Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File:                     x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier:          rLNQSbJaJDYJV1MX0mP3K/prtP/NqHFB2Szz48EXTyg=
Subject key identifier:   5A:29:37:18:7D:B3:64:EE:7C:D1:4B:35:50:88:7F:0C:9E:93:70:27
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer:       /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial:       018F874869DF2EAECF0CDCEB77EB80387C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number:          0E89
Signing time:             Fri 17 May 2024 16:00:20 +0000
Manifest this update:     Fri 17 May 2024 16:00:20 +0000
Manifest next update:     Sat 18 May 2024 16:00:20 +0000
Files and hashes:         1: A8kWWY5wZpY9Av4R4iDHI3zKJg4.roa (hash: zaWh4QjeKHJuYgqzAJtR3tkid5GnoEFEIDbnhTEBDwE=)
                          2: J4WufaZEKZkep6n8gOMw7EzEeII.roa (hash: XZdbeBzJJU3osxr60fLykJijZEgJPCUK/LXsZPZBCng=)
                          3: NDxYYoakBcWMG1TBHTpLsqlJ-aQ.roa (hash: 5S7SE2IgABik4xbJx+wbL4Zmu5pVYhvr+iUx9b82Ghs=)
                          4: b8RQ2SWrmHMtpqc71VI0g1_QB94.roa (hash: Cco9DxxQ9jv2CHivCDHlads91lNTEJjbbmF5A7BsNg4=)
                          5: cQ-CF4iyyzonAuzotXGWKze2ns4.roa (hash: TEcCI3GtEU5vGj1c14EuZy8f7gth8YEJusL5Sss5pJI=)
                          6: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: gRXobUj8HPvOOpSKCP+ERdjrfq/dYScysxSAH01WUaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:69:df:2e:ae:cf:0c:dc:eb:77:eb:80:38:7c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
        Validity
            Not Before: May 17 16:00:20 2024 GMT
            Not After : May 18 16:00:20 2024 GMT
        Subject: CN=5a2937187db364ee7cd14b3550887f0c9e937027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:dd:a2:29:f4:52:c0:ed:bd:38:bb:34:56:
                    bb:07:74:68:1a:fc:12:7f:45:21:9b:06:ef:e1:0d:
                    ea:bd:09:18:31:aa:9b:27:f1:7e:7a:85:7d:69:6a:
                    de:f3:ad:66:e6:fe:25:ab:1b:da:e5:07:e4:b6:b3:
                    45:f4:01:b1:45:e0:d6:07:bc:88:c7:95:4a:1e:0a:
                    f7:00:9a:8d:08:7b:4e:14:6b:ca:b6:f5:3e:de:5e:
                    51:b0:11:a0:0b:cf:b0:c2:98:a7:d3:b7:0f:30:2d:
                    ef:42:bf:0a:58:3f:d5:eb:98:53:08:4f:36:78:73:
                    76:4d:94:ba:a1:7e:43:92:5c:cb:9b:33:26:0b:5e:
                    92:96:b0:d6:74:ad:8d:52:c0:0e:68:6d:72:ba:36:
                    c4:4c:10:76:11:bd:8a:d0:9a:2b:c0:ca:79:6d:64:
                    b9:2a:90:ff:83:c0:66:6a:3a:fd:36:f8:2f:e1:e2:
                    be:e8:5d:85:90:c3:ec:3a:31:6b:08:81:7c:10:d8:
                    56:46:79:d9:9b:79:6b:75:04:22:96:43:ca:61:47:
                    21:7f:15:4a:9f:fb:19:43:05:e5:02:dc:5a:49:88:
                    29:36:a8:f1:08:f8:ca:8f:10:cc:db:38:75:c5:ad:
                    ac:da:07:49:44:ce:2c:bb:0a:d4:bc:ef:94:1c:86:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:29:37:18:7D:B3:64:EE:7C:D1:4B:35:50:88:7F:0C:9E:93:70:27
            X509v3 Authority Key Identifier:
                keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f3:b3:aa:b5:db:80:c2:6c:f1:44:81:ec:ef:b5:5c:78:d9:
         10:e6:71:a9:94:52:e3:c1:e0:97:b9:b0:c5:d5:6a:ff:93:8f:
         b7:a4:9e:66:de:a2:df:8e:ad:10:e7:86:47:21:59:ac:7a:6a:
         31:a2:73:90:7c:c8:fc:c2:10:e6:94:20:50:01:19:c1:21:63:
         7a:77:a5:4b:1b:45:7f:f0:ec:a6:7e:8e:74:08:6b:ed:d3:a5:
         28:42:59:ab:b5:1a:90:01:7a:b8:24:78:6b:2e:9b:ee:e7:c8:
         c2:eb:c0:a0:74:1d:e3:3e:13:b6:b3:bb:c2:08:61:b7:1b:c3:
         21:67:16:50:ac:c4:cb:89:4c:5a:03:56:bb:44:a7:c4:02:fc:
         ab:0e:d5:9f:d7:8b:74:66:48:22:b7:8d:89:6e:c3:4d:16:cd:
         72:e1:01:14:92:89:9a:df:4c:06:cd:68:eb:d8:b4:0c:86:f0:
         e8:3d:38:b7:b2:5f:e0:18:40:58:a8:f6:17:35:bd:67:ee:89:
         34:c8:12:a7:dd:6e:02:84:b0:1b:02:49:81:ae:f0:9f:c5:bb:
         48:5f:2a:49:0b:27:d6:75:6b:7b:3b:fa:46:75:63:ee:2a:cf:
         8d:b4:dd:96:6d:15:42:9c:eb:99:6b:32:29:4e:1b:44:3d:a5:
         1b:53:85:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:46:14 2024 by rpki-client on console-fra.rpki-client.org