Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File:                     CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier:          tBJpjbP37PBA5COm1GMKDhzDnzZj8/N9vQ9vfaZr5bI=
Subject key identifier:   13:F2:23:E1:69:45:62:76:4C:B2:15:1D:A2:F8:53:06:AF:93:8D:76
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer:       /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial:       018FA8C2C8315E2B58FDC1AD58978CFF6C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number:          0456
Signing time:             Fri 24 May 2024 04:01:28 +0000
Manifest this update:     Fri 24 May 2024 04:01:28 +0000
Manifest next update:     Sat 25 May 2024 04:01:28 +0000
Files and hashes:         1: 9Snq6-4xNKmLPpXqg3N3ovYmmio.roa (hash: xma5k0YZR6xFQOKLAUKPIQ8DhDA0V1MxWaH0VmKUHYg=)
                          2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: aVLESGoDWK6RJOTgWJXZJaQy3/DV96oSup6EckaVfTk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 May 2024 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a8:c2:c8:31:5e:2b:58:fd:c1:ad:58:97:8c:ff:6c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
        Validity
            Not Before: May 24 04:01:28 2024 GMT
            Not After : May 25 04:01:28 2024 GMT
        Subject: CN=13f223e1694562764cb2151da2f85306af938d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:ca:de:48:2d:9b:4b:cd:7b:97:ac:6d:58:
                    93:f2:8d:14:25:5d:5c:e3:c3:a8:0f:b5:59:e6:10:
                    64:d0:02:d9:18:a9:e3:7a:67:38:84:b2:4d:26:48:
                    e7:20:2b:1a:f3:ff:00:6d:05:0e:08:ae:a7:82:21:
                    1e:14:3e:a6:26:47:2c:f1:ff:48:15:fa:49:66:fc:
                    d8:eb:fd:92:cd:59:b0:5d:2c:6c:56:2c:55:fd:f0:
                    2e:19:52:11:b5:34:2b:10:ea:2e:20:b5:6c:af:43:
                    57:c5:76:a5:60:59:53:bf:28:11:7d:e0:2e:27:da:
                    48:a0:09:14:6c:d0:2e:91:21:9a:4f:6d:30:70:e9:
                    d7:cb:ff:1b:62:5f:0d:bb:09:6d:28:4e:6f:a8:2c:
                    df:d2:a4:7d:1e:87:9e:17:52:68:0f:cf:3b:23:7f:
                    8b:3c:a8:fe:a5:46:d8:5d:17:00:08:ad:ab:82:ba:
                    76:58:70:21:11:91:47:14:e7:db:4f:4a:48:cb:a3:
                    3e:c1:3d:99:c5:31:69:aa:76:e9:41:65:26:2e:9b:
                    93:7c:2f:5a:6f:1a:bb:15:ba:49:85:02:73:20:cb:
                    7d:c2:73:6f:78:35:2b:4c:6a:43:34:81:0c:f5:d4:
                    d7:95:56:79:2d:27:80:9b:cf:12:1b:22:06:41:e5:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:23:E1:69:45:62:76:4C:B2:15:1D:A2:F8:53:06:AF:93:8D:76
            X509v3 Authority Key Identifier:
                keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:61:07:cf:67:77:f7:19:2c:8d:ce:65:a7:2f:d9:bf:14:90:
         24:fc:b3:ee:1e:09:54:27:79:24:69:ed:67:6a:d5:4e:ff:a5:
         2d:15:81:90:16:47:28:be:59:2a:32:e5:94:a8:1b:b5:40:14:
         e4:d3:ee:9b:b0:96:4f:1c:cc:06:da:bb:7e:68:cc:df:ad:9c:
         96:76:4a:d1:12:13:24:9d:b3:7b:e3:b9:9a:fd:cb:74:fe:de:
         5d:83:b5:1c:78:c6:8f:cf:d6:3d:b8:87:c5:92:fa:6b:42:32:
         5d:ba:78:9f:3d:60:48:04:af:e2:9f:c5:c8:83:68:53:d9:64:
         29:38:f1:17:3a:4f:34:21:13:a4:ac:46:fb:ba:69:cb:1e:f2:
         55:59:f8:66:20:4a:e3:8d:26:a5:5e:cd:2c:e9:ef:c3:32:77:
         1d:50:fd:69:30:95:b4:35:79:13:00:37:5c:50:8d:2d:a4:0e:
         7c:c9:0d:a4:c7:85:24:7c:95:35:a5:0d:19:38:49:30:8a:5a:
         98:14:ee:a7:55:6a:56:f6:ff:4e:59:19:3c:39:16:1c:97:f4:
         82:03:96:ac:db:15:9e:fd:27:2a:a4:1e:59:e1:5c:60:ec:0a:
         f1:db:12:6a:fc:50:0c:c0:5d:48:f6:18:dd:9f:bc:29:6b:5d:
         48:f2:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 07:39:19 2024 by rpki-client on console-fra.rpki-client.org