Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File:                     z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier:          IsJgWMdxgbfIcPJuIn2Ac2AsxsbxsQz8+ZI90C+Hh9Q=
Subject key identifier:   59:49:94:65:88:08:D6:5E:A5:E8:7D:2A:C1:C7:25:CA:54:E0:2A:36
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer:       /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial:       018F87ED58F274AB815CECC45D91B9587A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number:          0BE8
Signing time:             Fri 17 May 2024 19:00:29 +0000
Manifest this update:     Fri 17 May 2024 19:00:29 +0000
Manifest next update:     Sat 18 May 2024 19:00:29 +0000
Files and hashes:         1: nXo0jQC_N_DawW_obVGdmjMKql0.roa (hash: rT/ivrPts8m/Eqz+yl5RIBZ8n9uYQG+8gCFXajN6J6c=)
                          2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: RBmK+Zl7kQUqZ8lh13uBCNKoY2A00d+kMPQzWKXsCSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:58:f2:74:ab:81:5c:ec:c4:5d:91:b9:58:7a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
        Validity
            Not Before: May 17 19:00:29 2024 GMT
            Not After : May 18 19:00:29 2024 GMT
        Subject: CN=594994658808d65ea5e87d2ac1c725ca54e02a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:4b:38:94:1f:40:66:0d:67:ad:2e:3c:49:
                    53:5d:14:77:48:3d:45:d4:c5:ab:58:cc:c1:c7:b5:
                    d6:6a:ed:ee:9e:3c:fd:aa:1b:8c:1a:80:a5:8f:55:
                    c7:46:99:dd:6b:b7:1b:d9:8b:f4:95:97:e4:24:7f:
                    27:08:0b:74:ca:54:69:59:69:c6:6a:00:29:96:10:
                    2d:d3:04:ba:f8:a0:30:15:59:bb:4f:1c:00:f5:92:
                    a1:3a:7a:b3:d7:e5:4c:af:e5:95:b0:d7:5e:bb:0c:
                    36:ee:6f:21:df:83:52:8f:1d:ea:0e:04:5f:ef:e0:
                    d2:da:ca:2e:d4:f8:d2:4d:67:d8:e9:7d:2e:46:69:
                    57:cf:c1:5e:30:8e:7c:7b:71:74:9a:0d:90:99:3b:
                    1e:fc:5b:cc:f2:20:e9:75:50:41:b6:a2:99:c2:c6:
                    f5:56:ed:5d:29:ef:a4:20:cd:c8:97:87:8f:0d:c3:
                    f0:1e:09:9d:e3:69:9d:75:9a:b7:ab:40:81:84:6d:
                    9a:e3:a3:29:bd:12:79:a8:6b:18:67:e7:11:b6:40:
                    d3:bb:cf:0a:fb:0a:e0:de:66:ef:85:75:f7:9e:84:
                    82:88:1c:24:5f:fc:3d:00:89:8e:81:fd:d7:c5:e7:
                    98:8b:69:e6:f9:79:00:42:86:da:18:a1:07:43:e7:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:49:94:65:88:08:D6:5E:A5:E8:7D:2A:C1:C7:25:CA:54:E0:2A:36
            X509v3 Authority Key Identifier:
                keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:eb:bc:17:e4:09:29:03:64:81:52:b0:f3:91:30:88:0a:
         5f:ff:6c:43:59:7b:19:f5:65:02:6b:66:c9:60:b4:0c:d3:3b:
         dc:8e:2a:9f:2f:7e:9a:67:03:13:01:86:f5:13:cb:82:d2:c5:
         7b:fe:f0:b2:59:fe:df:2b:30:27:ea:44:64:ba:bd:44:de:2b:
         c2:ef:4a:6c:4e:17:49:d7:88:ab:d6:23:2a:81:14:b8:34:76:
         4c:72:43:9e:7b:33:d3:92:3f:b0:7b:5f:f9:e9:45:aa:28:86:
         d6:74:a8:93:bd:09:22:5d:7a:c5:42:7e:59:28:5f:15:b7:be:
         da:12:9b:8c:8b:6c:cb:b5:95:a3:fd:f3:5b:7b:97:2d:f4:74:
         30:c5:60:c7:b0:f9:b3:b0:3f:5b:a8:c9:d1:96:4b:60:b7:34:
         69:87:d9:00:8a:9a:7f:1e:05:67:ca:b2:2b:f8:32:45:0e:56:
         54:87:22:33:ce:d4:e9:cb:20:dc:6f:59:32:10:e4:ac:cd:74:
         d8:6c:47:38:4a:52:6b:9e:1c:46:4c:a3:19:a1:96:94:d5:6c:
         4d:27:d2:b4:03:69:fa:f0:64:73:ac:02:96:08:4c:1c:d3:8d:
         a8:1c:64:46:bd:40:57:41:7d:d8:9f:0c:46:fc:e9:0c:4d:c1:
         77:0f:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:44 2024 by rpki-client on console-ams.rpki-client.org