Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File:                     r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier:          79F3cE1Kz8z6hc0fSLSGv8FHJ2EdyapnUhNFNAA3H/8=
Subject key identifier:   14:4F:C4:5B:84:2E:56:69:17:80:BF:06:A1:40:EC:B4:FF:17:AF:2C
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer:       /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial:       018F87ED281F48F7778FA92AE9C7FC5C8AC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number:          0810
Signing time:             Fri 17 May 2024 19:00:17 +0000
Manifest this update:     Fri 17 May 2024 19:00:17 +0000
Manifest next update:     Sat 18 May 2024 19:00:17 +0000
Files and hashes:         1: X74-vd7a530uG8wDzZPlyplJ2ww.roa (hash: mD7RUIiAxWlAiqrpwobsPc6N9jOnxuQc3a8GAT0aN8c=)
                          2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: pbACMAHc0UYuroAM9wNIMvSSsJwPZ7WoWtxYUfeLYFw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:28:1f:48:f7:77:8f:a9:2a:e9:c7:fc:5c:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
        Validity
            Not Before: May 17 19:00:17 2024 GMT
            Not After : May 18 19:00:17 2024 GMT
        Subject: CN=144fc45b842e56691780bf06a140ecb4ff17af2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:10:a6:71:9a:eb:13:bc:df:48:dc:d4:4a:
                    8a:01:61:c6:64:ee:4f:38:ee:72:b2:2e:f8:c5:2c:
                    1d:eb:66:4c:01:fe:63:05:4c:0a:38:dc:32:04:1f:
                    e8:d0:09:eb:f6:6d:a6:3a:15:3d:9f:b3:b0:ef:07:
                    ac:e0:15:22:0d:30:21:f1:c2:e1:9d:f4:df:81:95:
                    3e:c1:7a:3e:72:9c:48:08:d3:28:04:3b:9b:f9:d3:
                    3f:97:e9:e1:d3:f0:8a:02:16:ce:11:17:27:58:51:
                    81:6f:ec:74:52:56:17:20:a3:70:0b:c8:f2:3b:46:
                    26:a7:ad:4e:af:b6:ac:bc:d6:f3:a4:73:2b:75:a3:
                    23:ad:29:ce:4d:0c:2d:4a:d4:05:e4:32:86:c1:db:
                    f7:6a:d3:e2:12:0b:9c:89:8a:0d:8f:0e:ac:e9:49:
                    44:52:6b:79:7c:03:a3:5f:ea:e6:48:7d:01:27:bb:
                    f2:94:0c:ef:10:10:43:46:89:e2:f6:39:07:31:f8:
                    43:7b:bf:f6:02:8f:7a:6c:99:1b:3e:72:8a:8f:b0:
                    d9:d0:5f:cb:fe:5f:fd:dd:11:0c:43:9c:f2:44:d7:
                    42:23:51:e6:c3:8c:93:7a:d2:33:9b:c9:84:12:11:
                    31:a8:48:5f:dd:cc:90:96:9d:8e:79:24:36:fa:4f:
                    d4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4F:C4:5B:84:2E:56:69:17:80:BF:06:A1:40:EC:B4:FF:17:AF:2C
            X509v3 Authority Key Identifier:
                keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ec:5f:3d:a4:cc:a7:df:de:3f:b9:91:40:89:50:71:b7:44:
         e7:e3:82:85:a9:ca:d2:3b:5f:f1:d8:cb:3a:55:68:12:77:6a:
         8d:7c:28:14:61:49:6f:e5:96:03:03:9f:92:df:45:1e:4b:4f:
         06:1e:5f:e3:ac:7f:cb:06:4b:fb:e2:0b:08:61:65:33:54:2d:
         b1:17:92:fb:dc:c1:d7:19:19:5c:d4:44:fa:e4:28:a3:f6:4e:
         92:c8:d6:8a:73:aa:16:eb:85:79:4c:d9:29:56:48:0e:62:40:
         79:01:57:5d:ae:9a:9c:ec:fa:b5:01:7b:a4:c2:c5:02:30:cb:
         01:64:11:51:be:4d:b5:f5:d1:ee:8f:da:c6:f7:fc:63:0d:65:
         c1:9b:f6:02:4e:c5:67:1e:10:49:a5:de:8b:02:59:01:19:2f:
         ff:5d:88:f3:f8:77:ec:d9:9c:48:e9:99:b8:d7:57:70:22:08:
         82:49:c8:f5:7c:26:f8:85:b9:61:4f:c8:13:52:44:d9:bf:e8:
         38:ae:de:49:50:df:41:87:e7:e1:8c:b2:06:6e:8d:ee:d8:ba:
         45:eb:e2:7c:4c:54:88:e3:39:6f:79:47:e8:42:47:a8:f6:d6:
         14:f6:11:ae:c5:a8:f4:1c:1a:4c:5e:96:50:22:9e:5a:bc:2b:
         0b:fd:4d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:54 2024 by rpki-client on console-fra.rpki-client.org