Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File:                     D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier:          FbFBgtQxqLYx1BpgB0URX5fp6/iDuLIGexGeyJAjtIs=
Subject key identifier:   92:3F:CD:92:24:D3:90:93:A2:25:65:21:26:84:08:3F:61:2F:58:CF
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer:       /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial:       018F3A0C6A60AD29A31AE134771B50F13C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 16:04:03 +0000
Manifest this update:     Thu 02 May 2024 16:04:03 +0000
Manifest next update:     Fri 03 May 2024 16:04:03 +0000
Files and hashes:         1: 18-vqY4A1NLTQTO14j454Ki4TdU.roa (hash: 9CjZSlAzh/uuMJUa/wH6oYzd/nNWS0ySui/MplgOSbk=)
                          2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: RYYW7InL+6DlniTnJlh4bvtYflINlysYnWHB9djFbSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:0c:6a:60:ad:29:a3:1a:e1:34:77:1b:50:f1:3c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
        Validity
            Not Before: May  2 16:04:03 2024 GMT
            Not After : May  3 16:04:03 2024 GMT
        Subject: CN=923fcd9224d39093a22565212684083f612f58cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:83:13:90:99:1b:d4:01:85:60:55:74:95:
                    6d:f0:a7:b5:84:84:97:bc:b1:b2:9e:a0:5c:ff:77:
                    30:32:da:cf:ea:b6:84:21:b3:38:67:34:63:9d:ad:
                    c0:da:00:dd:bb:1e:86:59:77:05:da:28:10:b1:9a:
                    e2:b9:93:a6:b8:5e:68:f3:d1:a3:6c:76:21:7e:05:
                    10:6f:ed:e8:69:c4:d3:98:3d:b3:d2:15:8c:3f:ce:
                    6d:ff:92:03:6c:53:d4:47:1e:7e:ad:df:b5:60:92:
                    17:c6:b7:8f:b0:fe:f6:76:61:a7:a6:85:2f:25:2d:
                    ff:12:7b:5c:f0:db:5d:66:c2:b1:33:2b:4e:d1:a3:
                    9d:c0:55:1c:87:12:d8:ce:a1:4c:4e:5e:26:95:72:
                    3e:63:f0:45:1d:03:2a:a5:4f:b6:3b:f6:a5:bb:75:
                    cf:c4:b9:5b:51:76:16:38:a2:34:ec:bb:cc:dc:f1:
                    16:58:4f:10:61:4b:b2:df:83:a4:f6:de:0e:9b:b0:
                    a5:73:0c:50:91:1e:a2:6a:a0:fd:a6:b1:a1:50:a5:
                    04:ad:c4:e1:b5:5d:a5:bb:4a:ba:8c:59:98:59:11:
                    af:7c:9f:0f:9b:43:7c:64:9f:ee:ed:6c:5d:b6:87:
                    2c:a2:df:05:7f:64:c1:7d:63:ac:13:02:e6:36:74:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3F:CD:92:24:D3:90:93:A2:25:65:21:26:84:08:3F:61:2F:58:CF
            X509v3 Authority Key Identifier:
                keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:18:25:16:dc:aa:cc:f1:54:f0:4e:d9:e5:56:46:0e:a4:1d:
         58:45:62:c0:63:ca:28:b7:f1:59:5d:3e:76:63:2f:cb:29:71:
         99:b5:a0:66:3f:64:86:88:6d:24:3f:95:d2:7f:33:f9:9b:09:
         9c:fe:84:2b:98:58:d7:6f:3a:89:9f:6a:07:c1:58:08:64:93:
         b4:f7:df:76:ea:e8:56:d0:2d:8b:77:b1:8b:c4:b8:2e:71:05:
         75:96:8b:85:72:d2:ef:01:fc:9b:f7:e8:0c:6e:32:35:e0:de:
         ac:e8:65:fc:2f:7f:44:3a:4b:cf:f0:ea:13:60:c8:8c:3b:d7:
         4f:e0:62:b1:8d:9f:3c:35:28:46:e9:eb:f2:d0:b2:1f:58:f2:
         73:7f:a9:cb:84:bb:a0:16:64:71:b5:f8:db:29:8f:0f:d9:66:
         1c:1f:87:42:1f:c6:bc:54:cd:d0:0d:49:31:14:e9:94:27:df:
         d4:0b:37:a7:ac:ed:37:08:a0:d9:fb:e2:12:dd:eb:9d:5d:e5:
         1f:f3:6b:e0:73:fe:78:27:fa:c6:1b:6d:ce:d2:28:17:8c:d5:
         ab:d9:bf:4b:7a:f7:9e:9d:e8:75:e0:92:18:0e:18:8d:6b:7d:
         83:fd:9d:df:ea:13:6c:a1:51:d6:71:ee:3a:d2:23:98:df:ff:
         46:8a:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:23:24 2024 by rpki-client on console-fra.rpki-client.org