Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File:                     18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier:          bvOhm5lWetursQCLNJtmEMDHDMtqf3Qahq9xOy3VsNw=
Subject key identifier:   84:1F:43:1D:C9:91:0D:1F:0D:B7:D7:6E:92:53:A1:13:8A:CF:21:14
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer:       /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial:       018F3EF97A5A7076EDBFD105B8BADAFC7397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number:          0CDA
Signing time:             Fri 03 May 2024 15:01:28 +0000
Manifest this update:     Fri 03 May 2024 15:01:28 +0000
Manifest next update:     Sat 04 May 2024 15:01:28 +0000
Files and hashes:         1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: N7Za5P1GN1Z3Lre3Ix5sGLkCewASmhWOaYAQMGG33nU=)
                          2: Eho67qyLyk0Un50bzwF3LwrwlUg.roa (hash: ZU3wT1Kc11x7b3C14TSWWog1KU7wRCU0L2MDDGZwmJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3e:f9:7a:5a:70:76:ed:bf:d1:05:b8:ba:da:fc:73:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
        Validity
            Not Before: May  3 15:01:28 2024 GMT
            Not After : May  4 15:01:28 2024 GMT
        Subject: CN=841f431dc9910d1f0db7d76e9253a1138acf2114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:52:8b:4e:45:43:7c:fd:85:ca:a2:54:d8:7a:
                    60:f0:15:4b:a5:14:d9:af:65:46:f8:c3:d1:8f:4c:
                    57:8e:19:02:51:0c:af:87:51:8e:ab:e1:cf:c3:6b:
                    6e:cc:33:26:10:fc:bc:42:e5:84:3a:81:b9:97:a5:
                    a2:cd:1e:00:15:1b:08:21:6d:9a:06:5f:db:e9:d1:
                    a8:5b:16:37:ef:0c:c2:4a:06:e0:1c:d9:db:8c:0e:
                    c2:21:2b:8a:9f:7e:70:0a:f3:64:46:23:a5:e2:e8:
                    fd:1c:33:61:db:2b:b5:8c:35:d0:8f:87:5d:f5:bc:
                    a5:1b:f2:cb:b2:fc:24:61:da:c7:b4:03:fe:22:95:
                    5b:bf:86:f7:bf:e1:d6:85:53:c7:17:4e:a2:93:82:
                    1d:8e:d4:98:ba:23:ec:5e:60:59:28:88:90:b5:c8:
                    48:d4:7e:f6:4a:f1:a2:db:30:c3:d7:c7:c3:2f:b4:
                    3a:44:9b:4b:99:25:03:07:8b:4b:c4:ab:9c:b7:57:
                    c7:9e:bf:f4:0f:83:fe:22:e8:b2:21:fc:db:53:22:
                    d7:2d:18:9b:3b:90:38:e8:7e:4f:01:fd:6f:74:2a:
                    0a:01:3b:06:58:c9:7d:0f:e4:dc:e7:a1:70:39:c2:
                    9e:d4:43:1c:4d:03:a3:40:3f:c9:0d:8f:3c:60:80:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1F:43:1D:C9:91:0D:1F:0D:B7:D7:6E:92:53:A1:13:8A:CF:21:14
            X509v3 Authority Key Identifier:
                keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:57:3d:a8:28:07:4e:5f:e3:05:46:40:3e:35:f0:1a:85:6b:
         2b:9b:4a:86:74:06:cd:40:34:04:23:f8:ba:ee:6d:dc:25:d2:
         24:68:85:4c:14:5f:3d:56:6b:00:96:f6:e3:ee:c2:e1:ee:49:
         db:1d:bc:bd:57:93:80:e2:d2:ff:6d:92:16:28:e0:56:42:81:
         b7:e6:a3:2c:a9:34:73:f0:2d:04:16:58:fe:15:7c:37:fa:5f:
         98:6b:f2:79:d1:d8:f4:5f:a8:82:49:31:86:b6:9d:38:fd:8f:
         b2:9a:b7:fb:2a:8f:8e:84:78:6c:ae:77:c2:e4:35:fb:3d:7b:
         a4:a4:09:f4:e1:94:72:44:39:db:6d:ad:55:93:83:2f:7e:cf:
         66:a7:4b:ab:06:42:4a:ca:0f:8a:d7:05:7e:64:80:81:79:b3:
         56:68:d5:1e:f4:14:24:24:78:7e:c2:a5:8c:02:5a:9e:5d:94:
         80:b8:07:76:12:0a:81:14:a4:22:ee:f3:09:02:07:fe:b9:7c:
         92:9e:6b:09:c1:d9:65:2b:35:b1:d4:90:13:b9:ad:e1:a9:22:
         b3:12:4b:05:e7:81:88:e4:28:b8:e6:07:21:18:8c:b1:c1:90:
         d5:48:db:de:e5:10:8e:dd:04:43:c7:9d:32:97:70:bf:a8:50:
         fa:a3:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:18:21 2024 by rpki-client on console-ams.rpki-client.org