Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File:                     M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier:          fbnXEje3pUJ75PXTn5M5z3EDl1T3EbjjwhIjz+Ospew=
Subject key identifier:   B7:91:A3:7F:02:EF:F1:64:96:82:FB:8F:10:67:17:54:24:A7:FC:4A
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer:       /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial:       018F87ED6D380BBF2D1E44E711C2E439C81F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number:          0E0A
Signing time:             Fri 17 May 2024 19:00:35 +0000
Manifest this update:     Fri 17 May 2024 19:00:35 +0000
Manifest next update:     Sat 18 May 2024 19:00:35 +0000
Files and hashes:         1: 4s8LLubVkmZcT8BoF2sqo2g1lYU.roa (hash: yZE0LcMwf8oc/A2/oYfeGJfcYPSgVvoV3CpeCK/vojI=)
                          2: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: x1p/yxMbf++7G6VnFCGVP6NGJaf5YiDgVG1HbZiQ6z0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:6d:38:0b:bf:2d:1e:44:e7:11:c2:e4:39:c8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
        Validity
            Not Before: May 17 19:00:35 2024 GMT
            Not After : May 18 19:00:35 2024 GMT
        Subject: CN=b791a37f02eff1649682fb8f1067175424a7fc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:f2:d3:fb:96:fe:83:1d:d1:40:a0:ef:82:
                    2d:4b:04:21:51:d5:8f:71:6f:25:3e:f4:27:58:ed:
                    ee:c0:3e:39:bd:2e:3c:cb:68:74:94:52:b5:d1:a1:
                    94:b2:70:4b:5e:54:39:f5:8f:90:1d:21:dd:eb:4d:
                    93:12:a5:ea:f1:9a:83:62:72:78:cf:1f:70:0f:33:
                    81:3f:7e:10:64:c5:85:ec:cc:19:9d:e2:7e:81:94:
                    3d:2c:98:89:ac:b0:fe:6b:33:f4:09:b9:a5:2f:1f:
                    ae:88:c7:b8:47:77:89:c2:64:3b:7c:19:cb:e9:49:
                    1f:b4:da:0e:ef:4b:fc:fc:86:85:1c:c3:58:7b:76:
                    46:7c:98:02:ed:2a:cb:e7:ce:69:95:e2:21:00:f2:
                    fb:b6:7b:e2:cb:7c:c6:25:c5:f6:ab:7e:dd:c3:d2:
                    b0:01:d7:e2:0e:71:46:df:3e:1f:0c:f7:32:58:7f:
                    2b:93:37:7c:39:eb:6a:84:06:a1:b8:cb:94:7c:c2:
                    cd:4e:0b:9e:ea:90:e0:90:e4:03:16:19:d0:84:45:
                    9c:70:06:f5:c1:f0:43:21:3d:46:42:14:89:52:87:
                    11:5f:07:be:5c:55:38:59:dc:20:df:0c:03:52:ff:
                    a7:25:03:7c:d6:05:68:89:af:64:58:48:05:12:f3:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:91:A3:7F:02:EF:F1:64:96:82:FB:8F:10:67:17:54:24:A7:FC:4A
            X509v3 Authority Key Identifier:
                keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5f:d0:0a:ba:0c:05:0c:7f:c0:62:33:d3:26:24:44:5d:01:
         51:ab:66:18:b4:6c:62:e9:e5:d6:82:1c:f9:9e:78:1f:aa:d0:
         32:86:91:a5:78:92:4a:bb:c7:2c:1d:9e:83:4f:4a:57:0b:b6:
         d1:b0:67:1d:72:59:60:7e:8b:94:c9:38:0d:c2:58:b2:00:1f:
         95:f4:31:f1:74:9d:f9:bc:bd:2e:98:2f:01:8c:21:39:14:83:
         ef:22:7f:d4:af:95:ab:a2:36:78:83:4b:bc:d0:94:9a:20:97:
         b4:88:73:e2:a2:7d:eb:1e:e4:42:d5:ec:25:25:bf:29:4a:19:
         d6:86:5c:2c:d7:44:07:4b:7c:3f:d7:ae:0b:0e:69:37:9a:97:
         34:91:f8:e9:c6:6f:27:60:56:68:c3:c7:12:9c:54:4d:c4:91:
         84:aa:3a:6b:c6:8f:78:67:2c:cd:81:98:b5:9e:23:9d:42:70:
         42:9e:b9:2a:eb:aa:41:ff:42:3b:e6:75:33:72:c1:35:f7:07:
         dd:c5:2a:eb:05:19:f0:e1:fb:63:2d:1a:e3:f0:15:4f:a3:5a:
         82:12:3a:80:9c:1b:a9:7d:44:db:8a:9c:c1:48:2f:36:33:38:
         d8:48:9c:41:94:85:36:1a:ed:f9:07:4b:39:90:06:51:3d:57:
         2e:c9:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:30 2024 by rpki-client on console-fra.rpki-client.org