Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
File:                     XHbv8miEvwBiB9cis7AaRNK1YZk.mft (raw, json)
Hash identifier:          SsmpFyiggolnrgw8UIPD7D1jiiQMR0xVa4VbAklSeLA=
Subject key identifier:   B3:1C:89:EF:43:CB:50:20:E9:A4:77:E5:C6:25:93:D9:24:8E:23:05
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Certificate issuer:       /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial:       018F87492CDF3E6928673D8E3D3262D7C416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
Manifest number:          09AE
Signing time:             Fri 17 May 2024 16:01:10 +0000
Manifest this update:     Fri 17 May 2024 16:01:10 +0000
Manifest next update:     Sat 18 May 2024 16:01:10 +0000
Files and hashes:         1: XHbv8miEvwBiB9cis7AaRNK1YZk.crl (hash: HEJNT8KmjdvtkvBrapt3bW+tm/qichAcrSSCeH6hPOY=)
                          2: Xyz5xN6_RZIN5Aw9s3DFAGFri8E.roa (hash: ZBd5GQtaKkhMd1TMuYQKZwfaqj7heCcPVeOD6heaOKU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:2c:df:3e:69:28:67:3d:8e:3d:32:62:d7:c4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
        Validity
            Not Before: May 17 16:01:10 2024 GMT
            Not After : May 18 16:01:10 2024 GMT
        Subject: CN=b31c89ef43cb5020e9a477e5c62593d9248e2305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:33:89:a1:6b:4b:c4:78:c8:ee:36:2f:b1:
                    0b:27:06:59:c4:90:23:1d:80:09:cc:e8:38:0b:42:
                    01:53:1c:1c:dd:f8:ac:12:f7:f5:92:7b:f9:dc:8e:
                    d6:ee:72:ba:37:7d:86:7a:e3:ab:45:e9:3c:23:36:
                    d4:a5:b8:f9:82:44:00:e4:1f:02:3a:43:91:e3:dd:
                    1c:ce:65:06:87:82:e0:fb:8e:2a:11:30:3e:1f:ab:
                    07:0a:e4:d3:0c:7c:35:48:28:eb:a2:70:14:f2:62:
                    da:bb:90:87:cf:5d:e4:48:b5:43:61:3b:21:2e:a3:
                    5f:a8:71:f1:89:64:f2:aa:3b:b1:af:9d:dd:22:18:
                    77:bc:8d:2b:47:a7:9a:ea:fd:c0:7f:6c:83:e6:42:
                    88:ea:6c:9d:46:b4:52:6b:ff:86:eb:34:6d:04:21:
                    04:91:d9:6f:0e:f4:10:bf:16:6b:eb:36:18:a8:e2:
                    b2:ac:1c:65:ed:95:64:21:96:27:83:2b:1d:78:6c:
                    d3:23:f5:95:ed:93:fc:b5:d0:99:84:28:3e:7d:80:
                    c5:ef:7b:68:a5:e6:2d:77:52:d0:6f:9a:1b:89:24:
                    67:c5:86:60:f0:52:f3:45:f0:39:b2:f5:e6:20:02:
                    b4:e4:1e:48:89:3a:e9:f5:c5:55:17:7d:5e:a5:c8:
                    4f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1C:89:EF:43:CB:50:20:E9:A4:77:E5:C6:25:93:D9:24:8E:23:05
            X509v3 Authority Key Identifier:
                keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:e3:29:24:65:36:5b:2c:a3:b0:0b:94:12:3a:0d:1f:fa:
         55:74:2a:d2:8b:09:99:37:7a:b9:b6:e2:77:c8:f7:4b:c0:d8:
         f2:66:b1:61:89:43:6b:1c:17:8c:95:b4:70:a8:c8:42:a7:a9:
         75:27:78:eb:d7:2f:0f:f3:52:0a:95:c0:e4:c2:72:63:8c:5c:
         6a:fb:3a:28:f6:f6:5c:2f:52:16:78:68:29:d0:6f:98:43:49:
         05:80:e6:b9:fb:1a:bb:ff:d9:32:ed:96:51:4e:92:bd:cb:bd:
         87:b7:18:dd:73:04:2c:38:8b:62:f0:dc:b5:9e:f4:ea:c1:a1:
         b7:67:fd:6c:42:dd:1c:12:ec:7c:1c:cb:bf:9e:9a:b0:5c:84:
         7b:35:ed:68:c0:11:6e:ef:a7:12:f9:04:fe:4d:86:52:a8:31:
         fa:a5:57:fd:01:7a:ae:fb:d0:96:5a:7e:e4:93:c4:ef:32:b5:
         04:50:b1:43:65:66:32:cf:10:65:34:54:67:54:6c:f2:3d:bc:
         2b:4b:5b:2c:eb:6b:ec:1b:ab:c7:22:0b:6b:9f:c6:83:63:da:
         10:06:77:9b:ea:d8:f7:d1:71:9b:8c:6b:4a:5f:e7:ff:a1:37:
         32:5c:4a:7e:54:89:ed:60:20:16:43:63:64:02:08:bc:0c:cc:
         af:b5:3a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:33:26 2024 by rpki-client on console-fra.rpki-client.org