Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File:                     DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier:          PMu4Qu1I0VROac2XlhPeU10ybZOl7qlwiZmKCXnR9KQ=
Subject key identifier:   2B:DB:19:A4:DB:07:4D:A2:53:51:26:DB:39:FA:96:44:A7:7D:A1:A1
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer:       /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial:       018F83D96E24B4DCECC0034B00CDA15FCE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number:          07B8
Signing time:             Fri 17 May 2024 00:00:15 +0000
Manifest this update:     Fri 17 May 2024 00:00:15 +0000
Manifest next update:     Sat 18 May 2024 00:00:15 +0000
Files and hashes:         1: 0Cu2vW-WEkSnc7kzGPlruV8JCZo.roa (hash: V/nQjdqybEhj2/6b7F+0NKEzreVPgfyWix+ZqNSew+M=)
                          2: 1RN91i70aQXHnoK4tOMqnSTJBK4.roa (hash: rja1ar5I8KOEun7Aob6NAuXI9PMmVZcGY1SNOWjrhTg=)
                          3: 5bROO6OssbmARJZL02hbbUExW_g.roa (hash: rnvI+xsV9bH1GNElL0/D4h5O2d8QUlgTWw36XQ9zzUQ=)
                          4: 6QTA9Pj4AtVNwsablRwYbU6FYTM.roa (hash: RCHoiDnV+BqvyaCU8X24iBZWtGAPyoNGHoalBy7SqnM=)
                          5: 8Mq_EPcpfqC3iah3BE4HJiKP74Q.roa (hash: x8vx3nkSinNAVj5rF1RdX5QVNZwXzwtalAJjFCRYAlI=)
                          6: BOQGLvpoGlxp683nk4JNSGjav64.roa (hash: Ug+q7GEgbyR/5vkUoIYlVfPTfsv3oYtlRd+vwp/a92U=)
                          7: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: mdxgoLGdIT/B+FqIUovzAn6elQ8RjPsOv/GFL8CrcJA=)
                          8: JUl2XJ7ITteVa0YZiH_2fdnHLHE.roa (hash: MYOIjvxFWT6ugCgMn3KkkM/0xAtUD56C4vyfiv1viSw=)
                          9: gT9hQP-UdDCt57mihFVpqqXrFtI.roa (hash: kNibPxS2eQrpumYUBGMAqANuhPpfcCuUaU7rkaUGWGs=)
                          10: hR3HXIvzfJc7q0vloNSqFJOEjKA.roa (hash: 797Un3j9GszPyx+Jmm4BzPdS7g50SLGy5kq5QigEeWo=)
                          11: rJFyDbK6CjrEhc4i8mP7VqXo7Mk.roa (hash: dusqNMn3Unf7x8rSiJZVV/ckoILMCcwfsScd4lgf6RQ=)
                          12: uVGirIQndi2O8x64Cpz4vDPgdPg.roa (hash: N+v/H4WGFW2El/DejOKMDA6ZVQ7Nijm4z8X5qKC9OXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:6e:24:b4:dc:ec:c0:03:4b:00:cd:a1:5f:ce:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
        Validity
            Not Before: May 17 00:00:15 2024 GMT
            Not After : May 18 00:00:15 2024 GMT
        Subject: CN=2bdb19a4db074da2535126db39fa9644a77da1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:6d:dc:9a:11:02:2c:c9:5d:13:32:14:bb:
                    79:4d:58:11:6c:65:6f:f6:ba:a8:7d:0e:d1:fe:53:
                    4e:48:d5:86:01:d3:7a:c4:37:f7:32:79:ea:9f:fe:
                    4b:7a:0f:90:1f:8f:b1:54:cf:85:83:b5:4e:e0:3a:
                    a7:22:66:ee:c9:b3:11:3e:0d:b0:8b:fb:f8:7b:8c:
                    bf:09:b9:c9:1a:04:24:88:9c:bc:b7:55:db:b5:7f:
                    29:e1:11:de:33:70:35:d5:c7:46:39:ce:6a:22:dd:
                    a3:67:72:da:2a:c8:ed:db:07:ca:39:17:ca:bf:18:
                    8d:b6:84:98:03:b6:19:ae:2e:e5:fa:1a:ef:db:01:
                    1f:b2:e6:fd:4f:07:11:90:c6:b7:fc:fc:d0:a4:06:
                    27:15:b2:ff:e7:ea:b2:62:c6:fe:9f:01:3e:6a:30:
                    a6:4b:99:10:e4:53:f9:61:eb:e9:93:fd:7d:43:4f:
                    63:f2:68:d0:a4:f2:f6:df:8b:b3:4c:c6:e6:2b:01:
                    89:73:4c:89:10:01:f8:49:04:e7:e3:37:62:40:57:
                    26:b0:9a:d5:61:79:2f:f2:13:e5:62:48:fb:13:16:
                    75:79:6c:81:fc:85:7d:42:e9:b8:6f:b9:d1:41:f5:
                    13:b1:d0:d1:6d:ca:c0:a2:91:61:ee:93:1b:56:73:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DB:19:A4:DB:07:4D:A2:53:51:26:DB:39:FA:96:44:A7:7D:A1:A1
            X509v3 Authority Key Identifier:
                keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:dd:0d:82:5b:c9:b4:25:5c:d8:f9:da:84:1d:c5:f2:a0:37:
         da:e9:3a:e0:a3:dd:d1:8f:ee:05:2c:92:2f:64:cf:5b:c3:f3:
         67:cf:2c:f1:f0:7e:61:aa:90:ca:b7:45:c5:22:8f:03:af:60:
         3b:ef:f0:51:00:39:ce:11:d6:2c:fa:49:2d:4f:f5:22:42:97:
         ca:b1:c6:1c:4f:20:bf:52:73:90:50:6f:4e:4c:d6:2a:59:8f:
         50:85:75:c6:e6:ed:d9:71:3a:c9:d5:2d:8e:74:39:78:3f:ca:
         82:fa:82:09:41:2b:a5:17:7f:1f:cb:35:8b:ef:25:0d:84:15:
         c5:fa:20:d9:7b:9b:15:ef:4e:03:df:67:c7:eb:04:96:a5:2e:
         33:e6:46:53:c6:1e:33:d8:7c:26:9a:d1:11:19:5d:1b:cd:40:
         89:b8:77:44:27:1a:f4:60:58:36:49:0b:46:ea:f6:37:ec:e5:
         d1:ed:a8:79:c6:ac:a7:42:9f:b4:2a:01:73:71:72:a1:f5:3f:
         87:6d:d8:2f:d4:cd:06:3d:b3:ff:4c:4f:4e:1a:b7:76:04:7e:
         27:4c:b6:78:02:27:c1:76:4b:0f:b3:2b:7e:e4:49:bc:32:70:
         c9:98:f0:e7:27:d3:95:67:e4:6a:9f:be:42:f9:0e:3a:02:99:
         b4:7e:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:37:20 2024 by rpki-client on console-fra.rpki-client.org