Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File:                     d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier:          xtoly1Vnw4tvp+txT9NIkLi+XFxhOrCyzkta20pA5TU=
Subject key identifier:   72:80:8D:72:49:81:F0:94:FE:59:62:7C:8B:2B:F7:00:D2:4E:16:82
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer:       /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial:       018F877F38255804EC82F1E069137910AB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number:          0E9C
Signing time:             Fri 17 May 2024 17:00:12 +0000
Manifest this update:     Fri 17 May 2024 17:00:12 +0000
Manifest next update:     Sat 18 May 2024 17:00:12 +0000
Files and hashes:         1: 3We-6s6Y_QbkSWLuHQeKZNx3-Zc.roa (hash: VU/vtD5E2vVsFaeX523CNrkCexM+i5NFIFPY5Skp6/o=)
                          2: CynpoasRHL5FiEGtIDneBlvd_8o.roa (hash: 5Dbwx0zXopDWiApvFw4xAgbTHk89eG8cpvLqhSeh+HQ=)
                          3: _3cWirOd-rGYOKH0PZ-0AOkN2tE.roa (hash: CDU1qRhsQws+rMDeXDbN4WQuXFY4lEq+1F4uRii0XnU=)
                          4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: pOtfhSv1Xt1iv1JlxZeLCfwUQwAvsg1q1H+BKmzNF0Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:38:25:58:04:ec:82:f1:e0:69:13:79:10:ab:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
        Validity
            Not Before: May 17 17:00:12 2024 GMT
            Not After : May 18 17:00:12 2024 GMT
        Subject: CN=72808d724981f094fe59627c8b2bf700d24e1682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:fc:76:03:77:59:2d:2a:c7:0a:78:92:75:
                    9d:12:9e:55:41:05:37:6a:35:97:4c:ab:16:85:2e:
                    84:95:b5:c4:e0:5d:96:78:3f:97:70:4c:10:9c:76:
                    f8:b7:69:c0:40:eb:aa:92:cb:8e:60:9f:48:e9:4a:
                    02:bb:99:c3:e8:e1:17:5b:7d:f5:f6:e1:7f:4f:69:
                    8b:1a:c0:67:de:4a:ac:9a:d7:5a:25:57:bc:53:8b:
                    47:43:90:20:fa:5e:05:8a:0a:c8:82:3c:31:57:56:
                    d0:61:4e:71:e7:4e:56:82:37:c2:9f:91:2c:2c:99:
                    ae:b1:9e:2b:4d:f4:f6:1b:c8:e3:b1:a5:2d:5c:51:
                    b7:18:e9:3c:6c:54:fc:42:f8:ee:e4:15:39:cf:66:
                    33:a0:6f:0b:15:f6:f5:2f:05:38:54:f8:1e:6c:76:
                    02:8f:ad:c1:89:54:07:0f:5d:c0:84:c2:d6:f5:37:
                    3e:cd:75:89:12:d7:f9:74:30:3c:72:53:d7:30:19:
                    ce:93:e9:5d:b5:be:df:b4:44:de:1c:de:25:f2:fc:
                    cf:7f:e5:a7:78:a3:91:f7:37:ce:5c:25:f4:4b:b8:
                    35:a7:3a:0e:65:d2:13:20:2e:9b:fd:18:5c:fd:4c:
                    f7:54:f7:67:a7:97:a6:83:5e:04:41:03:cb:4d:49:
                    23:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:80:8D:72:49:81:F0:94:FE:59:62:7C:8B:2B:F7:00:D2:4E:16:82
            X509v3 Authority Key Identifier:
                keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:34:01:f6:b2:1d:ee:eb:d0:12:17:53:2c:55:a0:26:15:e0:
         09:5a:d4:88:28:e2:ea:60:a4:f5:fb:3c:33:d8:26:0a:e8:68:
         c5:bc:9b:bb:06:63:9e:ab:35:69:5b:b5:2d:74:a9:ec:a0:74:
         b8:ba:cb:66:c2:6c:95:18:9c:1e:e1:e3:9b:a0:91:36:41:0a:
         2e:7f:bb:7f:62:f3:17:d5:e2:29:a3:b0:6b:ad:c8:78:20:34:
         fd:38:03:3e:18:d9:6d:7d:dd:19:77:d8:2a:ff:26:67:0e:e3:
         0e:37:a6:eb:3e:ca:d4:6b:f0:26:aa:5a:8e:1b:30:fd:f9:be:
         a3:a0:3c:4f:43:39:f1:df:e1:aa:c4:44:58:f6:d8:11:22:73:
         9f:d9:9a:c6:15:e0:c9:2b:f0:9c:ce:c3:8b:94:f6:c7:5d:31:
         bc:93:ac:ab:3e:6c:b8:04:98:9c:5d:db:4f:99:a9:03:17:14:
         90:cb:7b:d3:cc:e3:67:a9:ef:2d:8e:bb:94:37:aa:bd:18:09:
         71:70:47:3f:91:24:41:67:71:2d:e8:bc:c4:78:0e:db:73:8a:
         ee:38:cf:40:42:58:03:b1:8d:23:90:17:27:ff:9e:a2:84:7e:
         f4:da:a0:9e:d5:77:4e:2d:b6:9a:e5:42:d3:db:b5:81:04:63:
         f2:d8:e0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:23 2024 by rpki-client on console-fra.rpki-client.org