Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
File:                     FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json)
Hash identifier:          zZn1Wy9n1uZ9D/mU8PAa+pPffAmSmNwiVV2wA492vSQ=
Subject key identifier:   5D:0B:3E:63:AD:EC:95:25:FD:FB:F8:A1:A3:DA:DE:0A:14:87:49:28
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Certificate issuer:       /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial:       018F3A0C048B139369C92C1FDEBE614B7486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
Manifest number:          0B22
Signing time:             Thu 02 May 2024 16:03:36 +0000
Manifest this update:     Thu 02 May 2024 16:03:36 +0000
Manifest next update:     Fri 03 May 2024 16:03:36 +0000
Files and hashes:         1: 9J-7UsVYsfdkP2E3NOkBKfo27Dk.roa (hash: SNkjPEe1B/N7nRs7uvizDjy6wV1ZvM+qnHJ198JtUE0=)
                          2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: A8FOJ4pMd6zLdm/11ldK5BuTf4pnizkBxnSbUGwI/tQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:04:8b:13:93:69:c9:2c:1f:de:be:61:4b:74:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
        Validity
            Not Before: May  2 16:03:36 2024 GMT
            Not After : May  3 16:03:36 2024 GMT
        Subject: CN=5d0b3e63adec9525fdfbf8a1a3dade0a14874928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:2b:9e:fc:0d:a5:99:c1:86:20:f9:aa:21:
                    ef:63:10:42:17:07:27:fb:6f:ba:ff:ea:c4:e4:c6:
                    c4:43:83:e7:c9:86:c8:d3:eb:ce:a2:4e:40:a2:61:
                    cd:ee:75:63:5c:66:e2:96:f8:e9:64:6b:90:45:07:
                    62:20:2c:4d:e1:b9:f7:0f:86:c6:e7:47:78:06:58:
                    25:9d:19:7b:90:12:c8:3d:90:35:30:54:66:4e:b7:
                    08:6a:1f:cc:d8:f6:9e:2a:87:99:d5:c1:8f:20:f9:
                    43:7c:0c:1e:a7:c8:ad:4c:ee:68:70:1e:a1:59:f2:
                    b5:65:fb:ed:d2:8c:45:4b:97:72:d7:f6:48:ea:1a:
                    dd:fd:d7:32:2b:9a:31:68:af:13:e6:d1:45:c2:65:
                    f5:9b:63:de:e6:12:69:88:ed:76:fc:3b:e2:84:f4:
                    8b:f9:eb:5d:e5:53:44:74:48:8b:ea:19:6e:5d:38:
                    e2:45:2b:f5:34:34:5d:18:57:fa:01:e3:7d:21:58:
                    aa:e1:e4:30:e3:25:8a:94:67:44:62:26:e8:86:3f:
                    db:69:27:4a:16:a8:c3:fc:b5:2b:94:f3:da:ad:1c:
                    51:d7:96:37:5d:7e:ce:c6:01:b4:5c:de:5a:02:0e:
                    48:0c:0e:63:de:50:2e:01:c1:a3:14:ba:ed:7d:b4:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0B:3E:63:AD:EC:95:25:FD:FB:F8:A1:A3:DA:DE:0A:14:87:49:28
            X509v3 Authority Key Identifier:
                keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:5a:61:aa:42:fc:8a:3f:76:e8:9e:5d:42:ab:c7:4c:18:
         ce:92:86:1b:e7:d9:5e:a5:8b:bd:d5:75:8b:42:15:7a:22:c1:
         df:ae:61:81:8f:25:d0:70:60:ef:56:33:c2:ea:9e:1f:c3:34:
         83:c0:6f:24:f4:6f:a1:cb:6b:ea:4d:1f:2a:17:a1:dc:fe:dd:
         dc:03:67:31:bc:97:c5:b4:90:b6:8c:d6:6e:96:9b:84:a2:48:
         cc:04:f5:28:6f:4a:85:11:9e:79:63:c4:c3:74:81:25:c6:09:
         55:f1:f2:cb:f6:77:29:08:0d:72:13:21:cd:51:f3:0e:26:80:
         bd:95:c8:57:18:b9:ae:00:6b:63:47:5e:0f:6c:43:c0:19:84:
         e1:00:5d:10:32:72:25:b8:27:05:0d:b9:40:a7:cb:1b:73:4c:
         87:a8:ea:b9:08:db:9a:ec:4e:7f:70:7e:bb:f6:ce:b5:c9:6f:
         d3:12:51:60:c1:4e:60:0e:37:83:8e:09:7d:50:13:2c:4d:8f:
         36:ad:d3:e5:01:c0:df:2a:45:50:ef:e4:bc:8d:2d:24:c2:d0:
         de:f3:af:f5:13:8e:37:45:4f:25:c1:d0:0e:b6:df:f3:fd:10:
         01:6a:cc:c6:a8:6d:d7:29:79:8f:a9:a5:f5:73:d6:dd:70:0a:
         72:c6:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:11:10 2024 by rpki-client on console-fra.rpki-client.org