Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File:                     fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier:          tvDPWQqWtx5168lbE9EygoZKfE4JQr8ChCstM/InjGE=
Subject key identifier:   AD:E3:8A:28:1E:5C:C0:DD:C1:61:5B:3B:53:94:F9:79:6C:30:1E:37
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer:       /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial:       018F874A7B3C42C634114CFA5DBE780C4019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number:          0289
Signing time:             Fri 17 May 2024 16:02:36 +0000
Manifest this update:     Fri 17 May 2024 16:02:36 +0000
Manifest next update:     Sat 18 May 2024 16:02:36 +0000
Files and hashes:         1: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: qxeOzTsJ0KfBZDt6ezAXTvXpPAXFcvN07RNxzefPwq0=)
                          2: i_4tr2uYxoJL0ZEMT86PMcs0dZs.roa (hash: POC4xcMQE5vOENuBCX5v3JsLiW/TzlOMFFXoegONbvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:7b:3c:42:c6:34:11:4c:fa:5d:be:78:0c:40:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
        Validity
            Not Before: May 17 16:02:36 2024 GMT
            Not After : May 18 16:02:36 2024 GMT
        Subject: CN=ade38a281e5cc0ddc1615b3b5394f9796c301e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:03:32:c7:19:d4:7c:a3:99:05:76:2c:2c:
                    9a:9f:5a:11:e2:90:52:d4:c5:2a:e9:a6:fd:36:5f:
                    46:a5:bd:39:ba:91:e8:b1:9e:39:50:60:bb:f0:44:
                    e1:98:aa:bb:99:0c:71:c2:6a:d8:00:6a:d6:31:2b:
                    2b:ce:79:3b:b8:bd:be:cd:ae:fd:cb:fd:4d:85:22:
                    6e:91:c2:f7:39:73:85:40:17:64:f8:32:54:6e:b9:
                    aa:97:91:63:a0:9a:ba:a3:44:00:e9:43:38:f0:51:
                    df:ad:38:59:77:61:2a:71:fb:36:9b:06:96:62:22:
                    43:46:ea:cc:60:fc:73:e0:68:c8:80:38:99:9b:f5:
                    f1:75:5d:72:b1:1d:fe:f6:bf:23:70:a2:28:d2:98:
                    84:8d:28:47:fc:21:53:8c:b4:f4:5c:76:34:32:a4:
                    97:0a:76:b5:f3:30:b9:44:b5:40:55:12:db:81:b7:
                    55:a7:04:74:33:2d:3b:c6:e4:63:eb:9a:05:42:d0:
                    7c:50:86:06:fa:74:9d:60:b2:93:46:05:39:f3:93:
                    ec:4d:b2:c8:ff:ec:1c:ac:c1:ba:1b:b0:80:a6:97:
                    70:68:67:7c:cd:45:05:08:fd:f0:e9:92:61:f2:c1:
                    3e:a4:0e:dd:ae:e0:75:4a:22:6d:5e:70:3b:85:0d:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E3:8A:28:1E:5C:C0:DD:C1:61:5B:3B:53:94:F9:79:6C:30:1E:37
            X509v3 Authority Key Identifier:
                keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f8:e6:5f:69:1d:47:35:60:c3:e2:56:fc:12:00:9d:42:9f:
         1f:2f:b8:0d:50:df:dc:13:0d:eb:f6:10:4d:9c:0d:84:5b:59:
         ae:f6:7e:d3:ab:e8:e8:1d:48:89:40:40:5b:1d:c8:3c:a9:c3:
         52:37:6a:71:e9:3a:7e:43:c2:f7:79:cc:84:c4:bc:9e:56:29:
         2b:11:9f:37:43:c6:2d:fd:75:73:33:7f:9d:33:12:38:a7:ba:
         54:75:f5:b2:3c:33:1d:f8:5d:f9:11:e1:be:42:8a:1a:3e:8e:
         a9:9e:e5:ec:6f:e4:39:f7:12:82:6b:43:b9:ec:70:ed:89:df:
         c5:a2:45:65:3f:66:d9:9a:50:bc:e8:99:4b:d9:74:7e:10:20:
         96:6a:01:09:31:e3:14:15:54:a4:67:83:8b:8d:92:23:79:58:
         2f:b0:07:ad:ae:29:d9:b5:e9:c0:c0:11:38:e8:24:5f:af:2c:
         c7:f4:a1:fe:72:0b:41:95:ef:af:e8:63:ba:5b:e5:42:3b:9e:
         d7:31:75:ae:97:e3:7e:64:38:98:2d:a7:40:62:ec:b4:4d:f0:
         73:f1:fb:65:08:02:04:9a:eb:78:14:b3:37:f5:35:16:1e:0d:
         53:0c:9b:39:7c:55:b8:ea:9a:bf:38:a3:bb:de:dd:6f:15:8b:
         d2:49:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:34:59 2024 by rpki-client on console-fra.rpki-client.org