Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
File:                     80Cbg9EUyAkhERbKLI2zjc4WgPk.mft (raw, json)
Hash identifier:          WhEOCT2gY1/cewezzgp5v32psGxOJeOzOW9RsSe8cEU=
Subject key identifier:   5B:09:2C:68:05:55:F7:6C:30:F7:08:58:2A:38:66:11:D5:4F:8E:14
Authority key identifier: F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
Certificate issuer:       /CN=f3409b83d114c809211116ca2c8db38dce1680f9
Certificate serial:       018F874AA69ADF057E1AE9D6583B38074B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
Manifest number:          0398
Signing time:             Fri 17 May 2024 16:02:47 +0000
Manifest this update:     Fri 17 May 2024 16:02:47 +0000
Manifest next update:     Sat 18 May 2024 16:02:47 +0000
Files and hashes:         1: 80Cbg9EUyAkhERbKLI2zjc4WgPk.crl (hash: ARE6ZrGE1XlibQagMPAl5y0ppSAXfhJVf6PZWM1NKqQ=)
                          2: yhnzhcohI1yi-v1t5snFuy3zosQ.roa (hash: Q5Nx5LWywrIzLDogpkc8GQdmdxKoZGwT+784F2ga5WI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a6:9a:df:05:7e:1a:e9:d6:58:3b:38:07:4b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3409b83d114c809211116ca2c8db38dce1680f9
        Validity
            Not Before: May 17 16:02:47 2024 GMT
            Not After : May 18 16:02:47 2024 GMT
        Subject: CN=5b092c680555f76c30f708582a386611d54f8e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:a6:2e:b2:62:e2:d2:f5:eb:76:10:f6:fc:
                    79:a0:98:ed:ef:19:10:e4:e1:5f:5d:92:27:f7:fb:
                    7c:53:1b:00:4e:ca:43:6a:00:91:02:a4:f3:c1:cf:
                    ef:18:e6:98:9b:51:ca:fe:f5:47:c6:b5:8c:1b:92:
                    21:2e:cd:29:0f:60:3c:41:25:05:4f:cb:b2:42:20:
                    c6:61:fd:77:51:da:ba:6a:46:b3:c8:b1:02:7d:ec:
                    87:48:49:d1:2a:00:74:f5:ea:68:f7:94:21:f2:ad:
                    a9:b0:d7:05:09:4e:b2:a5:90:c6:2f:26:23:37:b8:
                    5c:30:c5:d3:c5:bd:57:cb:53:94:cf:92:4c:eb:12:
                    ef:75:59:1e:e6:dc:ed:f4:0b:e6:ae:e9:55:c0:f5:
                    ba:0e:8c:ba:11:5c:42:0f:a6:14:5a:8f:55:2e:e2:
                    02:5a:1e:10:35:d6:27:96:7e:93:58:ce:48:2a:9c:
                    fe:ea:7d:98:6d:c3:d0:7b:ab:01:07:c7:16:2d:a1:
                    45:97:59:05:64:a9:de:da:1c:f3:0d:78:29:2b:e1:
                    89:45:67:ab:7a:ca:7f:c4:d4:7d:68:6e:39:9f:c6:
                    96:0e:a3:30:44:d0:ec:fc:a5:a5:72:cc:77:a2:8c:
                    20:1d:0c:aa:96:64:69:31:38:b2:b7:12:e6:c4:34:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:09:2C:68:05:55:F7:6C:30:F7:08:58:2A:38:66:11:D5:4F:8E:14
            X509v3 Authority Key Identifier:
                keyid:F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:c3:5e:03:8c:10:0b:ed:d4:30:fd:74:25:19:b2:7a:d7:
         06:b2:83:a1:b2:19:21:57:53:d3:f1:c3:7b:15:04:50:71:61:
         e6:7b:e0:a7:f8:ff:7c:d3:8e:d7:e9:4d:58:37:a8:ad:3f:1c:
         b0:a6:77:60:77:39:db:e6:a6:c6:90:76:d0:81:2b:c4:63:e4:
         92:78:ee:e0:96:75:ec:84:49:4d:f0:45:8e:ec:ea:50:ba:5f:
         05:3a:4f:d3:90:b1:da:e0:eb:3c:9f:d8:86:f1:15:a3:57:5a:
         7a:68:f2:c8:35:97:08:2e:f0:67:d8:fd:52:ba:72:19:86:9b:
         9a:8d:d7:b0:ad:7d:63:57:d8:65:83:c8:76:27:8c:0f:5e:59:
         58:a4:e2:c2:b7:b9:92:68:11:0f:a6:21:8f:30:8b:aa:10:77:
         b9:a4:ca:5f:80:15:9d:00:84:fb:d1:04:77:3d:c4:da:4e:4a:
         9b:5a:73:99:ef:89:47:5a:80:cb:db:42:6b:d2:81:18:e5:09:
         23:bd:af:41:0a:f9:8f:23:fa:b3:2b:3d:cd:12:7c:63:6a:ee:
         d6:9a:05:a8:ef:be:12:da:87:cb:db:16:a7:a0:ad:39:09:f2:
         44:4e:9a:ce:b4:75:af:60:52:0f:18:73:a9:26:1a:24:1a:80:
         34:19:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:58 2024 by rpki-client on console-fra.rpki-client.org