e:
         1e:31:8b:e5:a6:98:bf:37:89:95:eb:cf:26:d3:21:8e:19:ca:
         45:48:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:09 2024 by rpki-client on console-fra.rpki-client.org