Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          FQ8IFkPCR8Rqs3tq0TvJr7EC3hOYd9G/E1c6cLZH0I0=
Subject key identifier:   D9:F3:0C:1F:E4:A5:20:D7:00:7B:70:46:E9:20:39:61:EF:46:07:B8
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       018F88241DA3BA77A6B8E7C5402B03274889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          118E
Signing time:             Fri 17 May 2024 20:00:19 +0000
Manifest this update:     Fri 17 May 2024 20:00:19 +0000
Manifest next update:     Sat 18 May 2024 20:00:19 +0000
Files and hashes:         1: Cs7UyycYScBk1pFCzn0s-LMd9Bs.roa (hash: GJnFRrBek63OwsnCvkrBCazRvRKSDhNwyvg1e3ptN3Q=)
                          2: EeOk1SC5XOGdtq-qOI-5OjuZDPQ.roa (hash: RjHkHcT5YE0zOLIrm3D6cTrxNF8Wjof05Yta7k/Vsf4=)
                          3: GeMg-w6JJX-bSwsjUAHXSFHUnSs.roa (hash: OkWm4jOmCUKAn0UGUZUptIOi0LQvNmAep+64j8BwY24=)
                          4: HQ2u0KJvbCo9X6W95URRu8GkMZw.roa (hash: b2z+fSmWwyMqMFLnJaAZCYXtYNFTx/fmAAHgPmRoF2s=)
                          5: OMKmctDkwf-5JjJ8thf-QEdYSeg.roa (hash: l89SjZLoD0kxD/1c9j0cVQqhGWNZ65gIQY3QPmFWGfw=)
                          6: QBxIvICmDiIKK-jd_58Fmk0Nyqo.roa (hash: GzeupVBY60Z7IZqtITho1fGBMqbC4IpkKqihDhFZ9sM=)
                          7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: FquJT7vF5tOrXnSym4SfWVLN04uz4P2s2K6NhxDcuYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:1d:a3:ba:77:a6:b8:e7:c5:40:2b:03:27:48:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: May 17 20:00:19 2024 GMT
            Not After : May 18 20:00:19 2024 GMT
        Subject: CN=d9f30c1fe4a520d7007b7046e9203961ef4607b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1f:63:48:32:3a:71:93:6f:4d:24:cc:0c:0a:
                    80:2e:fe:d7:86:2f:6a:ad:f0:7a:a5:2d:12:d9:2a:
                    20:f4:87:55:92:05:c1:6a:f0:2f:63:5d:d6:17:e6:
                    61:7e:9a:4c:96:a1:88:53:2e:87:05:f3:8a:f1:6a:
                    4b:b9:9e:45:d9:8a:6e:94:0b:47:9a:46:e5:fd:b7:
                    a5:2c:ca:3c:57:9d:7d:96:f8:25:41:ef:98:e7:16:
                    8f:44:e4:0f:15:ac:1e:8a:7e:24:4b:67:53:a1:34:
                    75:00:b4:ab:03:cb:dc:c3:77:32:70:e5:1c:b1:58:
                    a7:9d:80:0d:da:41:4c:0b:46:de:66:53:b9:6b:ec:
                    8a:bd:40:bc:d0:09:06:0f:e0:ba:a1:a2:30:c6:3e:
                    c4:3d:d0:74:30:52:07:ee:50:91:5b:3c:01:a7:67:
                    d5:29:2a:8b:24:7d:0b:d5:d8:c1:78:aa:a8:2b:a5:
                    f9:11:1c:1d:b0:c1:9a:63:32:05:52:99:0c:c8:75:
                    4b:c4:09:6d:c0:4c:79:89:cd:fb:02:fd:52:e8:cc:
                    32:05:91:82:5e:94:db:b4:d3:39:86:59:da:c0:d4:
                    9d:0d:59:6e:58:02:73:7a:b3:09:45:ae:ee:2a:cd:
                    36:78:06:52:fa:e1:10:22:ed:ca:bf:65:4d:76:ce:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F3:0C:1F:E4:A5:20:D7:00:7B:70:46:E9:20:39:61:EF:46:07:B8
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3e:57:29:56:f4:6d:38:f6:ab:16:d2:fd:fd:05:94:27:8f:
         e7:80:01:6a:42:b9:20:ca:48:35:74:a6:10:05:12:0d:a4:9b:
         44:2d:e0:5f:bd:6f:81:52:27:99:cc:ad:cc:ba:b1:0a:44:cb:
         f6:b1:c9:f1:f3:2f:8f:c7:ca:d6:f3:5e:b3:1e:55:f5:18:41:
         30:83:bc:03:a0:f2:25:bd:e0:0e:29:ed:69:0e:a3:e1:d1:fb:
         2b:90:f3:c4:1f:47:0b:1d:bb:6b:30:94:be:d2:82:75:a0:af:
         17:c2:5c:13:36:38:ec:05:84:f9:9d:87:c9:9d:d6:b9:f8:35:
         46:5a:72:d2:09:76:e1:1c:02:fa:8c:6d:4a:00:e9:43:cf:7e:
         ca:13:8d:71:f2:cb:ec:a7:50:3a:ad:9a:e8:8d:bf:ec:52:e5:
         4a:e4:c8:69:90:e9:fd:a3:16:8b:ee:b0:ed:1d:93:83:29:76:
         66:f2:82:5f:cc:1f:e1:b4:53:35:c9:be:ce:76:8b:e5:5a:ec:
         05:86:a4:74:40:7f:19:78:8d:b9:d7:34:d2:28:b3:d5:4b:48:
         9a:12:a3:24:45:ee:e3:3e:70:6f:15:0e:cd:76:f3:f9:03:df:
         26:96:43:87:d1:1d:60:df:aa:ac:29:96:23:6d:1d:72:fe:15:
         6f:e0:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:46 2024 by rpki-client on console-ams.rpki-client.org