Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          /TvEUb8yKDi70J/j1I5C9VVWQOUDoCDiz7A0DhnQRL0=
Subject key identifier:   25:46:76:2B:66:8F:FB:D4:28:C0:C4:65:80:20:FB:D5:F8:D4:70:12
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       018F874A7D0F9C1F71EFBB2058109EED2D0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0792
Signing time:             Fri 17 May 2024 16:02:36 +0000
Manifest this update:     Fri 17 May 2024 16:02:36 +0000
Manifest next update:     Sat 18 May 2024 16:02:36 +0000
Files and hashes:         1: 23L-thOGWEr4xG4ZrX5I2DlacyU.roa (hash: 2SERHsAq1xN4ySjB9fDelZDy/nn/iwZf0z+CScDedM4=)
                          2: PqVxbHemoXSECVDz12PHTcFd-tg.roa (hash: CcVXeU+tvn8exwaffLlli0SJcBM2hONSIoDXLHsZs8g=)
                          3: WY5BB0d3caQ9SJvj771e1SjzYdk.roa (hash: RIYzU3FBbRe0oh6h4SV46LlCD4pt8TICvsZ/pHPNnhk=)
                          4: alg23em52u81qKf3TWMm9rQtp00.crl (hash: KKYp7X+ODBut21FXqvXZo6Guyr8XACvpAAlVotmeFRA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:7d:0f:9c:1f:71:ef:bb:20:58:10:9e:ed:2d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: May 17 16:02:36 2024 GMT
            Not After : May 18 16:02:36 2024 GMT
        Subject: CN=2546762b668ffbd428c0c4658020fbd5f8d47012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:5a:16:46:e4:c7:4e:f2:ce:91:d5:0a:6f:
                    43:09:94:25:b6:61:3a:63:79:18:38:ed:b2:3c:53:
                    ee:44:48:93:9c:02:fa:85:a2:0d:a5:16:34:7d:ce:
                    7b:86:d5:d0:b7:0b:0e:98:ec:0a:4d:2f:fb:d1:cc:
                    37:c1:2c:0c:bc:8d:f7:03:7c:5c:95:a0:db:4a:91:
                    49:39:cd:f5:ce:80:86:9b:ab:cd:3c:d5:eb:00:fb:
                    a1:6e:db:08:d7:72:e5:f7:40:47:6c:8f:05:32:99:
                    b8:56:09:3f:b6:54:38:9d:61:bc:13:c3:50:2d:f9:
                    7a:1e:a3:b1:c7:60:91:c5:2c:6b:65:1c:ed:b2:3e:
                    bc:22:24:09:f2:bc:39:23:53:b0:5c:ec:0a:1d:71:
                    7f:61:57:6c:04:96:9f:64:88:7f:c4:f7:27:0f:5d:
                    68:44:af:44:36:ff:bf:3a:e5:e9:e7:27:0a:25:7d:
                    18:d9:38:55:3d:f9:d7:bc:cd:28:2c:fa:02:f1:38:
                    9c:04:ec:14:d3:bd:5f:c8:eb:f9:12:44:e2:2a:44:
                    f8:0a:5a:26:16:ae:c7:62:b4:95:63:ec:0c:45:62:
                    13:f6:9f:e1:8c:d0:2a:eb:63:3a:4e:4f:e1:dc:ab:
                    87:a9:a2:29:e9:3c:ab:db:21:ae:3f:de:9f:7f:72:
                    0c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:46:76:2B:66:8F:FB:D4:28:C0:C4:65:80:20:FB:D5:F8:D4:70:12
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:e7:fe:44:0e:14:35:bb:bc:cd:22:ff:fa:a8:5a:0a:f5:
         35:a5:ff:f4:c1:50:7d:c3:b3:3e:da:97:4e:ff:c1:91:f4:a8:
         c4:42:a6:ba:44:1c:46:61:8c:d3:27:45:0f:15:3e:a4:7c:7f:
         bd:0e:01:4d:d8:6e:03:95:e0:31:1d:75:1d:b8:3b:db:23:6b:
         11:96:5c:97:b2:87:03:34:4d:81:ea:f0:4d:a7:2a:ed:39:dc:
         33:d9:60:11:0c:f7:72:86:95:b5:13:fc:63:8a:c2:00:8c:1e:
         b0:6f:dd:05:c0:cb:e5:08:90:9b:79:ee:c5:e0:2d:3d:81:49:
         4b:8d:46:75:27:2b:0e:9f:13:64:51:72:ed:bd:fd:d1:ea:23:
         d4:4b:34:7f:7b:03:b7:bc:53:43:36:3d:f0:b7:d1:b0:b8:c0:
         0f:33:a6:e9:48:9e:40:b8:71:cb:01:1b:0c:f5:0b:f7:cf:8b:
         cc:48:ed:32:96:73:3e:f6:8b:e6:ff:e4:86:07:79:12:a9:37:
         d5:d2:2b:ed:80:04:16:4f:68:b1:f0:57:cb:0a:79:0a:41:63:
         63:dd:6b:2f:7f:6a:da:f2:55:27:61:23:42:06:c6:50:8d:1f:
         f6:ae:ae:bb:ea:52:9e:d2:59:2b:a3:d5:33:b0:83:01:c1:4a:
         79:3d:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:22 2024 by rpki-client on console-fra.rpki-client.org