Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          L6EMrPHzhKcpLrjmzZmwjNi/swO4WQeR4MzHCA3OAHM=
Subject key identifier:   99:7A:5C:7D:3B:6F:18:4D:88:8A:47:86:26:03:DB:8B:57:1E:ED:53
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       018F885B63AD1AE71D7B73927EA2EB275065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          EC
Signing time:             Fri 17 May 2024 21:00:41 +0000
Manifest this update:     Fri 17 May 2024 21:00:41 +0000
Manifest next update:     Sat 18 May 2024 21:00:41 +0000
Files and hashes:         1: K7aLBiVj3aH7S19gkdQBxTw5Kgg.roa (hash: bauAUQNQZR9gDqUB1cQwlzhE6HIzTFXHw78zQQdutDk=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: iWzl6lt+X9sIr7Nm6CYHs5rgOpCrzojYaMB7bHecmHk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:63:ad:1a:e7:1d:7b:73:92:7e:a2:eb:27:50:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: May 17 21:00:41 2024 GMT
            Not After : May 18 21:00:41 2024 GMT
        Subject: CN=997a5c7d3b6f184d888a47862603db8b571eed53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:93:04:23:d3:86:f6:8a:ed:c6:32:2f:8e:
                    27:e9:39:8b:37:97:72:16:8e:f1:ab:53:fb:f0:43:
                    32:10:3e:62:bd:61:14:24:85:c8:10:e3:57:91:86:
                    47:e7:ce:51:ca:89:08:b9:b8:6d:02:34:d5:1e:14:
                    5c:40:1b:55:50:08:52:ea:4e:3d:1e:d5:6f:65:4c:
                    1d:8a:3d:9b:3b:e8:84:65:76:4c:99:2e:0f:0f:bb:
                    c2:17:ea:43:6c:a2:c0:f8:4d:c5:39:6b:e8:1e:26:
                    39:66:9b:5a:44:cd:20:3c:89:62:1b:74:3d:66:58:
                    82:4c:bf:54:7f:b2:f9:1a:01:28:b7:ec:17:c2:cd:
                    6d:b4:90:e7:17:85:44:11:4a:10:22:4b:e9:cd:b3:
                    d7:97:eb:89:e5:28:80:f8:1c:42:c0:ed:65:0d:6d:
                    bd:ad:43:06:d3:c5:dd:17:b5:62:73:1e:4d:a8:9c:
                    22:7c:45:7f:4b:a7:c2:1f:ca:3e:35:94:f8:60:b7:
                    8e:1d:f8:db:5d:34:0a:30:ff:ea:47:a4:76:ab:03:
                    1c:52:a8:8b:cd:21:a5:80:7d:d0:d0:a4:13:5e:60:
                    eb:47:1a:e2:87:e4:a0:0f:dd:30:be:1e:55:7b:da:
                    f4:8a:65:74:61:55:07:8b:5d:2d:01:61:80:83:91:
                    ab:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7A:5C:7D:3B:6F:18:4D:88:8A:47:86:26:03:DB:8B:57:1E:ED:53
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f9:4a:99:0f:11:fe:cf:37:f6:83:6d:06:59:39:3a:ba:d1:
         a0:e8:4c:78:de:41:7f:6d:2d:ab:0e:70:7d:78:53:3f:89:e4:
         3b:d8:59:12:38:12:c7:b3:1a:67:7b:ee:1a:7f:a7:17:d7:04:
         6d:f2:44:98:0d:76:42:9e:b8:4c:7c:db:42:4e:7c:1b:7f:16:
         a8:5d:76:14:07:31:6d:31:99:9f:0d:5b:4b:53:c1:03:48:c4:
         df:3a:b7:05:dc:05:31:ee:84:4e:66:e7:75:7e:19:a0:38:ad:
         c0:6f:4b:dc:6c:cf:f3:bd:65:28:91:eb:ea:7c:fb:b7:5c:8f:
         63:f1:41:5f:7c:6e:9b:6f:09:1b:5c:aa:65:c6:96:b9:a9:c9:
         3a:ad:05:08:14:65:f2:d4:9e:0f:81:60:b1:b3:ef:0c:64:8f:
         a0:e3:10:6e:cd:b6:88:7b:59:35:84:18:ff:87:4b:c4:3d:62:
         47:06:51:a3:47:68:a4:7c:ae:18:56:c0:21:8b:24:51:1b:8c:
         18:0c:0c:5a:cf:d4:65:db:fe:e2:33:c3:72:4e:a3:0c:03:0f:
         74:c7:fc:42:4a:1d:43:4b:49:07:54:4b:e6:0f:a5:a8:9b:64:
         6a:18:c4:4e:40:49:cb:2b:41:44:6b:4d:25:88:e3:a5:82:e8:
         d2:2b:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:08 2024 by rpki-client on console-fra.rpki-client.org