Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File:                     2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier:          IE3HhohlSGVU6XwQmxfrJxXOjXwfQx2C+p0HMOUpqOw=
Subject key identifier:   4F:BA:FA:B0:19:82:2F:15:A9:27:98:56:06:41:96:01:5C:2F:04:64
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer:       /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial:       018F429F99DD4B0639C57AEE63BA7ED3437E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number:          0974
Signing time:             Sat 04 May 2024 08:01:46 +0000
Manifest this update:     Sat 04 May 2024 08:01:46 +0000
Manifest next update:     Sun 05 May 2024 08:01:46 +0000
Files and hashes:         1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: +AB2KYReQyCHBvxitJ2d1iIy/VVKc7eBLJOec2Z1UyE=)
                          2: QKep5x5i_NZyJ8WWRvqWh6nAKrc.roa (hash: 0wsNdEGYGR0oWi9GkZ4gyeXyY8Lcy0CREJ1jDzcpRiw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:9f:99:dd:4b:06:39:c5:7a:ee:63:ba:7e:d3:43:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
        Validity
            Not Before: May  4 08:01:46 2024 GMT
            Not After : May  5 08:01:46 2024 GMT
        Subject: CN=4fbafab019822f15a9279856064196015c2f0464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:0f:c5:cb:dc:38:bb:f3:73:48:db:88:54:
                    8c:02:57:28:16:c9:b7:3e:dd:f4:bc:a5:d3:c7:33:
                    69:ec:f2:11:07:21:e1:74:44:57:84:ae:d8:5b:3b:
                    f0:4a:b6:da:af:d3:2b:9e:c7:04:82:f2:b4:6a:39:
                    3f:1a:e2:2d:63:2d:55:6a:5c:37:6f:6b:ad:32:af:
                    01:ce:4a:36:25:7c:85:68:4d:5a:df:46:dd:c5:cd:
                    32:c4:bf:78:4d:ba:4f:04:2c:f5:9d:29:ab:83:5d:
                    88:09:84:0b:7a:08:1a:31:95:31:ff:00:f4:7b:7f:
                    cb:89:e9:38:04:21:a1:10:74:5f:f8:64:4b:b2:d7:
                    ec:9f:41:e2:26:91:98:aa:22:e7:db:70:6a:99:4b:
                    0a:cb:1e:71:d3:4c:a0:b5:2b:0c:fe:52:d8:82:a7:
                    cc:8c:0d:4c:ab:1c:1d:cd:07:46:54:7c:b6:06:8c:
                    4d:2d:3b:5e:bb:a3:66:71:2b:1c:1d:3b:e5:52:44:
                    7e:70:ef:4c:de:46:37:76:8a:18:58:5f:d6:e7:5d:
                    31:75:71:64:42:61:d8:f2:44:ac:fa:f5:54:6d:fe:
                    9c:b6:39:31:98:34:92:1a:2a:af:3d:7b:7a:64:af:
                    69:74:59:24:08:73:60:ab:02:45:e5:ea:f0:e0:62:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BA:FA:B0:19:82:2F:15:A9:27:98:56:06:41:96:01:5C:2F:04:64
            X509v3 Authority Key Identifier:
                keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:45:10:e3:03:78:0f:27:08:07:fc:40:02:e0:25:d3:71:78:
         39:a0:f2:a4:4f:b6:43:d0:09:df:2a:76:ef:30:ee:6b:d8:a8:
         e9:a1:dc:b6:c1:d4:b5:02:ab:55:86:55:1a:84:6e:7d:5b:c5:
         88:78:3f:78:3b:dd:4b:dc:c1:b2:0e:7f:a2:7d:3d:51:33:2a:
         0f:bd:e0:58:b2:5e:e2:23:1f:19:ad:e3:89:16:70:6e:28:7e:
         0d:92:73:33:b7:63:32:92:58:b4:c9:2f:d7:53:96:ae:ae:89:
         37:2c:a2:e7:6c:0c:2e:40:cd:b0:c3:e2:87:7d:22:2f:1c:23:
         36:fb:0a:f9:70:f9:ca:4d:e5:a4:36:bd:8d:08:31:a5:2c:5c:
         1d:bf:05:da:06:2f:fa:8d:dd:26:07:82:20:64:d8:cc:b6:b2:
         56:64:9a:b6:94:c4:14:fe:b7:21:db:95:7d:10:c4:c2:c1:b4:
         b6:f0:57:b6:fb:fd:8c:16:6e:24:7f:e9:82:9a:60:f8:fd:5b:
         b9:60:d2:3f:75:0b:1e:05:58:84:28:52:4b:98:fe:a3:91:6a:
         15:d6:e1:4a:26:4b:c7:95:e3:d4:b3:fa:27:07:9f:4b:e3:31:
         b1:d9:c6:54:7d:ee:7d:da:d1:e8:9a:4c:e1:4b:7a:53:86:87:
         a5:5b:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:09:25 2024 by rpki-client on console-fra.rpki-client.org