Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
File:                     d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft (raw, json)
Hash identifier:          OW0fK26eWnaC4j6Lb2MWcRsI0zLFMn2M0sw+csy+9sM=
Subject key identifier:   32:14:C8:A1:6B:87:40:14:E7:7C:10:F9:E4:D5:26:7C:3E:E6:DF:6C
Authority key identifier: 77:9E:E0:0D:D8:BA:A5:9F:53:38:4D:D0:27:7A:50:E8:B9:80:29:08
Certificate issuer:       /CN=779ee00dd8baa59f53384dd0277a50e8b9802908
Certificate serial:       018F87ED0D5D93459F2241A30EE4DA7CEBC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
Manifest number:          110A
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: _vR8mIbonKuQaKzNe02h_UaJtRc.roa (hash: YGvzHjzclpKWU30sgdT+37Q5JDJ+Tn4BYSLh0KhLMoA=)
                          2: d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl (hash: 0uQNhga9o+DPaIVY50EKUzQXjCh8loQDf4Bh21s/0Fo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0d:5d:93:45:9f:22:41:a3:0e:e4:da:7c:eb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779ee00dd8baa59f53384dd0277a50e8b9802908
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=3214c8a16b874014e77c10f9e4d5267c3ee6df6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:51:19:0f:63:ee:24:2f:d2:35:0d:7a:85:
                    6c:33:4e:f6:49:68:ae:10:37:4a:01:02:bd:b9:ad:
                    c3:4d:51:73:00:d2:af:05:07:3d:9a:00:2b:fa:20:
                    3f:0a:82:ed:71:7f:f4:65:87:19:63:93:dd:2f:cf:
                    ce:e9:35:5b:93:6f:bd:ff:96:35:87:e4:bf:8c:eb:
                    5f:4a:d0:a6:8f:fd:5f:f8:45:d7:13:4f:ac:0f:bc:
                    c3:bb:e3:0d:38:7f:da:92:59:77:65:37:f7:8e:5f:
                    c2:0c:e3:06:fb:9a:9e:b5:f8:f9:00:b5:f9:f8:ab:
                    fb:a3:aa:8e:a7:9e:7e:f4:17:cb:c3:cd:ea:bd:1a:
                    db:97:c3:c9:f3:37:07:fb:bc:72:21:a1:50:c1:0a:
                    cb:0a:1c:22:17:f1:51:f9:5d:d3:cd:8e:31:96:e2:
                    3b:ae:a0:fe:a2:df:84:c7:9e:37:15:3a:35:34:3c:
                    85:61:5a:de:a2:1a:3f:db:83:80:86:f1:ed:90:78:
                    18:ab:7c:c3:77:c3:f1:69:c6:88:ca:b3:6f:70:22:
                    95:26:47:ea:db:09:21:e6:24:eb:66:e2:0b:ad:d9:
                    ba:31:f1:7d:4a:08:df:74:25:8e:25:b2:fe:ef:e4:
                    f3:97:18:ec:4f:a3:d4:7e:ed:2b:50:a6:a2:06:00:
                    2b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:14:C8:A1:6B:87:40:14:E7:7C:10:F9:E4:D5:26:7C:3E:E6:DF:6C
            X509v3 Authority Key Identifier:
                keyid:77:9E:E0:0D:D8:BA:A5:9F:53:38:4D:D0:27:7A:50:E8:B9:80:29:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:51:ee:53:1a:ac:cc:7f:08:32:ca:fd:39:13:c6:b6:85:
         bb:f9:58:66:c5:50:c8:a8:29:e0:02:30:d0:e0:a8:6f:21:2c:
         5f:cb:50:f0:cf:c1:c9:4e:94:28:a2:d3:b1:95:fa:f0:a4:86:
         c0:47:3d:b6:74:a9:d5:de:94:e0:c8:22:78:1c:1b:99:fd:13:
         ce:b6:7a:36:e3:06:20:97:1e:d5:a8:50:95:01:3c:30:58:a2:
         ef:a6:b2:36:d2:59:a0:1a:ce:b7:3a:25:6a:35:e6:c9:b4:d5:
         23:ca:64:f6:46:0f:a3:06:07:38:d6:b1:51:bb:db:83:84:6c:
         84:16:f7:36:2d:74:22:a5:88:31:a5:16:0e:63:92:ab:33:1c:
         b4:75:01:e5:62:50:db:e6:04:e7:9c:48:af:62:6e:ee:27:de:
         58:39:04:30:cf:3a:52:7f:0e:00:8c:52:a9:20:76:7f:17:a6:
         cb:e9:60:6f:44:67:fe:95:15:c6:79:27:b8:97:a4:af:fa:02:
         48:e1:9f:b2:bf:54:74:d5:3a:77:7a:73:61:e3:7e:4c:23:ce:
         88:24:ce:94:52:f3:b8:53:9e:39:87:7a:a3:a6:f6:d2:05:cf:
         cc:ad:bf:31:cf:44:27:71:6d:fc:74:fd:be:a5:7f:2c:d6:db:
         73:ad:cf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:30 2024 by rpki-client on console-fra.rpki-client.org