Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File:                     mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier:          NTMx2N+/TvKBaJr6gjo6fW5vTrWdO30dF2BfUiN7hLI=
Subject key identifier:   FD:7E:68:4C:20:3B:35:A5:45:52:AE:37:CB:A7:2D:9D:34:39:77:F8
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer:       /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial:       018F87ECFA02FC38A575E2D1989D3FB460F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number:          0153
Signing time:             Fri 17 May 2024 19:00:05 +0000
Manifest this update:     Fri 17 May 2024 19:00:05 +0000
Manifest next update:     Sat 18 May 2024 19:00:05 +0000
Files and hashes:         1: lAOmuWkMospJa-lWrasSsOTl98M.roa (hash: lrBfZ5PTLI8Pde7klIBJgXpIhkCZulaNlaIWtEOaCMc=)
                          2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: 3j+/8VvRV9f4vuolp4fLuMYZrVrBBuiuvXBAIH9zfJ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ec:fa:02:fc:38:a5:75:e2:d1:98:9d:3f:b4:60:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
        Validity
            Not Before: May 17 19:00:05 2024 GMT
            Not After : May 18 19:00:05 2024 GMT
        Subject: CN=fd7e684c203b35a54552ae37cba72d9d343977f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:5b:40:0a:e3:e5:3b:68:a7:ed:1d:5e:26:
                    01:8b:b8:f0:bf:22:a3:50:28:65:af:b3:0f:ce:58:
                    a3:0f:2b:01:43:ff:7e:51:61:2e:cc:19:52:53:6f:
                    df:26:a0:af:2f:99:e6:09:f2:ea:05:41:8b:94:c9:
                    6f:de:72:ed:05:b9:fe:1b:5e:e5:8b:ba:33:66:16:
                    16:1e:16:34:10:bc:7d:f3:8a:c9:f7:be:a0:c6:00:
                    c0:4a:60:30:87:f5:96:fe:12:c8:e6:61:0d:31:1c:
                    4c:a1:2e:44:e4:c8:87:3d:2b:b5:f3:2d:f3:1d:2f:
                    6c:d2:a5:7d:a7:08:39:0f:73:d7:9a:ee:55:46:9e:
                    83:a7:af:79:6f:39:48:de:a3:2b:64:73:a4:ca:ab:
                    e4:e4:02:fb:9d:11:12:92:c8:b8:3a:ea:05:b0:04:
                    e9:95:5c:c1:f8:9c:d4:c4:4f:7b:83:38:30:d1:7f:
                    4f:2a:2f:3a:85:b3:fc:6f:4c:4e:38:c9:9c:d2:c7:
                    ab:9e:95:8c:94:69:09:b3:fa:87:a8:c3:3d:c2:77:
                    12:c3:bc:a8:5e:09:26:51:df:34:33:ce:51:41:21:
                    5f:9f:8b:cb:84:be:35:fb:3c:75:e1:6a:a5:c3:d4:
                    c0:92:b8:d7:77:8b:b6:46:6e:a7:0a:ee:72:80:4d:
                    a6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7E:68:4C:20:3B:35:A5:45:52:AE:37:CB:A7:2D:9D:34:39:77:F8
            X509v3 Authority Key Identifier:
                keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:02:23:15:ec:8e:7e:1c:b1:85:7f:8e:68:1f:c0:b2:37:22:
         c0:52:57:50:f6:54:6a:fe:7b:24:4e:c0:7c:53:89:be:d8:67:
         0f:ec:1c:8a:15:7c:42:47:e6:65:b0:06:e0:58:5c:12:49:36:
         1f:a2:08:47:13:79:10:6d:37:5c:05:46:de:c9:50:52:a9:7e:
         e1:32:66:26:40:20:75:c7:7d:8a:c5:19:3e:94:82:85:43:a2:
         ba:18:14:24:b0:a9:d5:0a:81:2c:59:3d:71:f8:e1:5d:9f:ec:
         2a:76:45:13:23:19:ea:fb:96:9e:e4:68:10:ff:d2:19:c2:31:
         30:49:1b:b7:53:fb:d2:0e:14:18:f3:d0:64:30:d7:bc:8f:c6:
         42:d0:cd:a1:2a:19:e0:8c:af:3d:a5:be:f7:ce:28:35:4b:09:
         02:00:17:ef:31:a7:89:c8:fb:a8:6c:b2:4f:91:50:80:ce:ce:
         8e:be:26:84:6e:4e:47:9a:1c:f3:ca:d1:1b:5c:1d:79:4b:32:
         af:ee:30:39:2e:7c:b2:41:c1:8b:8e:8c:b0:d1:c6:60:f5:31:
         0e:86:68:9f:62:c8:c8:8c:93:ae:1a:88:84:18:fd:19:81:6e:
         cf:b6:35:14:f2:36:81:e0:49:36:de:1e:64:10:ae:dd:02:2d:
         38:cb:75:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:30 2024 by rpki-client on console-fra.rpki-client.org