Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File:                     moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier:          HtROqKljvCvPEZZi1q9a9CCqYtsN8o16COP9Xq7m1JY=
Subject key identifier:   A1:75:07:DF:4E:20:DF:4F:6F:92:2E:70:4C:CD:77:47:A6:FB:B7:34
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer:       /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial:       018F874A8DAC857E353D0EA34F753C6D8160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number:          0C03
Signing time:             Fri 17 May 2024 16:02:41 +0000
Manifest this update:     Fri 17 May 2024 16:02:41 +0000
Manifest next update:     Sat 18 May 2024 16:02:41 +0000
Files and hashes:         1: GWM0nFpmI3o08CC_HYn49BLnSDU.roa (hash: DvqBI9VFXpIATXkqlETJpAy2gj/5N11Anc7wNJQOmxs=)
                          2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: eunu4+O8A4HYVrmjAiwg41H59N+vU4xbrjEzUG6STxo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:8d:ac:85:7e:35:3d:0e:a3:4f:75:3c:6d:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
        Validity
            Not Before: May 17 16:02:41 2024 GMT
            Not After : May 18 16:02:41 2024 GMT
        Subject: CN=a17507df4e20df4f6f922e704ccd7747a6fbb734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:ad:a0:f0:51:f3:78:4a:61:b0:a2:61:22:
                    ba:8b:8c:e4:a9:ff:2b:cd:0c:a0:09:20:e3:0b:b1:
                    0f:d8:a9:7a:b1:1c:5d:36:5f:28:64:1c:e2:8c:e1:
                    0d:a1:36:5f:46:57:7d:0f:7c:c1:e6:59:70:0b:82:
                    f1:54:d5:06:2b:2f:1a:60:be:31:29:db:23:99:dd:
                    34:31:41:81:69:a1:5c:b4:af:1c:24:9e:c4:1f:15:
                    31:f2:67:10:1a:bd:52:bc:82:e8:9d:ed:5c:fe:6b:
                    6b:99:cb:0e:0b:38:9b:f2:a4:3d:63:d4:39:d3:2e:
                    04:17:30:56:da:0d:4b:44:32:1b:34:25:a3:a5:ae:
                    e8:f4:e8:42:ae:0e:16:82:3a:fd:97:86:87:a7:a5:
                    13:b1:14:98:94:19:fc:b6:be:6d:30:57:f2:43:d9:
                    4f:82:ff:12:e3:20:0c:1e:33:bc:7a:cf:6b:02:87:
                    4c:fa:d3:9f:f6:dd:f7:87:3a:bd:64:5f:a0:18:10:
                    f0:f9:5c:3d:d9:76:89:51:f5:d7:f0:21:f3:53:ff:
                    50:46:a7:9c:81:6c:91:61:fa:3e:5d:8b:89:e8:57:
                    0d:b6:56:b4:78:ba:13:70:0d:09:93:70:b8:56:c5:
                    76:4f:4b:7a:68:fa:ce:60:39:3e:ea:80:51:f5:24:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:75:07:DF:4E:20:DF:4F:6F:92:2E:70:4C:CD:77:47:A6:FB:B7:34
            X509v3 Authority Key Identifier:
                keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:f7:09:76:35:c8:1c:25:1f:da:40:7f:d5:d6:2a:c0:de:cd:
         8a:86:ec:6e:0e:0f:ab:81:8d:be:bf:28:ca:f6:46:e9:23:80:
         01:0a:bd:3a:0b:55:54:2a:75:66:5c:63:c4:79:14:aa:82:0b:
         28:bf:10:0a:b6:5a:fd:c3:ef:b2:87:fb:ba:be:aa:f6:e1:97:
         2e:fb:eb:46:22:27:61:50:58:7e:0d:91:50:74:10:78:97:86:
         f0:ad:04:b1:f1:58:b9:59:4d:d0:28:88:6e:c7:9a:ad:19:5e:
         e4:90:69:88:a5:4c:c6:63:64:1e:f0:f5:1d:ee:42:79:74:8c:
         f7:74:2e:db:95:88:85:01:d6:9d:1c:49:c8:90:a7:66:46:45:
         77:44:05:44:b9:d2:d8:dd:59:04:22:64:53:d1:90:06:81:22:
         f5:f4:05:50:79:0e:8f:f0:0d:c2:81:4f:6c:7c:62:02:a8:c4:
         da:78:f8:15:b3:cb:99:11:f7:f6:6d:92:94:17:5d:8c:fe:ac:
         57:a8:57:c4:30:b6:e8:3c:c5:6a:1c:77:06:4b:6c:ff:92:5e:
         da:e5:bb:8b:39:ff:0a:2a:31:58:9d:d0:e6:0a:82:42:05:89:
         12:29:4b:fe:1c:45:31:30:d8:ce:83:5c:86:3f:c5:2d:7b:60:
         76:bd:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:38:07 2024 by rpki-client on console-fra.rpki-client.org