Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File:                     c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier:          xQLP/A73P/qStP7i7IJaX33KWSZFqCvC9b55C/mNprQ=
Subject key identifier:   A5:F1:A6:B4:01:F0:02:AD:D3:41:86:53:DC:95:AA:B8:D2:D3:80:1A
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer:       /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial:       018F87B62D76614D0D7C160D730169F56C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number:          036C
Signing time:             Fri 17 May 2024 18:00:14 +0000
Manifest this update:     Fri 17 May 2024 18:00:14 +0000
Manifest next update:     Sat 18 May 2024 18:00:14 +0000
Files and hashes:         1: ZG6SMVxJxOsv4iAQ0G8FXAAvS3w.roa (hash: 4OpNq0pUSJQFRQs1ARHw08fsO1oXwY1ATovCRBhSeR4=)
                          2: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: Cfj+LoyfsWEbB3ong+2cyxDGLKj1cEz26DkFjm/pBjs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:2d:76:61:4d:0d:7c:16:0d:73:01:69:f5:6c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
        Validity
            Not Before: May 17 18:00:14 2024 GMT
            Not After : May 18 18:00:14 2024 GMT
        Subject: CN=a5f1a6b401f002add3418653dc95aab8d2d3801a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f5:f4:e1:52:7e:e9:f3:12:54:89:78:c9:ec:
                    c9:ec:49:bb:27:66:cd:e6:ad:f8:f4:ff:92:97:de:
                    81:48:6a:87:76:ec:1f:4f:b6:d6:fe:6d:74:b9:05:
                    8f:e3:f9:9a:06:0c:00:6b:a0:dd:f4:ad:e0:b7:0c:
                    79:eb:a1:84:f1:8e:91:d2:2f:f8:05:28:cd:c0:f6:
                    d7:ca:fc:d0:53:66:6b:8c:d8:96:e0:af:54:ff:17:
                    eb:79:bd:9f:b4:58:be:2f:18:7f:7c:35:b7:db:31:
                    93:55:eb:e1:2a:f9:f6:cc:e5:e5:6b:4e:54:3e:b8:
                    26:44:dd:c6:e3:ef:7e:73:b9:54:e1:99:a6:90:67:
                    01:67:79:41:88:43:e6:d8:fa:63:16:f4:00:58:14:
                    26:82:75:8c:0e:49:81:9c:f6:29:d0:53:21:94:e2:
                    33:8c:34:c0:74:c8:7d:2a:e0:06:cc:35:81:1b:4e:
                    4c:a5:88:4f:0b:6d:64:f7:4e:1f:b3:5a:29:e6:0b:
                    f1:b9:9b:5a:b4:17:5a:0a:95:96:89:a1:d5:8b:56:
                    56:9e:82:1f:57:b9:da:cb:46:33:f1:e8:a5:51:2d:
                    40:53:b3:45:fe:3e:4e:a6:90:b4:ec:ee:2d:7f:4c:
                    04:18:ff:27:a0:7b:48:de:bd:c3:10:3e:e1:8c:f7:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F1:A6:B4:01:F0:02:AD:D3:41:86:53:DC:95:AA:B8:D2:D3:80:1A
            X509v3 Authority Key Identifier:
                keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a4:12:00:c7:9d:7c:9b:8a:d2:86:d3:f5:56:f0:4e:87:d2:
         7b:f2:54:e9:e3:81:aa:1b:60:52:9f:3a:ca:51:95:64:c8:a4:
         66:39:da:c2:fb:af:f3:47:27:3e:1d:87:86:cf:d2:aa:b1:86:
         f1:ef:3d:62:88:8d:b0:31:70:dd:0d:e1:f6:14:d3:a8:1f:95:
         a2:bd:5d:5c:a9:35:39:11:ee:4e:5b:3a:7e:8d:ea:79:a1:e2:
         a0:b3:c4:d5:17:00:53:ec:f5:0f:5a:b7:eb:7b:4c:bd:58:8b:
         8d:3d:9a:65:b7:96:2c:dc:f2:6a:20:5e:7f:c8:ef:f7:12:67:
         3b:d8:82:09:5f:9e:45:6e:ec:7c:9b:32:bd:dd:16:94:72:8e:
         64:fa:9e:f1:73:01:00:92:d2:99:16:56:86:b2:60:7e:a6:f5:
         a0:e4:97:25:ba:fb:30:83:cf:12:d0:e0:f9:59:64:e7:4b:54:
         4a:3b:2d:ee:4c:d8:a7:b4:fe:2e:b0:a1:a6:27:44:95:6e:08:
         33:70:83:f1:e6:91:0d:30:b8:56:77:75:62:65:c3:03:94:15:
         f7:6c:a6:d6:b7:27:3a:51:0b:1f:1b:b9:a7:89:12:01:bc:d1:
         38:1d:70:0b:fe:9d:7d:cb:3a:ba:e3:d7:5b:e6:81:29:a6:ec:
         92:2d:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:12 2024 by rpki-client on console-ams.rpki-client.org