Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
File:                     rMMoWMzalYbG2WceMQ1RwoJoxFk.mft (raw, json)
Hash identifier:          rwJY8yewzozbusU16Ij9H1YNixMsLTVUqV/eS1Uw7G4=
Subject key identifier:   43:EB:29:FF:63:48:AF:2B:5F:00:DE:5A:85:D2:F1:C7:66:00:16:16
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Certificate issuer:       /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial:       018F701D668751EEF6A5F1AE8A5B6D0E2D29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
Manifest number:          1108
Signing time:             Mon 13 May 2024 04:02:05 +0000
Manifest this update:     Mon 13 May 2024 04:02:05 +0000
Manifest next update:     Tue 14 May 2024 04:02:05 +0000
Files and hashes:         1: 0Nd21FLbycmx78NdUehfrieGVPQ.roa (hash: 10CZZgm4EZ9W4TjZxDGmXh2eb3ZS2rzAVekWW6U6GTo=)
                          2: rMMoWMzalYbG2WceMQ1RwoJoxFk.crl (hash: CzRkcs9it1X/F8ObCc9irQvDBIquv1YHVHlxrdNkVCw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 04:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:70:1d:66:87:51:ee:f6:a5:f1:ae:8a:5b:6d:0e:2d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
        Validity
            Not Before: May 13 04:02:05 2024 GMT
            Not After : May 14 04:02:05 2024 GMT
        Subject: CN=43eb29ff6348af2b5f00de5a85d2f1c766001616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:7c:6b:8d:0d:83:9e:50:48:bc:3b:82:2d:
                    3d:25:c0:a1:12:f7:ac:23:ff:ce:ed:c4:e2:5f:14:
                    c6:ed:cc:d0:7f:16:c4:51:14:2c:76:f4:66:89:cc:
                    30:e0:f3:44:55:8e:9f:97:67:81:b1:71:0a:b9:4a:
                    47:88:51:08:12:d2:87:64:2e:30:e2:35:30:07:c9:
                    cd:f3:69:12:73:24:16:0d:da:cd:73:9b:db:32:46:
                    35:99:b4:90:78:81:1b:90:aa:09:d1:14:a4:13:92:
                    0a:17:95:f6:e8:d9:97:20:37:71:12:2c:67:9b:72:
                    57:e6:60:d9:8a:b1:c3:a3:67:83:85:60:fb:e5:57:
                    77:07:4a:45:1d:d6:4a:20:f3:bd:e0:cd:a9:5f:fe:
                    fb:ac:71:c9:1f:83:5e:a2:8d:f2:f3:8c:13:65:e2:
                    fa:79:57:44:7b:41:fa:b2:8f:a0:d3:58:0c:dd:2a:
                    19:50:22:64:46:50:a5:58:89:54:c2:f7:e7:39:02:
                    85:f1:9b:89:06:a0:20:97:1c:2f:87:59:e2:bc:ed:
                    86:b3:d8:b4:f2:c1:54:ef:b0:af:08:0a:ca:c1:df:
                    2f:8a:22:5a:32:18:ae:e9:78:5c:b1:82:e0:b1:e9:
                    18:1b:07:4c:d7:2f:04:07:20:e9:f0:8f:eb:07:02:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EB:29:FF:63:48:AF:2B:5F:00:DE:5A:85:D2:F1:C7:66:00:16:16
            X509v3 Authority Key Identifier:
                keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3f:c6:8a:b7:a2:3a:f7:52:74:ff:da:36:60:9d:c7:d8:1d:
         7c:43:36:6e:be:87:7a:52:e3:00:81:d4:e9:2e:21:22:d8:b9:
         21:22:2b:f5:d8:6b:75:35:91:80:9f:e6:b8:f9:02:2a:8a:6d:
         37:f3:34:5f:5a:22:13:7b:2e:af:a4:f8:fc:c0:5a:9f:f6:ef:
         e0:9c:41:42:82:1a:10:22:b5:c8:11:e6:34:3f:56:ad:db:8f:
         22:e0:c0:64:cf:1f:45:04:d1:9a:43:eb:52:8b:45:68:b6:58:
         42:ac:22:23:22:89:e1:5c:21:84:bd:49:73:b8:3e:8d:84:d3:
         df:00:54:1c:38:5f:1c:2d:34:fc:bb:a2:6e:e3:68:8c:4d:84:
         40:28:51:60:58:f3:88:68:c8:ba:35:45:12:53:5a:3a:d4:1a:
         57:ef:e3:49:7b:ff:f4:77:88:07:11:b7:a0:3b:78:29:49:b1:
         8d:75:b0:3d:f4:ee:74:00:21:42:b9:d4:fa:6d:ad:52:f7:1b:
         c9:a8:8d:78:ae:ba:93:eb:cc:50:19:cf:02:f5:c4:14:93:95:
         53:77:71:45:e8:c3:2f:b1:6f:d3:7f:d6:39:3a:3a:db:29:b5:
         9b:92:fb:51:01:3d:35:1f:9e:f6:9f:22:f0:42:c0:a9:68:68:
         fa:1a:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 13:29:01 2024 by rpki-client on console-fra.rpki-client.org