Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File:                     xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier:          sFRDJJhxNE+cjHH+1h5DsWrF3uFokX29J80W1LfjRXs=
Subject key identifier:   12:15:C3:39:DA:DC:B2:35:7D:76:D8:26:1F:13:CA:3B:09:AE:A7:94
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer:       /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial:       018F8749E4103F705DB945D9DB1BF61245C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number:          0D73
Signing time:             Fri 17 May 2024 16:01:57 +0000
Manifest this update:     Fri 17 May 2024 16:01:57 +0000
Manifest next update:     Sat 18 May 2024 16:01:57 +0000
Files and hashes:         1: Dgr4pl7_-irt4dyaGhj6OswSjXY.roa (hash: U8XBUa+RiM8GLE/JVyz5Ia7a6nwXYHgt97SKvfm2d34=)
                          2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: 6ripbhSH/Vmo6R3khY5zzGigjWcuePsfXyy2b+a80As=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e4:10:3f:70:5d:b9:45:d9:db:1b:f6:12:45:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
        Validity
            Not Before: May 17 16:01:57 2024 GMT
            Not After : May 18 16:01:57 2024 GMT
        Subject: CN=1215c339dadcb2357d76d8261f13ca3b09aea794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:86:82:91:a9:0a:77:d6:bd:b9:80:27:76:45:
                    e1:c5:f6:1c:38:38:f3:b3:92:49:23:2e:12:92:45:
                    9f:f3:a5:11:10:0b:2a:09:1b:6a:32:5b:ea:23:b9:
                    03:e0:a6:3e:0b:d4:6f:46:ac:74:d9:37:45:5e:38:
                    cd:c2:01:cd:d6:4c:61:78:17:5b:19:bf:28:88:98:
                    d5:f9:c3:b6:83:f0:e0:25:78:9f:f3:04:2f:aa:4e:
                    ba:7d:b5:c7:44:27:4a:4e:8a:7f:c5:a0:de:e9:41:
                    94:ee:e1:e7:d7:5d:22:74:ae:3d:41:82:0d:ea:5b:
                    77:54:06:42:d0:51:14:3e:91:bb:ed:8c:55:45:2a:
                    b1:91:1b:ab:88:14:bb:8b:a7:05:af:3a:91:01:ca:
                    19:13:5a:0d:d8:86:e2:38:a6:2e:13:49:5f:3a:68:
                    81:86:5f:01:93:00:90:7f:0b:92:c4:af:e9:0e:c1:
                    59:64:81:c4:74:cf:92:fa:4f:24:bc:95:aa:fb:e8:
                    90:84:d5:d8:ef:32:37:3a:de:d9:71:95:6c:6e:a9:
                    5c:58:e0:8e:02:79:c2:65:f4:5e:71:94:c4:4a:4b:
                    a6:fc:94:30:9c:4c:10:b8:61:46:3a:38:8c:0d:b8:
                    be:66:06:0b:40:50:be:34:97:af:2c:5b:36:be:62:
                    97:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:15:C3:39:DA:DC:B2:35:7D:76:D8:26:1F:13:CA:3B:09:AE:A7:94
            X509v3 Authority Key Identifier:
                keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:bb:b1:60:b3:62:36:78:5e:2f:54:6d:f8:d2:f5:ce:68:
         64:c7:e5:13:f0:2e:10:91:bb:8b:d4:48:63:7e:40:f5:6d:5f:
         e9:0d:00:ec:14:8f:73:30:15:df:df:a6:4e:46:69:d7:67:cb:
         69:b2:d4:72:c6:09:c8:08:36:df:bf:bd:45:98:0b:50:df:de:
         50:ac:63:d1:69:08:9b:da:1e:41:37:4d:d5:d4:cc:af:c4:cd:
         a2:bb:c7:73:18:63:cd:d4:b5:00:d5:7b:ea:38:6b:93:a9:63:
         bd:2b:df:46:5f:65:f4:92:55:09:70:7c:e7:7f:64:a2:c3:7f:
         45:9e:e0:0e:dc:70:09:b2:28:0f:ce:f9:53:52:e6:5e:41:19:
         6a:d3:85:60:b8:0a:7e:3e:6a:8c:c0:bd:1b:33:a3:f5:4b:86:
         40:79:d1:29:bd:ad:79:aa:9d:8a:3d:63:b3:17:9e:0c:de:09:
         97:b8:ec:f6:a6:86:a0:4b:ab:8f:a6:ba:d4:7f:6f:ac:3e:08:
         4f:fc:64:69:11:55:c7:86:d0:e9:c0:63:df:1a:11:29:34:ac:
         53:c7:62:81:13:b5:c0:af:14:90:e1:a8:e1:f4:84:53:f6:05:
         9c:1a:ac:74:86:f4:98:d9:4d:c5:43:9b:9e:d3:75:2e:06:92:
         1a:8f:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:50 2024 by rpki-client on console-ams.rpki-client.org