Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File:                     xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier:          z4izi9KwslxX8IRyOBcrio5yzn1kH4HEkLRr2CbVlAg=
Subject key identifier:   76:55:6D:C7:F9:91:55:7F:CF:9D:59:A4:DC:2A:C3:D7:8C:25:32:E3
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer:       /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial:       018F87484191FB38E402919487EBB3D10A52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number:          0630
Signing time:             Fri 17 May 2024 16:00:10 +0000
Manifest this update:     Fri 17 May 2024 16:00:10 +0000
Manifest next update:     Sat 18 May 2024 16:00:10 +0000
Files and hashes:         1: Fs7BabF-ZpZGbvU-Ngt5EfGGHeo.roa (hash: /LuU1FM11uE5H+ZoAoa4mCVwgty/xJ1+fmu8vGKSmis=)
                          2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: 1CYDFgalHr/WyZxufOkycVvXPjySfja+YNkHZwGsmm0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:41:91:fb:38:e4:02:91:94:87:eb:b3:d1:0a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
        Validity
            Not Before: May 17 16:00:10 2024 GMT
            Not After : May 18 16:00:10 2024 GMT
        Subject: CN=76556dc7f991557fcf9d59a4dc2ac3d78c2532e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:06:0e:5d:81:07:8a:e0:47:db:57:e5:39:29:
                    61:a4:7f:0f:a7:ac:14:cd:bc:fb:1d:7d:f8:76:51:
                    71:e4:fc:3d:4c:b4:62:f2:6f:a9:a3:7c:39:89:86:
                    c5:54:2f:81:22:83:98:de:40:94:31:f1:88:c4:4c:
                    ab:d0:a2:11:a7:98:64:c4:67:e1:da:64:24:7f:6e:
                    36:dc:7d:3a:83:9f:3e:e8:5e:9a:66:05:2c:04:8f:
                    27:27:f5:e5:90:03:74:a4:bb:bb:32:eb:93:2e:b8:
                    26:0b:10:24:12:ba:d7:93:29:1a:5d:01:b3:6c:5f:
                    2e:95:51:1a:ce:2d:67:56:1f:d4:6c:0a:12:0d:de:
                    25:da:ad:14:cb:ad:a3:fb:44:a4:c9:32:c9:17:ca:
                    38:82:2d:58:46:65:29:20:da:1a:89:62:09:0d:ae:
                    2b:0b:3c:ab:c8:97:b9:55:6c:8e:3b:41:14:cf:bc:
                    c7:3f:2e:5b:ce:d8:1b:b2:c8:34:c5:86:1e:18:30:
                    cf:fc:f9:ed:45:37:73:15:6d:96:61:9f:38:64:c4:
                    b7:a9:d6:6f:82:8f:07:20:34:0e:fb:f7:66:76:45:
                    9c:6b:39:12:1c:1b:fb:3e:f3:e3:5a:94:bf:cd:d2:
                    a2:6f:ef:01:a7:1e:61:91:1b:5a:b5:16:28:b1:0d:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:55:6D:C7:F9:91:55:7F:CF:9D:59:A4:DC:2A:C3:D7:8C:25:32:E3
            X509v3 Authority Key Identifier:
                keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:01:bb:8b:20:4b:48:01:cf:fa:8d:2a:58:7e:3e:fb:a5:3a:
         9f:11:4e:44:42:56:e0:03:65:d6:fc:e1:5e:6e:33:68:84:7c:
         f3:cc:b4:79:c0:49:64:69:a0:2b:4b:1d:f3:e8:92:6a:ad:21:
         f5:95:c2:4e:bc:63:4c:6a:d3:9b:7b:4b:0b:7b:b8:a3:d9:8f:
         28:bb:6a:3c:72:03:f6:19:58:66:1c:fb:95:c0:b7:a9:31:28:
         d3:62:24:71:60:ce:6d:77:4b:65:6f:2c:0b:bf:ea:db:42:87:
         cc:ce:c0:33:ae:01:04:aa:d5:5c:07:1a:35:09:59:46:1b:b9:
         cd:c6:5c:95:27:50:ed:62:fa:45:2a:1f:14:82:57:72:51:0a:
         ae:d5:7c:1e:44:62:d3:79:5c:07:eb:fa:e1:d0:c2:d8:df:7f:
         ae:0b:4b:7c:f8:a8:18:eb:14:95:8d:12:b9:87:24:72:3b:62:
         4f:66:88:f8:38:4e:21:57:5f:ef:5f:51:af:1c:1e:c0:5a:78:
         e0:24:5f:83:e2:5d:68:ab:6a:39:97:83:0d:72:39:b3:e2:d0:
         98:ad:b3:18:73:24:0b:59:49:e4:29:79:b9:c9:27:8c:a4:ca:
         df:42:c4:c9:8c:ab:af:51:f4:51:db:09:ea:61:4a:a1:b3:d5:
         9f:8d:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:03:02 2024 by rpki-client on console-ams.rpki-client.org