Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File:                     _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier:          +YO/YjwT4UBUkrRA0RvsNIZLw9nbEQbDTdz2dLM7HBM=
Subject key identifier:   63:72:81:A2:D6:9B:DE:37:F2:31:CF:AE:04:5B:47:87:D9:A9:98:46
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer:       /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial:       018F874AF216E1FE5E9CBA4D513810583F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number:          080E
Signing time:             Fri 17 May 2024 16:03:06 +0000
Manifest this update:     Fri 17 May 2024 16:03:06 +0000
Manifest next update:     Sat 18 May 2024 16:03:06 +0000
Files and hashes:         1: LHwVBMhnYLHEIfwUxGzrnITDBKA.roa (hash: tuAK4xYeux9QDq3jL8bqOpJOaYjS8maPLyxST42qgP0=)
                          2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: 9eoZp/+SEtRgxtMuqpsq/Y8k40GyJunxaa9wBWH/ruc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f2:16:e1:fe:5e:9c:ba:4d:51:38:10:58:3f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
        Validity
            Not Before: May 17 16:03:06 2024 GMT
            Not After : May 18 16:03:06 2024 GMT
        Subject: CN=637281a2d69bde37f231cfae045b4787d9a99846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:16:53:68:f7:9a:da:dc:18:fb:ab:27:5e:
                    bd:b9:be:2a:53:27:c2:2e:33:bd:3e:65:75:66:9e:
                    f2:46:5b:96:b9:01:ff:ac:61:4e:40:cb:b3:34:3a:
                    40:41:14:5a:40:ae:b6:ea:2a:41:a3:a0:3e:8a:b5:
                    d3:fe:54:97:51:1e:f5:c3:58:1b:92:d8:41:f9:2d:
                    50:b0:08:a4:1c:70:62:3c:0d:c4:55:ee:ad:ea:6c:
                    dc:fc:27:c4:e7:27:eb:ee:2b:61:5b:a0:c0:07:aa:
                    2c:1a:52:c7:b8:43:48:aa:6a:05:e3:cc:cc:c3:bf:
                    32:4b:04:89:69:8a:51:eb:93:0e:1b:32:1e:cb:c4:
                    2c:06:b0:5c:1e:ad:fc:bb:b3:12:ef:14:ae:08:09:
                    7e:a8:00:77:67:47:82:df:53:23:3b:2a:cf:9f:2c:
                    76:e5:67:f7:ab:d5:93:ed:6f:1a:5a:47:cf:95:a9:
                    70:96:f0:76:2b:ad:8a:a5:b0:49:d0:d0:e0:51:3a:
                    1d:35:4c:dc:83:96:65:5f:aa:c8:be:45:da:7f:d8:
                    9a:78:81:77:91:28:04:5f:b4:1c:6c:b6:03:e3:93:
                    2a:09:27:db:6e:5e:81:21:23:27:82:14:8a:eb:f8:
                    0c:fa:96:75:4b:a4:8f:c6:85:1d:d1:74:e7:8f:52:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:72:81:A2:D6:9B:DE:37:F2:31:CF:AE:04:5B:47:87:D9:A9:98:46
            X509v3 Authority Key Identifier:
                keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:49:fc:20:c3:d9:c5:8a:6b:e6:e2:67:28:35:5b:4c:ee:b3:
         bd:58:8b:23:ab:9a:01:db:28:e3:9e:dc:a2:39:a6:fe:50:3b:
         ca:b2:90:27:e7:bb:d9:7d:9a:b0:69:f1:0f:c2:72:70:2b:1c:
         76:60:e2:9a:23:24:f8:8c:20:06:8b:22:41:71:e2:19:24:13:
         38:eb:b7:12:68:c1:f7:dc:0b:3b:49:f9:24:9a:c1:02:f1:9f:
         e0:bf:d1:4b:ad:ea:22:db:be:75:15:a2:62:b4:48:9c:86:46:
         41:7d:83:73:b0:c9:80:6a:f6:eb:07:ef:4e:ca:db:b7:23:d8:
         a8:c6:9d:7d:c7:89:10:5a:9c:8f:ee:66:98:fa:f1:7f:31:e4:
         6d:21:03:2d:ec:aa:48:c6:0f:c8:7e:02:41:8e:52:c8:22:38:
         3f:e4:1e:91:b7:9e:fe:bc:5a:4c:c1:3f:d5:3b:2c:aa:6f:56:
         b4:67:69:75:28:3e:e9:56:78:d8:47:82:2f:db:32:09:e8:1a:
         7b:2a:02:7b:e1:1f:a2:f9:73:55:14:1c:a6:19:ee:09:d8:fb:
         4d:8e:e3:a8:21:8d:4a:40:ec:32:98:0c:ab:95:3d:f1:45:41:
         33:5e:35:23:eb:93:a3:db:45:e7:ad:ee:5e:ef:a8:ae:19:ed:
         96:c2:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:47 2024 by rpki-client on console-ams.rpki-client.org