Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          zgF0gXQnwnzYRasjZ33QAyKFrU3HwEeVEMW3iaHBAvo=
Subject key identifier:   FE:E8:0E:9F:F0:A6:BE:10:AA:40:95:2C:52:80:89:6A:5F:5A:5E:84
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       018F874A0FBE16F9879A9689A781A594B2A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          0238
Signing time:             Fri 17 May 2024 16:02:08 +0000
Manifest this update:     Fri 17 May 2024 16:02:08 +0000
Manifest next update:     Sat 18 May 2024 16:02:08 +0000
Files and hashes:         1: Au16nTRsaZnMyo42IXeN73O5GYY.roa (hash: p8rwmzJlJL+LP0G9Q9rNWCtW+QS8qY7dRk3wbShYW+U=)
                          2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: B6zgxwG20Py3LxhcgRNjNwca+KJoojPFDEAgg4DGrSw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:0f:be:16:f9:87:9a:96:89:a7:81:a5:94:b2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: May 17 16:02:08 2024 GMT
            Not After : May 18 16:02:08 2024 GMT
        Subject: CN=fee80e9ff0a6be10aa40952c5280896a5f5a5e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6f:80:3f:5e:1b:f7:8a:ec:93:4f:9f:ea:b9:
                    08:2f:06:a2:39:66:18:f8:0d:99:40:64:e6:20:6a:
                    06:ec:80:00:ee:0c:06:58:ec:9b:e0:e5:01:ba:ac:
                    ea:dd:2e:b0:9b:f8:da:e1:5f:26:5b:ce:48:c5:cd:
                    8c:3b:dd:36:4b:bd:cb:98:9e:19:42:f8:44:1d:4d:
                    bf:b5:0e:9e:fd:95:a7:c4:0d:a9:96:1b:e6:41:da:
                    48:8a:0f:2b:cf:a2:c9:71:62:7e:8f:1e:9c:50:b2:
                    a3:06:c5:61:b3:94:7f:76:77:f8:cf:af:76:57:e0:
                    3b:e4:05:3b:91:44:81:f4:48:62:63:41:da:47:c5:
                    f3:89:d6:4a:de:a5:7e:2a:ae:89:ab:f3:41:9e:58:
                    c9:26:bc:80:2a:3e:11:d9:43:53:97:39:cd:02:37:
                    af:51:cf:e9:53:35:4b:42:21:44:20:fd:ae:af:e9:
                    6f:fc:b7:1d:7d:1d:59:f7:d0:70:a2:9c:3e:98:9e:
                    32:de:70:e0:04:f0:ea:c7:83:78:26:87:12:33:2b:
                    41:1e:8f:34:f7:15:0d:70:25:b5:16:6c:dd:13:57:
                    61:bd:bf:dc:a7:f1:3b:dd:84:2f:24:32:27:c0:c4:
                    c7:15:db:c8:b0:61:52:18:4e:cd:7a:ff:d2:81:8b:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E8:0E:9F:F0:A6:BE:10:AA:40:95:2C:52:80:89:6A:5F:5A:5E:84
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7b:0a:0c:ab:2a:e7:23:0c:18:a9:1e:d0:0d:64:c7:65:1f:
         34:37:d4:ce:1e:cb:52:48:71:81:eb:88:42:97:44:7a:2b:f4:
         80:ca:ca:6c:5a:5d:84:e0:c1:22:73:a8:ac:ec:a6:9b:d7:2f:
         f8:8e:53:26:4b:44:09:45:bd:e3:8e:1c:aa:c2:8f:cb:38:5c:
         f6:b0:76:40:10:1d:7e:f4:95:3e:63:b1:02:ae:c5:b6:3f:8c:
         8e:b9:16:ad:e9:2b:34:98:32:8d:63:b0:e7:46:22:1d:17:e9:
         ce:6f:4a:21:f3:5e:6a:ff:de:f7:0a:03:66:d1:4b:c4:1e:39:
         c8:6c:6c:fd:3f:0e:24:46:d4:79:ea:dc:30:b7:35:62:43:41:
         df:2f:18:8b:a6:93:c4:eb:79:e8:46:6a:55:24:26:aa:39:33:
         b2:f0:da:e1:b0:d5:c9:69:2f:f5:06:5c:59:f2:9d:81:31:48:
         96:df:e7:5e:01:e8:24:49:fe:da:78:50:a7:93:48:7f:07:9a:
         51:98:48:09:8d:30:ce:9a:1a:79:27:91:11:31:23:cf:c5:1d:
         9f:82:ae:f6:9e:8f:8a:1b:27:26:b6:0d:31:54:fe:7a:17:67:
         6b:f1:7c:1d:be:ad:bc:dd:9e:15:7d:fd:10:84:d8:74:c2:0e:
         83:a2:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:03:25 2024 by rpki-client on console-ams.rpki-client.org