Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
File:                     mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft (raw, json)
Hash identifier:          ZQMUeHNZzFSBYmCeP4fN3tDzcI4mkdR9Rfvxo+AzxTY=
Subject key identifier:   A5:FA:C7:92:7E:1E:93:D0:85:22:FA:EA:2F:DA:47:A1:9D:EA:FE:8C
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Certificate issuer:       /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial:       018F86A3750DE765B4295FCF8B30D1045D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
Manifest number:          0A92
Signing time:             Fri 17 May 2024 13:00:10 +0000
Manifest this update:     Fri 17 May 2024 13:00:10 +0000
Manifest next update:     Sat 18 May 2024 13:00:10 +0000
Files and hashes:         1: ey1W-CtA_36Oo5ZdrlMV0uM14xM.roa (hash: mpNGbOJtQgMw+PfIuLdK89gsF++sc3CnxJvlOP25CH4=)
                          2: mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl (hash: NEMjtcCe+9mHwy5v8LvVE5CN0bcWokiM2x8hA149YE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:75:0d:e7:65:b4:29:5f:cf:8b:30:d1:04:5d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
        Validity
            Not Before: May 17 13:00:10 2024 GMT
            Not After : May 18 13:00:10 2024 GMT
        Subject: CN=a5fac7927e1e93d08522faea2fda47a19deafe8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:81:46:b2:fc:ff:c2:68:22:5d:41:42:94:
                    9f:1e:09:a9:9b:f5:12:e8:89:80:d1:59:be:ee:09:
                    7a:b0:96:c2:ca:60:20:ed:68:7f:49:f4:29:36:86:
                    10:b4:7b:eb:93:c3:18:6f:74:76:49:4b:d2:5b:2b:
                    60:fc:27:cc:92:ea:50:34:9e:e6:1d:36:89:7b:d5:
                    69:a7:be:84:e8:9a:32:ba:2a:ff:b4:96:a0:89:04:
                    15:16:3a:d8:36:ba:15:b5:b5:ff:a3:e2:8b:0f:53:
                    00:67:6d:99:39:6d:ef:92:39:07:b9:71:0b:61:d8:
                    bc:89:a6:47:cd:de:4d:27:aa:03:d4:17:a0:21:7a:
                    c8:90:e4:b0:61:00:ed:53:45:8a:3a:d2:d5:9b:9b:
                    12:04:b9:e2:94:54:46:96:cd:a1:31:e0:03:27:b9:
                    f8:35:67:f1:d8:72:90:21:7f:d4:8e:6d:7b:98:62:
                    83:f1:51:56:3e:a3:93:e5:ae:26:c0:f3:c4:76:af:
                    f2:0b:f7:4b:93:a1:34:2d:d5:43:fb:53:cc:f4:eb:
                    e0:dc:b7:ae:e5:d0:48:c3:83:a4:9d:e4:1f:dd:0c:
                    24:dc:32:45:f4:73:2f:7a:d7:5e:fb:7c:0b:f8:cb:
                    dd:26:57:a8:9d:63:83:72:c4:94:cd:01:42:c6:b0:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FA:C7:92:7E:1E:93:D0:85:22:FA:EA:2F:DA:47:A1:9D:EA:FE:8C
            X509v3 Authority Key Identifier:
                keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1c:5e:f3:18:91:36:7e:a6:8d:8a:ba:50:1e:28:69:1d:8b:
         e1:b2:c9:6b:14:0e:9e:aa:5c:8e:fa:ae:e9:38:00:e6:a7:51:
         b0:77:05:cc:ac:9a:6d:a4:2b:3b:3d:e6:f9:0c:89:9b:ef:fd:
         b1:aa:3b:43:d5:b6:09:21:f1:54:3d:39:b7:cd:9f:75:a2:e4:
         5e:7e:06:4e:9a:45:cb:3e:af:37:56:d8:03:2e:59:17:6f:e4:
         6e:eb:e6:89:ee:d6:10:6c:da:fd:f4:27:08:95:01:b0:06:62:
         04:b7:31:7a:3a:54:31:44:14:88:9e:f9:34:c1:fc:bc:f4:36:
         d0:28:7a:d5:b1:ae:e6:f3:a3:7e:62:c8:81:c4:27:cf:e5:67:
         b6:c2:42:86:16:88:c5:06:55:53:bc:9e:62:77:10:d2:f7:67:
         92:cf:3d:12:7e:e7:1b:eb:e9:ce:8b:34:fe:b8:73:32:1f:7b:
         cf:35:3b:74:9f:ed:a0:37:2b:83:d5:59:d4:25:c5:44:e8:e3:
         09:09:1a:87:8a:90:54:37:80:ca:88:e1:e5:23:d5:8a:1f:50:
         1f:35:85:f4:be:89:10:31:62:c6:8b:7a:58:49:44:7d:52:0f:
         da:39:dd:66:ec:a4:7a:c3:df:7e:65:60:30:6e:86:25:d5:4d:
         1d:67:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:37:51 2024 by rpki-client on console-fra.rpki-client.org