Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File:                     IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier:          FXVN6RypXyOBJTAtMxRQaEqcKSNcWd+MJG3RAZuiosQ=
Subject key identifier:   51:FD:DA:5B:03:9B:2C:F8:12:BE:5A:ED:16:30:13:D5:2B:EE:CE:79
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer:       /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial:       018F4155509586A44D2B8610030F03BD4A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number:          0C9B
Signing time:             Sat 04 May 2024 02:01:01 +0000
Manifest this update:     Sat 04 May 2024 02:01:01 +0000
Manifest next update:     Sun 05 May 2024 02:01:01 +0000
Files and hashes:         1: D23DtTg1wwxLMBvRq60vgafK0uI.roa (hash: yPKPMZee9UdAVTHy9yV687Wr40UPm7Pxr9dUGFjaLQA=)
                          2: Hj54pUApylrNHTcKfC9e0qpkNno.roa (hash: GCgaRCHe+ACHFKK/QFpR3uqOQIkNsDqCwzZrP5baRZI=)
                          3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: 554E5uP/DVzxCkQs/AM8LvopJhW7RugIMaLeEaIOjoQ=)
                          4: XKocDW4jSAFM_OqUOenHjsTKqls.roa (hash: Brmoq7TsgzCtSc9DwrUGO3JxRsXBRBzKdo5mR7DMQMQ=)
                          5: j6UOSc_ktXRVk5nAhgjmfllhkik.roa (hash: H4tS0PmN9Wws0UXcCN6xz1HWfFM5TmvSSR66VGgaVQg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:55:50:95:86:a4:4d:2b:86:10:03:0f:03:bd:4a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
        Validity
            Not Before: May  4 02:01:01 2024 GMT
            Not After : May  5 02:01:01 2024 GMT
        Subject: CN=51fdda5b039b2cf812be5aed163013d52beece79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d8:22:dd:ba:5c:50:1a:63:a8:f5:b3:b5:ae:
                    fd:b7:ad:1e:42:87:35:92:e0:b3:ab:30:d6:6b:82:
                    e7:64:3c:84:d3:14:d1:01:a6:c8:56:d1:21:e3:24:
                    8f:a1:f7:d9:27:a5:6e:24:eb:ef:b2:d6:43:7e:21:
                    10:5a:59:21:88:cf:76:85:d5:6d:7b:2d:0d:03:5c:
                    92:27:8b:4d:99:80:7d:c5:e9:99:a4:70:91:a1:e8:
                    89:51:b1:e3:96:14:79:fb:79:28:1e:83:5a:be:7a:
                    27:42:6b:2c:80:43:91:7e:32:29:c7:e3:00:8a:61:
                    fc:02:de:a7:eb:86:ff:9f:7c:ab:14:13:e7:58:eb:
                    a7:71:5d:fc:be:1f:02:89:83:89:61:13:52:11:0c:
                    83:65:6a:71:60:6b:4f:60:df:cb:ad:30:3c:c1:d9:
                    ee:e0:b0:d3:df:8a:54:51:e6:23:87:d0:4b:96:93:
                    10:fe:5f:01:36:11:a9:61:2f:68:ac:2e:d2:7d:ed:
                    7b:87:82:1d:68:da:c4:13:01:47:17:32:9b:34:f4:
                    25:eb:d0:a9:50:93:22:27:64:34:7a:83:ce:da:92:
                    31:da:b9:d5:ac:86:41:e5:e6:49:81:0b:c6:65:21:
                    8d:f5:03:a1:ca:3d:3f:bd:e3:72:9f:d0:a3:e3:f1:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FD:DA:5B:03:9B:2C:F8:12:BE:5A:ED:16:30:13:D5:2B:EE:CE:79
            X509v3 Authority Key Identifier:
                keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:a1:4f:a8:21:33:4f:fc:38:d6:3e:0b:6a:49:61:18:1d:
         86:b9:3c:77:0d:11:ef:49:2e:23:ba:73:5b:d5:4f:e6:cb:a3:
         94:de:81:1d:f3:32:b8:80:b1:72:39:a9:91:15:28:fc:08:d1:
         97:25:41:44:e7:94:62:db:42:b2:33:dc:2e:58:b7:dd:0c:37:
         5d:58:d2:24:20:d8:1c:f9:0c:a5:29:b4:b4:ee:91:51:6c:25:
         1c:7b:01:d4:92:ed:3d:33:c1:e9:a2:fa:63:cf:e6:c7:5f:da:
         4b:f7:ec:da:e3:24:41:f4:c1:79:9c:b8:ae:29:8c:52:9f:00:
         39:0a:d9:34:32:09:45:46:48:d7:47:c9:94:8c:cd:10:2f:0e:
         50:c6:c9:8b:75:5d:99:9a:42:1e:dd:db:6a:4a:02:a5:c2:64:
         9d:61:ea:75:04:8c:51:12:dd:c8:15:8b:36:65:5d:4a:ca:64:
         2d:aa:95:41:da:85:8c:45:71:be:59:cc:6f:cb:10:be:a4:6a:
         b4:e1:d6:d3:c1:27:22:41:89:f0:d5:83:cf:8d:76:45:c3:b1:
         10:17:a9:a6:2f:a8:90:fd:67:73:81:ee:fc:38:60:1f:96:53:
         45:54:d2:cd:34:3d:c1:de:fe:45:d6:49:50:4e:af:0d:34:73:
         2a:7f:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:06:01 2024 by rpki-client on console-fra.rpki-client.org