Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File:                     u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier:          eyHsGuo36wbskjEXyTrvFndXA0BZ6FkWanv6npRgMZs=
Subject key identifier:   C6:81:90:9E:92:4A:D2:00:6C:FC:3E:19:35:9A:97:10:8D:EA:71:24
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer:       /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial:       018F87B66C0C7385A4B37479420388AC5C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number:          0B71
Signing time:             Fri 17 May 2024 18:00:30 +0000
Manifest this update:     Fri 17 May 2024 18:00:30 +0000
Manifest next update:     Sat 18 May 2024 18:00:30 +0000
Files and hashes:         1: d8Gzp6cS-EdJdRaPJzyzE63oHLA.roa (hash: 4i0d9lKhGTiPFa5Uytqx5nWuZ1vmUf65C81Lekl/Rr8=)
                          2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: k1Pm08ADLzbQwhm+bWBSTEDlMBSbVzeBuw9GVAiAsU0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6c:0c:73:85:a4:b3:74:79:42:03:88:ac:5c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
        Validity
            Not Before: May 17 18:00:30 2024 GMT
            Not After : May 18 18:00:30 2024 GMT
        Subject: CN=c681909e924ad2006cfc3e19359a97108dea7124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:73:9c:8b:80:1d:d1:01:54:43:e0:de:88:
                    95:22:95:fe:39:a5:ad:dd:2a:2a:28:ee:35:12:27:
                    6a:40:e8:57:cb:0a:a6:0e:4a:62:b6:1b:ea:c6:3d:
                    d3:91:76:6e:e3:06:fb:82:51:e1:d0:08:b9:0d:49:
                    5b:05:68:dc:78:5d:4d:10:ab:52:9b:e7:1e:b1:57:
                    34:d7:6f:49:61:76:0a:60:33:b6:b1:e5:f6:60:2f:
                    ca:46:90:65:10:9b:d4:dd:35:a9:69:33:f1:57:ad:
                    56:1b:7c:61:a8:70:e8:3f:64:3d:cf:07:c7:6c:76:
                    e1:68:99:0e:59:31:89:2a:f5:76:41:d9:d9:f0:f1:
                    88:2f:3c:06:a9:08:ea:88:d2:80:4a:4a:93:d6:d8:
                    9b:2e:37:87:0e:c2:6f:fb:36:34:cb:fa:fb:75:ee:
                    a6:65:ae:d1:94:fd:52:d9:f9:1f:2a:87:26:f9:d8:
                    1d:22:85:fd:2c:13:e9:f0:75:65:f1:ae:20:5a:9b:
                    ec:87:b8:4e:40:d0:17:c5:77:db:2e:9c:6d:2d:9e:
                    91:ad:8c:e3:99:ee:94:9b:02:b4:71:58:45:19:03:
                    82:9a:21:5b:79:e3:f0:7c:26:4d:b7:47:7b:a5:4d:
                    84:88:65:45:39:89:41:e2:44:01:6f:0b:05:e3:20:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:81:90:9E:92:4A:D2:00:6C:FC:3E:19:35:9A:97:10:8D:EA:71:24
            X509v3 Authority Key Identifier:
                keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ae:e0:38:6a:b3:dc:b2:26:e3:b4:f8:fc:b3:b2:49:52:3e:
         0f:b4:12:9c:f6:b5:8c:56:21:e5:6c:0d:c8:c0:25:8b:69:ae:
         d2:1f:5f:2f:9b:38:0f:c6:05:f6:7f:79:29:c7:67:a1:33:5d:
         07:98:a1:23:9a:12:10:ce:a0:00:83:23:33:bb:96:1c:bc:32:
         a7:93:c7:98:bd:b4:87:2f:aa:43:2c:b5:8d:ba:e2:da:46:03:
         52:d7:16:8b:3d:32:85:5d:df:22:46:af:75:c9:81:87:5b:d5:
         55:67:9f:b4:e6:50:df:da:0a:08:9e:37:c2:38:df:12:62:86:
         20:64:94:92:5c:df:d5:c8:c6:31:a9:d0:cc:85:30:1e:8b:32:
         02:55:ac:85:8d:37:9c:1a:5f:86:42:c1:27:bc:36:d8:0a:57:
         0f:73:8f:89:9c:a6:6f:66:5b:f6:f7:5f:62:9d:ee:80:22:9a:
         d5:a9:cf:5d:f5:23:8e:a7:8c:6c:68:ee:d2:48:fb:6a:87:42:
         b2:d4:b7:13:c9:c2:48:f2:5b:33:46:f1:a5:79:95:ff:40:22:
         d5:ea:e4:1c:fb:d6:61:00:2d:da:64:a6:fb:b7:59:d7:ff:60:
         1e:71:65:a7:ee:42:63:5b:53:5e:7d:41:e7:a5:b4:9f:e2:0a:
         0d:5d:bc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:05:47 2024 by rpki-client on console-fra.rpki-client.org