Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File:                     p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier:          7nyoQojXJSKC86p/rVYvpTbnOCq+Rqo803zYTpkEgwM=
Subject key identifier:   82:F9:88:3C:7F:70:A6:48:41:CE:3A:8C:55:0B:40:96:85:9A:7C:F1
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer:       /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial:       018F8749F1FA4295852BEDC75F86F13DD609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number:          0EB2
Signing time:             Fri 17 May 2024 16:02:01 +0000
Manifest this update:     Fri 17 May 2024 16:02:01 +0000
Manifest next update:     Sat 18 May 2024 16:02:01 +0000
Files and hashes:         1: 8tvwSoXshXxpQ0Tm1A2jQJc_Eeg.roa (hash: pw2wxdd/JQ81qWsJZfKwhogxUt8NNvCukQtn3rD0Ewg=)
                          2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: vV8596fBsNrWnWQRqawqnnii6mMfO/RmRoPxLTv4Dvw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f1:fa:42:95:85:2b:ed:c7:5f:86:f1:3d:d6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
        Validity
            Not Before: May 17 16:02:01 2024 GMT
            Not After : May 18 16:02:01 2024 GMT
        Subject: CN=82f9883c7f70a64841ce3a8c550b4096859a7cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:a7:df:35:6a:55:6c:ab:75:d6:03:d4:6b:
                    d5:64:c8:a4:91:e4:7b:ea:d9:42:f1:b1:a4:a5:94:
                    96:45:ac:ae:51:eb:90:7c:db:2b:95:e4:35:f2:ca:
                    0e:bf:a8:dc:75:d7:56:09:db:3b:0e:3b:b1:d5:41:
                    dc:a5:5a:4f:00:68:3d:2c:37:d4:c2:a1:f7:1d:c7:
                    33:a5:9f:3c:18:60:b3:36:26:a2:e1:60:80:19:98:
                    c6:fb:0a:01:6b:32:d4:86:5c:38:f2:e0:f3:de:5f:
                    53:f7:cf:f9:04:0f:42:de:d1:eb:d1:36:ad:31:b0:
                    5b:8d:a3:7f:a3:87:be:1c:42:61:3c:79:f2:a2:49:
                    9e:78:69:a9:6a:ce:fd:32:95:60:ff:6b:6a:3a:99:
                    f8:8d:a0:4b:ea:f7:6f:b2:e4:61:81:74:83:08:69:
                    d9:52:2e:83:34:9a:cf:51:15:6d:01:85:a9:f4:7c:
                    72:a7:95:1a:5a:cb:c0:26:d7:da:c3:c6:05:a4:73:
                    18:6c:f3:20:bc:31:3b:d5:0b:26:ce:6e:bc:97:20:
                    70:4a:58:93:c2:e9:1b:e2:68:df:38:1c:d1:ad:c5:
                    59:76:d9:f3:1e:2d:69:3e:83:ff:5e:df:76:a4:bb:
                    6e:16:57:3e:02:83:71:8d:a5:30:d5:fc:64:c8:14:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F9:88:3C:7F:70:A6:48:41:CE:3A:8C:55:0B:40:96:85:9A:7C:F1
            X509v3 Authority Key Identifier:
                keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:90:f2:ba:d0:75:8e:ac:8d:f1:bf:2f:69:d7:bc:98:b7:30:
         9f:de:ae:2e:d7:1e:f4:7b:0b:eb:d4:8c:46:f0:c3:58:ba:12:
         3b:92:07:82:8b:df:6f:53:8e:87:65:eb:6b:01:b6:8c:e5:eb:
         ed:04:a4:42:64:9d:88:54:07:ea:9f:37:3d:20:b8:55:76:80:
         03:07:72:9b:05:16:45:15:cf:81:78:d6:b8:90:ce:57:f1:61:
         68:9f:bd:0d:36:67:41:d5:2f:5d:ce:d3:83:1b:fa:24:20:8e:
         cf:89:30:55:05:22:e0:4f:84:ea:9d:74:f0:fa:6c:16:cf:b0:
         b6:e8:de:41:2c:e4:8c:f6:dc:17:ef:e3:16:cd:56:a8:ef:91:
         39:77:f3:ea:38:64:84:96:0e:1b:50:64:04:c7:ae:04:88:ea:
         f0:36:21:e5:0b:09:8b:f3:21:58:75:fd:b5:32:b2:a9:9a:36:
         92:2f:9e:70:43:be:12:73:fa:d4:c8:f5:04:7d:9d:c6:1d:78:
         79:59:a8:4d:e2:6e:6c:2f:c8:8e:fe:98:6c:e7:10:12:59:8d:
         f1:6f:ef:7f:6a:cd:e4:94:74:53:e9:8f:db:48:86:10:2f:f9:
         b1:9f:bb:40:fe:40:88:57:b1:c3:2b:f0:59:e8:00:cf:2f:15:
         6e:56:f5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:28:43 2024 by rpki-client on console-fra.rpki-client.org