Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
File:                     xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json)
Hash identifier:          63FcidYTVngriuiysvmMisZzNXLM+uIK2PiHnF1H87Y=
Subject key identifier:   F5:95:96:09:74:A5:71:24:61:EF:EF:0D:33:10:C3:F5:C3:00:85:E8
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Certificate issuer:       /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial:       018F877F43CFF12EA4731D0049F8D4D537C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
Manifest number:          E3
Signing time:             Fri 17 May 2024 17:00:15 +0000
Manifest this update:     Fri 17 May 2024 17:00:15 +0000
Manifest next update:     Sat 18 May 2024 17:00:15 +0000
Files and hashes:         1: tpaueUV-pe6FOkwQLAqzOs-5E9k.roa (hash: liJ5PqyIV3auGcLpf5TvKqwziEiQq7zi6+/F8GAjf7k=)
                          2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: CF8+l/0PInIhSZ+yx50dqtPv9rxlSC/FkZ3mmJb/sjY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:43:cf:f1:2e:a4:73:1d:00:49:f8:d4:d5:37:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
        Validity
            Not Before: May 17 17:00:15 2024 GMT
            Not After : May 18 17:00:15 2024 GMT
        Subject: CN=f595960974a5712461efef0d3310c3f5c30085e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:3a:a4:06:4a:91:0d:cf:b1:d7:e5:21:a0:
                    6a:b2:84:d0:6f:ac:e6:e9:09:d7:a6:b8:04:8a:29:
                    94:db:61:eb:4d:81:2d:a3:c3:95:86:a3:47:4d:67:
                    c2:60:0a:c3:2b:88:4c:31:61:a2:a7:95:9c:38:97:
                    82:76:8b:47:43:b5:a3:cc:34:a4:fc:e5:35:5a:b9:
                    21:d7:a6:d6:ec:68:75:35:d5:dd:32:98:3a:8f:df:
                    c9:4b:df:87:24:10:61:13:88:54:fb:41:b5:76:f5:
                    09:5c:a1:00:85:19:57:4f:6b:0a:a9:e5:59:6f:18:
                    1d:27:55:6d:79:76:33:bb:e0:f1:70:3f:b4:56:87:
                    24:7f:f5:7a:bc:a5:af:5f:b9:7e:78:ba:a9:d7:67:
                    87:ab:ef:26:c6:ca:df:af:e4:65:4c:a0:87:39:18:
                    3f:5e:00:cf:47:98:c4:99:ab:f6:88:9b:1e:41:b5:
                    61:44:2e:b7:ce:9a:0a:fa:18:27:12:7e:1a:44:3c:
                    40:79:15:ea:6f:8f:15:b5:bd:69:c9:10:1d:11:98:
                    3e:ad:03:31:71:00:3f:7e:a5:43:45:c0:6d:cb:79:
                    0d:69:34:b2:67:bf:9c:ec:ea:6e:c7:87:d2:dc:61:
                    68:36:9e:82:43:4e:81:74:d1:6b:78:1c:45:cf:01:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:95:96:09:74:A5:71:24:61:EF:EF:0D:33:10:C3:F5:C3:00:85:E8
            X509v3 Authority Key Identifier:
                keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7c:10:04:14:e0:38:83:fd:d1:00:59:48:10:eb:eb:b0:b4:
         e1:e2:08:40:8c:de:b3:d7:a2:d2:cf:6c:45:a5:0e:24:6a:2d:
         55:01:12:5a:06:5e:4b:de:7e:5c:4f:65:bb:3e:23:32:f7:dc:
         4c:07:26:c5:7d:bf:0a:c3:a0:58:ae:a6:8a:4a:a2:e4:4e:57:
         78:19:75:b3:b7:71:e5:e9:e8:be:ca:f5:a1:a4:ce:bc:76:14:
         be:04:3b:c3:a5:d6:9f:96:8d:37:50:d2:aa:99:76:11:e2:64:
         86:07:f5:fa:69:03:63:a6:89:7f:19:36:93:1d:04:17:4c:55:
         8f:86:cf:34:29:ec:8b:08:bc:3f:83:00:b0:e8:9b:17:4d:5d:
         ba:ee:13:0c:e1:ff:50:ec:43:9d:6b:95:96:40:1e:34:c2:5b:
         eb:45:f1:cd:98:e4:eb:51:65:df:7d:e9:29:2c:e6:d2:9a:a2:
         ac:2f:08:23:3d:84:ef:09:99:da:35:06:48:b2:5b:71:67:1d:
         29:3f:55:f5:44:46:f6:fc:44:7c:8d:a0:8f:9e:a2:ed:7c:e0:
         e9:d4:87:ec:83:a2:93:b6:29:8e:e6:af:ef:12:24:ee:ae:6a:
         c8:b4:54:17:3a:16:bc:ca:d3:2b:d4:be:ff:f2:6d:71:cc:83:
         51:55:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:02 2024 by rpki-client on console-ams.rpki-client.org