Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File:                     p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier:          w9CXQBeVNn8pRPSH0X0j9zF9+LMohCLpDFSMHi+pEj4=
Subject key identifier:   62:4C:2B:A5:BD:46:ED:54:E7:26:93:85:26:AE:A0:36:CE:0D:E4:2B
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       018F87ED121AB9DB880D9080073C18D5500E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number:          10CF
Signing time:             Fri 17 May 2024 19:00:11 +0000
Manifest this update:     Fri 17 May 2024 19:00:11 +0000
Manifest next update:     Sat 18 May 2024 19:00:11 +0000
Files and hashes:         1: 1-O1BWLqjTpYyO90J18gW9W118tc.roa (hash: +nZ2jb+X1rKvLziaeIfIr9PMPiV2fn6vlvMpaVgPHAU=)
                          2: DCAZ_iezT8UB4rn2j-bLP0UL0fE.roa (hash: dfelRCSGuziaamwOGE6q3UZGxs007EbC7qMsyigdVCI=)
                          3: _VoeAZW4QbXhNDoMO3c_GCKTmxg.roa (hash: iQxq9sxZPbgX6iNmyVUzj92+81t/yUzdnNBUYVjbrSQ=)
                          4: bWd1JiKaNT9glgl-IaitZU9oLME.roa (hash: D24aYzQqw2pm8LhOuarzrwzSnqqikuToeB3UwSdruXE=)
                          5: hNfE-EiGDK8pcxV2aPkDWALGAyA.roa (hash: PfrYUiUHJXlo50KwRIj/jIFhPPNZSC/Vb7rdebqeBms=)
                          6: lKHPOFsDQakBgYV0VdSsvdMAJ8U.roa (hash: m8WVkhF0cSaG9ISOggtKLwfq1l4ZkTJLrrV43loL3Xc=)
                          7: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: IoqLbuA2AICJUAIT7uW15sxYolxK7uRo2yhEMq8FmkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:12:1a:b9:db:88:0d:90:80:07:3c:18:d5:50:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: May 17 19:00:11 2024 GMT
            Not After : May 18 19:00:11 2024 GMT
        Subject: CN=624c2ba5bd46ed54e726938526aea036ce0de42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:80:6f:12:60:b8:96:c9:98:73:44:a9:50:
                    48:89:fb:33:6f:af:ae:e3:3d:97:29:8b:be:09:eb:
                    9b:bf:6d:82:28:5a:f2:88:2e:57:7c:3a:ae:37:16:
                    a9:ab:69:8d:60:85:8a:a4:5d:6b:ae:90:7c:66:14:
                    08:6d:c4:51:33:6d:46:6b:73:bf:10:b2:a4:93:77:
                    0c:3d:7c:ea:25:75:12:39:e5:ce:e3:a1:b6:03:a1:
                    93:e6:7c:6e:38:e1:d6:3e:1f:1d:3a:1d:e9:84:15:
                    2b:10:4b:29:70:ba:b9:d8:b2:e2:1d:6b:50:26:6b:
                    50:fc:85:da:4f:d5:3c:35:4c:f5:1f:d1:5c:ac:27:
                    2b:e0:81:70:81:56:72:62:ba:cd:b3:ab:e8:eb:66:
                    a8:f0:8b:ea:f2:c2:16:2b:d3:e2:09:87:b8:eb:75:
                    d5:33:32:77:4c:98:2d:f4:b8:ec:ee:9d:b0:4f:48:
                    3c:7b:b6:eb:23:79:33:b5:d1:b2:80:75:e5:c6:8f:
                    21:1b:81:f1:f4:5a:c7:8f:db:0a:79:d6:8e:c1:a7:
                    36:ef:7b:b8:de:d1:d2:0d:45:cb:f4:8d:58:f6:a3:
                    da:45:79:ed:10:18:5d:0e:21:40:e8:03:bf:b6:bf:
                    cc:8c:9c:a4:28:0d:99:ea:9a:24:0c:bc:2f:7e:8c:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4C:2B:A5:BD:46:ED:54:E7:26:93:85:26:AE:A0:36:CE:0D:E4:2B
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:49:0f:c5:89:74:a7:e1:9e:bc:10:59:fc:43:ab:fe:cf:90:
         65:44:98:5c:81:3f:e2:8d:57:70:00:56:7f:98:d3:8b:ed:18:
         5e:bf:a6:f5:03:0a:7b:44:f5:c3:d2:32:70:b9:11:e0:1f:38:
         d6:b8:16:21:d1:19:be:0a:12:e0:eb:42:14:ce:74:0b:08:5e:
         60:a9:4f:1c:99:ad:0b:de:6e:da:85:ee:66:8a:29:ef:11:c7:
         cb:34:47:19:79:47:8f:d0:9a:9e:b4:5e:9c:6a:73:63:09:8a:
         fa:31:77:a0:8f:8f:39:29:2b:c7:98:e4:30:63:d3:7f:d4:cd:
         a9:5b:37:34:04:a9:bc:b7:9f:12:7c:55:74:cf:2a:41:f8:02:
         01:3a:5c:c0:d7:26:86:44:e4:28:cf:f6:f5:33:e6:cf:f5:a4:
         cc:ef:34:73:d1:08:e5:9e:e9:36:7d:d3:2d:dd:1e:5f:a6:d8:
         a8:b1:82:0a:34:52:29:8c:cc:99:96:64:ff:19:ee:6b:21:87:
         0a:0c:eb:bd:94:26:e4:e9:ef:52:6e:18:c7:8a:79:65:70:c7:
         fa:73:fe:12:fc:6b:a2:52:1d:42:c3:34:79:76:ae:56:c3:24:
         e6:02:77:58:70:8f:fa:f3:75:83:d7:92:59:7a:a9:4f:0c:6d:
         6a:fe:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:11 2024 by rpki-client on console-fra.rpki-client.org