Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File:                     N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier:          cc2cR7f3c9U3Eg/pRh5j1ndXl8MQzZ6pbJcaRI+emS0=
Subject key identifier:   6D:48:64:89:29:F5:B5:1F:20:01:B4:B8:0B:26:6E:95:2E:1A:C2:1E
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer:       /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial:       018F86A39B98A4F93D97878C368063470B3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number:          030A
Signing time:             Fri 17 May 2024 13:00:20 +0000
Manifest this update:     Fri 17 May 2024 13:00:20 +0000
Manifest next update:     Sat 18 May 2024 13:00:20 +0000
Files and hashes:         1: HXYjEnLqjKnECMRLIkaG--_PdPU.roa (hash: WVbOHg0UIeaqGeyq3zE1ZJXvo+zK807HbLhlQO3SsC8=)
                          2: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: OZvZhctbnkJnNYlEgB+J6akn2WZNp7hk0sj5LpXFyzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:9b:98:a4:f9:3d:97:87:8c:36:80:63:47:0b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
        Validity
            Not Before: May 17 13:00:20 2024 GMT
            Not After : May 18 13:00:20 2024 GMT
        Subject: CN=6d48648929f5b51f2001b4b80b266e952e1ac21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:0a:6a:6f:02:1c:a5:ce:81:5f:7f:6e:e9:
                    cc:f0:a1:15:ed:70:3f:11:53:23:2d:ad:2b:fd:92:
                    29:f5:23:63:84:24:b7:b5:0f:bb:35:25:f7:8f:8a:
                    3e:8c:d1:3d:26:97:12:88:ed:71:84:a6:00:69:82:
                    b7:ef:d3:3f:4a:4f:6c:da:6f:be:62:f6:2e:a5:96:
                    57:08:75:49:9d:9f:9f:62:13:e9:d6:4d:69:30:c1:
                    59:87:9d:58:eb:eb:89:12:e1:e1:d1:1f:af:f1:89:
                    e0:b3:45:dd:1a:c8:df:1e:21:85:45:7b:12:be:90:
                    1f:85:d4:ef:4c:28:52:d4:c0:08:c0:65:f9:50:91:
                    3f:b5:b9:f0:85:44:d0:57:0f:c9:eb:44:95:1a:56:
                    41:b8:ef:f9:66:e9:8e:91:d5:19:b3:3f:44:07:84:
                    90:9e:fd:d6:f6:89:aa:42:5b:cc:50:19:5f:53:4a:
                    8b:86:dd:eb:eb:17:1c:53:8b:b0:67:b3:68:2e:9c:
                    c3:3e:74:c4:3f:de:a7:3e:6b:50:bb:6f:44:f4:ae:
                    0b:76:ca:3c:56:a0:c0:1b:24:1d:eb:a5:06:84:a9:
                    57:14:1d:2b:ee:21:09:23:36:5a:41:5f:df:5f:82:
                    97:d7:db:bb:48:50:91:ff:8f:78:03:bd:05:40:db:
                    0b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:48:64:89:29:F5:B5:1F:20:01:B4:B8:0B:26:6E:95:2E:1A:C2:1E
            X509v3 Authority Key Identifier:
                keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b3:71:b3:54:5b:ae:68:37:13:f7:42:d5:90:b0:19:31:e1:
         3f:06:35:d5:20:cd:d9:1c:e7:f3:ba:9b:de:43:52:b2:d6:8e:
         95:3d:98:c9:b4:aa:fd:36:62:63:66:bc:22:72:7e:d1:e3:4d:
         0f:23:b6:51:2c:59:91:f3:86:f3:a3:f9:4b:9e:d2:13:93:b8:
         22:89:37:40:7b:8d:e9:3e:bb:55:94:f2:9e:d3:98:a9:d1:45:
         3c:b6:73:70:d8:38:60:a0:a9:d0:ec:15:10:e5:53:6a:3e:bf:
         5e:b0:a1:b4:a7:1f:b4:12:eb:f2:9d:4c:b2:cb:bf:af:19:a8:
         66:2a:c7:c2:37:e9:e2:c3:01:12:6a:d5:de:e6:4b:e3:3a:89:
         e6:15:0b:2b:ba:ae:50:5a:70:d6:e3:cf:32:9f:d4:e8:1b:d1:
         36:36:ba:e5:e6:63:c4:47:62:aa:3f:26:23:64:fe:20:d5:d9:
         e1:09:8c:ff:68:9b:0b:e3:ec:b4:0e:6f:71:cd:0f:5e:e5:fe:
         cf:5a:66:c2:27:a5:7f:a4:c1:fe:da:ec:c1:6f:c2:f6:d4:46:
         54:c5:a1:b6:0d:8c:c8:79:37:f7:24:59:c1:d2:a8:86:88:c9:
         14:74:32:76:7f:bd:cf:96:c3:0e:98:04:11:d0:6f:7c:54:29:
         28:58:3b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:38 2024 by rpki-client on console-fra.rpki-client.org