Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File:                     fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier:          OiPfjSZB5azOcUdyX4YMWCkR5AAbTFs/7zmEFts/KPk=
Subject key identifier:   DE:19:DC:D2:9A:FE:6D:37:83:52:8B:A9:26:FB:D1:7A:C8:BB:7D:75
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer:       /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial:       018F874903A86DD1DD00685AFB1FBA40738E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number:          016A
Signing time:             Fri 17 May 2024 16:01:00 +0000
Manifest this update:     Fri 17 May 2024 16:01:00 +0000
Manifest next update:     Sat 18 May 2024 16:01:00 +0000
Files and hashes:         1: c9geigAmmYdC0jdZ_HAWepvRGcA.roa (hash: sKf4aAzpGfm5Z9gncFAWh3U4T2F63g7J4nId33qmFco=)
                          2: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: tljvxDacoQ3g/logXb6sFaOFFJCl9FNYg8BkW8j2fwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:03:a8:6d:d1:dd:00:68:5a:fb:1f:ba:40:73:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
        Validity
            Not Before: May 17 16:01:00 2024 GMT
            Not After : May 18 16:01:00 2024 GMT
        Subject: CN=de19dcd29afe6d3783528ba926fbd17ac8bb7d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:d8:08:f7:02:dd:8b:ce:48:c8:b6:b2:2c:
                    9a:c3:06:6e:46:92:a7:45:c2:91:f6:0b:59:54:e6:
                    07:b1:5c:ad:63:ec:1c:e7:14:2e:46:8a:f7:c4:95:
                    a5:95:72:10:fc:31:8c:b4:00:4c:b4:a2:d0:af:cc:
                    f5:c4:89:1a:5f:dc:93:fe:8a:dd:2d:fc:fd:e0:03:
                    d0:54:7f:80:c9:36:e8:c5:7b:91:07:5f:44:d0:c3:
                    38:55:58:73:cc:9e:ea:ea:d4:6a:14:16:14:3b:e2:
                    ac:92:82:f1:cb:ee:5f:73:d8:79:c8:5a:f1:c0:b0:
                    8d:81:cf:12:5d:23:b9:cc:78:cb:2b:94:f0:a4:a7:
                    50:ee:be:6f:21:63:51:7f:ad:f5:bc:9d:18:0c:d5:
                    cb:53:83:29:83:a6:7c:3b:f2:f2:e5:3e:23:77:66:
                    70:fc:43:a8:f0:c9:4d:23:99:c9:a1:22:94:66:5e:
                    8a:95:1d:81:e0:51:7a:28:ee:c9:98:59:fe:00:6f:
                    96:c9:69:46:bd:95:7f:f1:d2:28:84:0e:83:82:57:
                    1d:2f:6c:e8:46:39:c8:bc:79:2e:a1:fd:28:58:17:
                    42:3e:1b:01:bf:d9:59:7f:ce:f6:c8:71:ad:d9:34:
                    a9:9d:f5:6b:d9:b1:16:d3:7e:a3:97:c5:57:bb:95:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:19:DC:D2:9A:FE:6D:37:83:52:8B:A9:26:FB:D1:7A:C8:BB:7D:75
            X509v3 Authority Key Identifier:
                keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bf:82:75:07:1b:2e:94:29:35:e6:55:e8:99:6a:c5:96:f5:
         55:3f:cf:e1:e7:77:2a:e4:07:7e:e4:6c:13:ac:52:90:e7:11:
         b7:7a:6b:b6:a3:98:14:bf:6f:16:b4:9f:fd:e8:f3:c8:63:3f:
         e2:14:87:4d:c9:4a:cc:1d:66:c6:bc:52:3b:b2:85:a2:b4:f4:
         93:d9:0b:91:a9:2e:9e:d0:d7:cc:46:36:ff:9c:06:5a:18:f6:
         0b:44:09:4b:cf:ad:29:48:5b:28:53:6b:e5:ed:b7:4c:1e:41:
         7c:7b:f4:df:2a:cf:91:93:60:52:22:27:6e:94:49:7f:0b:28:
         4f:6e:e9:73:65:7e:52:21:e0:2e:b3:92:29:7c:71:50:53:cc:
         19:78:49:95:e8:d8:60:14:9c:a9:c7:19:c0:bc:81:92:b7:c3:
         28:62:29:c8:10:c9:87:5e:f6:d2:26:e8:98:41:fb:5f:9a:6d:
         21:9f:44:0d:13:12:ed:b4:5c:89:65:0c:23:64:07:08:59:b7:
         ef:a6:93:4e:65:82:e3:a1:83:65:04:ad:f8:7e:5c:a4:6c:50:
         38:27:bd:24:e9:e2:ab:3f:f1:70:cb:6d:72:cc:ff:da:69:20:
         bb:9a:8d:8c:17:b0:c3:69:bd:56:b9:1e:4c:2b:89:31:02:9e:
         bb:82:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:05:54 2024 by rpki-client on console-fra.rpki-client.org