Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File:                     DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier:          Tfailtye+yL8Jqwkoad4zMwsVThvMv4TqJqHpHwjePQ=
Subject key identifier:   CB:2E:DD:98:28:E6:6E:12:A1:6B:DA:B5:A3:B9:B5:A1:BA:C5:FC:DA
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer:       /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial:       018F87490F8BACFAA0F1598D2AAF391767BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number:          039A
Signing time:             Fri 17 May 2024 16:01:03 +0000
Manifest this update:     Fri 17 May 2024 16:01:03 +0000
Manifest next update:     Sat 18 May 2024 16:01:03 +0000
Files and hashes:         1: 82-kOASz8EvNtkqFiSkz1FewZGc.roa (hash: KVeutrGO2qA6T8VJ2ufYVAyel5VxxBL12Qs4+U80gmI=)
                          2: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: hFyWsnlTF+lpfRMXoUS4wkGn17srdOAGhAycqt/PquA=)
                          3: o_mN0kLoqn4SMa9TwLMg6UV5aqI.roa (hash: dFyNi4A4ruLi4IqW/0Qk4w+NHE0kf64x188lMkRt9tQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:0f:8b:ac:fa:a0:f1:59:8d:2a:af:39:17:67:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
        Validity
            Not Before: May 17 16:01:03 2024 GMT
            Not After : May 18 16:01:03 2024 GMT
        Subject: CN=cb2edd9828e66e12a16bdab5a3b9b5a1bac5fcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:72:c1:d2:1d:e0:d6:c7:23:cf:f8:15:9e:
                    9d:ca:70:f6:8f:7b:e7:e5:01:c7:67:79:74:98:b4:
                    94:45:88:7c:5c:12:4a:03:71:44:25:7a:cb:a6:37:
                    ca:e1:ee:90:a9:3a:22:91:5c:bd:0e:ec:b5:36:ae:
                    d2:43:3f:da:c9:85:c2:5d:58:5a:de:fd:6e:4a:35:
                    ab:51:0c:f5:3f:3e:72:ec:fb:77:98:5d:4d:bb:22:
                    bc:ff:e6:ed:1e:fa:08:25:2e:75:45:e6:9a:aa:bc:
                    e9:bb:53:27:74:e9:79:54:9a:95:a1:09:b5:7e:b1:
                    19:c1:70:8c:34:2e:46:f7:aa:11:6e:cc:a2:3c:9c:
                    4f:75:22:3d:dc:3c:a0:72:a1:cc:9f:26:b2:51:06:
                    04:9f:de:c8:26:db:11:26:d1:e0:ea:26:b5:25:2e:
                    b2:95:6e:03:71:0c:ce:9e:f2:7a:12:fd:c7:25:78:
                    3b:9d:41:37:b9:e4:9a:d0:c3:f4:7b:7d:37:6c:cc:
                    66:48:63:59:cf:10:4a:51:ad:68:ff:16:e4:70:49:
                    3e:74:41:ea:f9:4f:f9:83:91:f6:6c:f4:e7:ea:96:
                    ae:37:6d:46:40:0c:6a:60:20:b6:fa:bc:7e:72:ec:
                    ad:fc:46:0a:e0:51:50:12:51:f4:f2:d1:df:66:b9:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2E:DD:98:28:E6:6E:12:A1:6B:DA:B5:A3:B9:B5:A1:BA:C5:FC:DA
            X509v3 Authority Key Identifier:
                keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:12:ff:2d:0a:2d:fa:6a:6a:47:41:73:55:1d:29:9a:07:
         ce:6f:50:1f:d4:b5:c6:cd:71:17:b1:43:74:4f:c4:f4:bb:63:
         32:17:da:07:26:dd:77:3b:c1:ed:bb:7f:ae:ca:e8:8d:e5:19:
         76:84:c9:13:3f:57:9b:cd:de:6d:43:69:25:9d:48:ad:ba:5b:
         c0:5a:bf:52:b6:7a:ef:34:91:4e:f0:f0:91:e5:0d:da:a3:0f:
         45:9b:cb:bd:c3:0a:3a:44:33:e0:1f:c8:a7:a6:be:09:22:b1:
         1d:9a:a1:73:b7:22:28:da:60:c3:9e:d3:c2:23:7b:86:f2:57:
         62:43:9d:0f:60:bd:70:42:01:04:bc:d4:68:ce:04:1d:6b:55:
         a7:09:5c:fd:a1:7c:df:79:f5:72:34:d5:c0:c9:63:71:24:5e:
         e8:49:8b:74:a7:5f:e4:0f:22:ad:66:90:6b:a3:c2:2a:a0:fb:
         a1:b7:f2:7e:8a:64:76:12:ee:ed:2a:22:87:64:d0:ac:1e:ed:
         32:e3:51:57:49:1e:de:63:e2:c3:98:3e:3f:22:d4:0e:7a:32:
         40:2b:6a:bb:28:e0:70:9a:70:0a:45:3b:ca:f3:34:aa:73:dd:
         7a:cb:a3:d4:1d:fb:87:26:ba:b8:66:3c:d1:9f:30:a4:4f:32:
         3a:bb:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:09:10 2024 by rpki-client on console-ams.rpki-client.org