Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File:                     0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier:          cUswXJ88INGcjw4pcp2tmZgMS5wNZAUh6+YPhdKkqNo=
Subject key identifier:   7A:5F:F6:96:8F:4A:DD:0D:56:22:B4:7C:53:49:0F:28:90:CD:C2:5D
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer:       /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial:       018F369B6DD8DEAE0E851DDBFB1B2307DAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number:          0859
Signing time:             Thu 02 May 2024 00:01:46 +0000
Manifest this update:     Thu 02 May 2024 00:01:46 +0000
Manifest next update:     Fri 03 May 2024 00:01:46 +0000
Files and hashes:         1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: +sKVm2jKpZ+oCQs9hUycMfrwJmPr82/nvcgAyPW1j4g=)
                          2: 8xcNa6_AcGgRQIq7h9FyIYJueQc.roa (hash: MNclM5IvJ4hIu9a8NL7DfymxqVGIWXFcJrIRcnAsqEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9b:6d:d8:de:ae:0e:85:1d:db:fb:1b:23:07:da:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
        Validity
            Not Before: May  2 00:01:46 2024 GMT
            Not After : May  3 00:01:46 2024 GMT
        Subject: CN=7a5ff6968f4add0d5622b47c53490f2890cdc25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:be:28:7b:66:0c:67:0f:89:ac:1f:c7:b0:
                    23:ee:9b:c7:d9:83:4a:2b:86:91:9a:aa:1f:73:2a:
                    fd:df:3f:92:71:6c:d6:ff:72:43:f2:bc:ec:ea:18:
                    1c:66:e8:df:42:35:29:78:53:02:9d:81:0b:a0:f9:
                    6b:66:c5:40:ce:69:8e:01:d9:a3:a3:0c:67:3b:ae:
                    1c:9e:6d:b2:37:f6:0f:94:bc:b1:05:bc:a6:26:a1:
                    f8:2d:28:df:58:5d:f8:12:cd:8f:87:34:76:31:ce:
                    90:c3:ce:63:9e:bc:f6:40:4e:7c:b2:a2:8d:e8:2c:
                    9b:a0:fc:21:19:11:12:e9:d6:c6:1a:92:e9:07:b6:
                    82:fb:0f:92:c5:b9:16:51:eb:bf:5e:c3:41:3a:2f:
                    02:84:db:44:44:97:3a:b0:35:bf:c2:dd:eb:54:75:
                    3e:ea:33:a5:7c:60:0d:3a:7a:60:6f:25:2f:dc:bc:
                    c3:71:a2:af:9d:97:43:c2:ab:83:a3:3f:bf:7f:96:
                    4a:04:6f:ae:8c:81:d2:0f:3c:d6:49:ce:2d:4f:31:
                    42:1a:31:3b:15:a4:44:ba:73:56:38:e5:ad:2e:0d:
                    f7:c2:b0:21:7b:56:d9:08:be:08:b9:07:21:01:c9:
                    53:23:8d:a5:ec:0b:51:fb:68:be:4c:eb:50:6e:d4:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5F:F6:96:8F:4A:DD:0D:56:22:B4:7C:53:49:0F:28:90:CD:C2:5D
            X509v3 Authority Key Identifier:
                keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:68:89:9c:8b:e9:10:4b:b1:75:03:cf:b4:57:a6:ad:57:e5:
         50:73:6e:de:e6:1d:e7:f9:8a:91:5a:04:76:c7:5b:de:42:a5:
         48:66:31:63:7b:d1:9e:79:a7:a1:fb:33:fa:70:8d:0f:b8:27:
         ae:e7:ef:cb:3a:5a:e9:fc:cf:2b:f1:a7:da:8f:9d:2f:06:92:
         8e:df:d2:5b:e5:4e:30:7a:19:9f:20:7b:e1:66:66:06:ff:bd:
         7c:5d:4c:de:3f:e4:e4:22:c4:a3:0b:56:c5:5b:56:19:2a:52:
         0a:a1:1b:84:89:5a:e4:85:cb:32:ee:0b:b5:11:4d:b6:92:5a:
         f6:26:51:63:77:c5:27:78:1f:ef:26:64:3d:ec:7c:99:f9:6e:
         ab:03:80:e2:c1:50:e3:ee:55:68:8d:8b:05:77:0a:65:56:4b:
         99:d5:c0:47:83:7c:4a:ed:e8:ab:e3:36:1e:b8:fe:c5:ec:92:
         46:38:91:f2:f4:80:cf:7e:b9:8f:84:5e:3a:c2:21:a2:df:dc:
         3c:62:f9:d5:6c:5b:81:da:8d:5c:e4:2f:57:35:12:24:5b:28:
         b7:18:18:64:54:0f:b5:19:73:5a:c7:e7:18:f2:af:c8:78:f7:
         48:a6:b7:34:e2:9c:4f:06:19:3b:55:74:0e:5f:e8:35:a3:ad:
         0a:9a:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:50:07 2024 by rpki-client on console-fra.rpki-client.org