Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File:                     Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier:          z26nj20f+vbwEjasr/mw1u54GSNLyXcWSWKo2ZFNQwc=
Subject key identifier:   FA:8F:FE:4A:79:EA:9C:43:D3:25:0B:A7:39:3C:D8:24:AB:5C:EE:3B
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer:       /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial:       018F8749D5541BF4D1579A602C67F8151170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number:          085C
Signing time:             Fri 17 May 2024 16:01:53 +0000
Manifest this update:     Fri 17 May 2024 16:01:53 +0000
Manifest next update:     Sat 18 May 2024 16:01:53 +0000
Files and hashes:         1: 492_reVUIKNH3Ssldb9aW34TqY8.roa (hash: 1x9h1Kdl4CHtLCRU+KuU4Xur9dpeglK1vY0BXE9P+88=)
                          2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: KBHkEClGTDX1xvLcPGdBlShVVtnt4qHyScgnWwYaaUA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d5:54:1b:f4:d1:57:9a:60:2c:67:f8:15:11:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
        Validity
            Not Before: May 17 16:01:53 2024 GMT
            Not After : May 18 16:01:53 2024 GMT
        Subject: CN=fa8ffe4a79ea9c43d3250ba7393cd824ab5cee3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:27:cd:59:2f:39:f1:f2:bc:c6:b7:f6:be:
                    f5:bb:60:10:f5:55:5d:c0:09:7e:b6:71:26:ed:ef:
                    fd:52:a1:3a:b4:c2:90:a9:f4:ef:9f:6a:c7:c2:f7:
                    a0:55:dd:c5:74:f8:54:0f:61:b1:d8:b8:97:49:7e:
                    65:0c:05:73:2d:88:cc:9d:02:70:d3:6b:64:9f:49:
                    ce:bb:ef:62:46:20:0b:0f:0f:bf:3b:b2:23:3d:48:
                    06:e7:76:74:45:07:d7:2c:9c:0a:cf:d5:b2:fa:b5:
                    a4:67:d8:ae:d3:87:f4:eb:89:a4:01:4e:2c:8c:b6:
                    c0:a9:a8:cd:b8:0f:4a:f7:e2:a7:7d:94:9c:26:3f:
                    f1:bc:2d:42:ba:b2:d5:a8:06:36:5f:62:3e:bf:2b:
                    60:b4:28:29:2e:53:43:d6:f6:e6:81:ea:1b:c0:bc:
                    66:38:7a:df:8b:bd:7e:22:f7:0a:0f:96:9c:db:58:
                    97:e1:98:8e:8e:62:d6:3f:50:f3:1a:b1:83:66:1f:
                    f2:5a:ff:66:d3:c8:f6:8c:28:05:86:34:f8:ab:e8:
                    b2:a8:af:36:dc:83:94:37:97:63:36:48:58:dc:ef:
                    92:06:f5:8d:d2:7e:89:1b:ed:5f:26:7f:30:d9:59:
                    d7:cd:b9:69:a0:53:bf:aa:9b:4f:ba:5d:2a:04:3f:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8F:FE:4A:79:EA:9C:43:D3:25:0B:A7:39:3C:D8:24:AB:5C:EE:3B
            X509v3 Authority Key Identifier:
                keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:34:18:94:35:63:30:fe:f9:8f:35:3f:51:4c:90:97:14:59:
         78:41:4a:f1:e6:f1:24:32:29:45:a9:c7:51:27:86:d4:a0:f6:
         6e:1a:cf:46:f0:b6:55:85:6d:2d:e2:eb:a4:e0:f2:d2:21:40:
         41:21:17:ef:78:3a:18:ad:32:c0:d1:7d:aa:c7:d7:d6:b6:93:
         5f:85:7d:7b:94:3b:ff:88:90:48:36:9c:de:69:f5:92:73:41:
         d4:14:8e:39:a5:bd:e0:46:ac:c6:7d:e6:83:54:b3:73:8a:3a:
         01:84:4c:79:54:a8:70:b5:ae:27:03:6b:c0:82:32:7c:69:df:
         e5:d0:ca:f1:c1:6b:c8:05:ea:d2:d6:c7:33:f3:a9:24:ce:98:
         a8:44:6e:17:f8:7a:78:29:19:40:4c:3c:c6:88:79:3a:2f:52:
         80:89:a0:46:56:d7:81:b6:c4:5f:81:03:d5:00:9b:d6:68:0c:
         b7:e6:3b:7a:44:2d:e9:97:04:14:85:52:3e:c5:51:16:8a:88:
         55:ad:71:5f:5d:0c:4f:37:51:bd:42:21:51:55:26:00:a2:c7:
         ef:51:d0:7c:fa:7f:e2:d5:1d:67:53:21:5a:e8:1f:a6:ef:d7:
         43:c1:06:78:b7:80:88:7f:5f:5c:50:51:dc:cc:c1:d3:1c:58:
         5b:ea:e9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:39 2024 by rpki-client on console-fra.rpki-client.org