Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File:                     XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier:          y4AN2lu4Nuo74MNsu43xy1Gf/orepSCt8s5Y8EqoHy8=
Subject key identifier:   36:D0:A5:76:99:27:E4:E2:83:AA:AE:7C:24:52:AD:BA:42:73:FD:59
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer:       /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial:       018F86A4102C349BFE8250415F35766BD791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number:          0B72
Signing time:             Fri 17 May 2024 13:00:50 +0000
Manifest this update:     Fri 17 May 2024 13:00:50 +0000
Manifest next update:     Sat 18 May 2024 13:00:50 +0000
Files and hashes:         1: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: nwZdChUw1/kr4IJFkrzOz+CxTJSDSHvT0zqT5v0uK9E=)
                          2: bmkhfpzln7pGH6_ZpRzl_FUcvfI.roa (hash: 89MuOGK3OXzrjAVye9Wc4Jw/ur49sW8fJPosCRBvPOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a4:10:2c:34:9b:fe:82:50:41:5f:35:76:6b:d7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
        Validity
            Not Before: May 17 13:00:50 2024 GMT
            Not After : May 18 13:00:50 2024 GMT
        Subject: CN=36d0a5769927e4e283aaae7c2452adba4273fd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:ad:75:3b:71:1c:42:c8:ae:15:30:39:5a:
                    33:fd:a9:b1:95:85:2f:ca:fd:52:6c:97:f7:c2:a9:
                    1e:77:19:cc:89:24:87:96:e3:e3:80:d4:6c:0c:90:
                    fc:6d:57:8c:dc:58:4b:6a:47:d1:82:78:0d:1d:fa:
                    05:a8:21:4a:56:79:e5:72:81:b4:66:28:80:b1:fd:
                    7e:d6:8b:75:0a:9f:ae:43:4e:14:4d:d7:10:31:41:
                    58:9b:c8:24:23:8c:b7:0d:2b:94:a2:b9:3c:6e:98:
                    ab:67:d8:e3:86:b7:1b:fc:f0:38:44:27:b2:de:37:
                    07:6f:d4:8e:98:ca:ad:47:9d:b5:34:71:46:12:df:
                    99:8f:a3:d5:71:a0:0f:cc:d8:22:94:93:d5:a6:f4:
                    80:d0:36:6d:24:e1:7b:cc:8b:67:0e:b6:ce:ce:c4:
                    a6:52:a3:09:41:b2:2b:bb:98:bb:65:ef:d2:cd:c9:
                    be:49:e4:3c:c8:a8:36:43:8c:20:c5:1c:d4:0e:85:
                    ff:19:0f:b1:ac:00:cb:5b:5d:6c:53:6c:d5:a6:9c:
                    89:5c:4d:67:ee:dc:3e:2f:58:4a:1c:b3:85:4a:d8:
                    84:70:3d:7f:b6:0f:fb:b6:3c:e8:3c:74:9d:d9:cf:
                    9f:b1:2d:1e:87:db:21:f5:f7:54:77:9b:5f:b9:a4:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:A5:76:99:27:E4:E2:83:AA:AE:7C:24:52:AD:BA:42:73:FD:59
            X509v3 Authority Key Identifier:
                keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:06:f5:68:a7:3b:3c:81:ad:41:3a:8f:42:0f:f7:25:c6:
         92:77:9a:78:8d:41:db:cd:3c:75:bf:e8:76:3e:91:32:f4:72:
         fb:11:a7:7a:fe:e4:c9:6b:3e:a4:fe:38:6c:c9:cb:bb:25:b8:
         d0:9b:bd:6d:39:ea:69:15:16:3f:89:24:42:6f:df:a7:fa:30:
         0b:e9:d5:7b:b5:30:bb:05:b8:e7:11:76:93:2f:29:55:e2:07:
         b2:e0:1f:ea:9c:97:f2:df:21:d4:25:23:cd:82:1c:de:94:b9:
         e5:b5:fc:40:88:cc:1c:de:16:24:c8:63:f0:38:71:26:5c:8a:
         36:0f:65:89:49:ee:bd:06:6f:a7:41:3f:84:45:df:b0:0a:87:
         e7:9f:3f:77:34:a8:1c:c2:6c:fc:a0:97:b1:f9:7b:82:16:7e:
         cc:df:6a:2a:ab:ed:ec:cd:af:78:af:2b:88:18:e6:e4:a1:11:
         f8:9f:16:ce:75:fe:e5:3a:12:08:6a:f1:a2:88:57:c9:1d:80:
         61:49:ad:be:a6:d3:be:4a:d6:67:1e:54:68:3f:01:52:cb:cc:
         da:3f:07:15:5f:21:d1:39:13:43:67:2b:f1:75:3a:41:e7:62:
         34:af:9f:38:55:fa:cf:3e:0d:e6:fd:25:2b:ac:8b:e5:2d:a3:
         7c:c6:9a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:03 2024 by rpki-client on console-fra.rpki-client.org