Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
File:                     p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json)
Hash identifier:          Wj2bDJemjxIU9Wjl7VgquOf/K/btl/5f4TfLJuPuutQ=
Subject key identifier:   72:8E:36:74:96:EE:D4:FA:A2:4D:93:05:11:97:2C:55:2B:39:85:A7
Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
Certificate issuer:       /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Certificate serial:       018FD29AC9E00132553F36BE3626E419D64D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
Manifest number:          033A
Signing time:             Sat 01 Jun 2024 07:01:50 +0000
Manifest this update:     Sat 01 Jun 2024 07:01:50 +0000
Manifest next update:     Sun 02 Jun 2024 07:01:50 +0000
Files and hashes:         1: AEbW2VURLwusr004pqQLovy0PeI.roa (hash: 1ysBroD56iSFTK16pSeR8yenn1vv6asg9+ns5P/lEhs=)
                          2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: 34Lvgplf6S3szV+1K0tdZn+QVMt97WSu+a6B0DboKos=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d2:9a:c9:e0:01:32:55:3f:36:be:36:26:e4:19:d6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
        Validity
            Not Before: Jun  1 07:01:50 2024 GMT
            Not After : Jun  2 07:01:50 2024 GMT
        Subject: CN=728e367496eed4faa24d930511972c552b3985a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f3:91:3e:b5:92:13:96:8d:e4:d9:c0:52:35:
                    6e:d2:6e:a2:d2:e7:6a:8c:ef:5d:a5:94:e3:a9:26:
                    40:ac:86:72:aa:71:a7:08:53:3e:31:15:22:1f:50:
                    e7:c5:d2:3e:20:42:61:db:40:c5:88:d0:f2:61:24:
                    9e:70:72:99:9c:27:dc:48:c6:8d:92:67:13:fa:a8:
                    4a:91:7e:6b:5c:c6:4f:3f:27:04:bf:c5:be:fe:d1:
                    69:61:b2:94:89:ce:88:18:96:be:2c:06:04:88:ba:
                    a3:e7:52:61:d6:c3:0c:7d:5f:c9:dd:5b:db:a5:09:
                    05:68:1b:4c:50:32:b8:27:9d:4b:71:9a:47:33:dd:
                    40:a6:fc:73:9b:7b:59:f0:6d:7c:2d:8f:31:94:43:
                    83:5d:07:e4:3f:b3:44:cf:92:ad:f9:c9:22:5a:89:
                    11:36:c7:5b:01:bc:5f:73:e6:d1:2b:6f:de:06:61:
                    99:d1:cb:b5:a7:4e:d7:aa:c8:a5:d3:e8:d2:32:7b:
                    1a:83:17:73:dd:f2:c6:ca:68:03:e8:10:30:4a:2d:
                    97:58:d8:72:84:62:ff:ee:61:65:64:de:1c:1d:04:
                    08:6f:8e:ee:0c:04:7c:ce:c8:ad:27:83:32:9a:ed:
                    4d:b3:af:68:5b:c5:c4:93:0a:f6:23:73:85:81:8e:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:36:74:96:EE:D4:FA:A2:4D:93:05:11:97:2C:55:2B:39:85:A7
            X509v3 Authority Key Identifier:
                keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:4c:c4:5e:93:d2:2a:cc:3e:c0:27:b4:b5:bb:d9:9c:8e:
         8e:60:f8:cc:f5:44:af:c2:79:34:04:2a:e0:33:10:81:d8:a8:
         4d:7a:83:1b:b0:31:fb:04:b5:b7:d9:32:6b:05:d3:7c:39:7c:
         97:f9:4f:41:af:27:1b:f6:7d:dd:46:31:e8:e6:b3:2b:10:12:
         93:18:6d:dc:47:f3:3d:ff:1d:90:50:86:95:6a:af:dc:df:07:
         83:3f:e9:92:28:7d:00:5d:7a:cf:96:3c:17:d6:d5:2c:d0:37:
         fa:1f:63:5a:d7:ef:31:71:35:7f:39:fc:fe:33:8b:3f:2c:ae:
         04:7b:ed:cf:5b:32:b3:40:55:c6:74:4d:cd:2e:ef:f6:80:53:
         17:be:7c:70:16:04:76:1d:5c:bb:12:b6:6c:eb:75:1e:38:64:
         d7:8a:f6:87:90:c7:30:6c:47:83:ae:7f:d9:50:56:20:5a:1d:
         ee:e1:4b:6e:68:36:6c:7f:f6:47:24:dd:94:9b:8e:e1:d7:44:
         17:02:b7:4b:39:ac:6c:e9:b1:e1:60:c3:be:41:6e:bf:5f:bc:
         bc:f0:16:b1:92:12:51:a0:ff:01:a1:e4:d9:5c:88:8a:13:a4:
         28:a4:38:f9:fb:36:f3:e7:4c:30:25:ed:ef:eb:30:ec:85:78:
         23:54:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:36:34 2024 by rpki-client on console-fra.rpki-client.org