Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File:                     zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier:          gZKS+Gz11NgrAJLM8oPXKIXonozxJc6CatrOdnFy144=
Subject key identifier:   49:91:AC:AB:FD:CF:DC:2E:94:25:21:63:FB:F5:63:94:E4:82:6A:E7
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer:       /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial:       018F8D1526B30A39F7B0707DB4CB66D5C79A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number:          0640
Signing time:             Sat 18 May 2024 19:02:04 +0000
Manifest this update:     Sat 18 May 2024 19:02:04 +0000
Manifest next update:     Sun 19 May 2024 19:02:04 +0000
Files and hashes:         1: 0KSPuj7l6tfKnK0WkpREg2PPxL8.roa (hash: RZQSsvJM6rqBassT4MHscCjrhxKmnrfE0U/iJ2OGcso=)
                          2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: pxok5XEMjsj8TG4XwPD54gydXPvxCl3h4r3z3Yjacr4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:15:26:b3:0a:39:f7:b0:70:7d:b4:cb:66:d5:c7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
        Validity
            Not Before: May 18 19:02:04 2024 GMT
            Not After : May 19 19:02:04 2024 GMT
        Subject: CN=4991acabfdcfdc2e94252163fbf56394e4826ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:0f:0c:61:0f:46:aa:73:9e:f9:75:16:b8:
                    b4:76:4e:99:6d:e4:b2:17:67:cf:a7:cb:ed:a2:d8:
                    38:93:fa:6b:e9:ee:fa:6c:bc:85:d2:22:5a:03:ef:
                    22:f6:87:7b:d1:43:0b:0c:f8:c2:6a:03:5b:a7:52:
                    81:ae:33:ab:8e:28:c9:27:b3:e2:0c:99:d2:cb:f6:
                    d0:0d:e9:29:53:1c:d5:11:45:2f:5b:fa:35:84:02:
                    13:4c:86:3a:e7:c5:74:99:ef:86:74:1d:04:77:d3:
                    47:83:f7:a6:dc:52:b8:1e:3a:60:e9:5c:1a:54:37:
                    6d:a3:27:40:7b:96:2b:e2:c1:6f:c5:5a:66:27:61:
                    54:06:d7:63:8d:c2:b9:be:bb:99:50:4b:95:0b:80:
                    ad:87:19:8a:0d:3f:e0:ed:59:f4:36:66:08:e9:b1:
                    46:f8:dc:6a:5e:0d:e3:d3:71:78:64:73:cf:01:8f:
                    d8:08:97:e7:50:7b:18:5e:86:13:58:58:1b:59:79:
                    02:8f:bf:e7:52:f3:1d:70:80:69:01:aa:7a:5d:61:
                    8f:d0:59:f0:27:5f:3f:f9:b7:1b:58:04:85:06:3d:
                    38:b3:f8:7b:3e:ed:38:71:9b:2f:1c:8f:6f:17:91:
                    8f:07:24:fd:8c:de:c3:4d:ea:21:44:5b:4b:4a:c4:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:91:AC:AB:FD:CF:DC:2E:94:25:21:63:FB:F5:63:94:E4:82:6A:E7
            X509v3 Authority Key Identifier:
                keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d2:22:24:ff:f9:29:cc:be:e3:84:97:df:0d:9b:4f:ca:24:
         2c:67:72:ad:ca:56:fb:88:da:f5:a7:f3:c7:2d:dd:3b:96:a7:
         a6:14:55:e0:93:64:03:fa:6f:67:cc:64:0b:a8:54:2e:10:8a:
         08:92:24:89:60:ce:90:c5:d9:d0:85:f4:10:d3:6e:36:49:b6:
         da:68:f1:9a:05:07:1c:ad:cf:45:89:a7:e3:1a:49:2a:c6:4f:
         df:d9:9d:46:f4:4a:c6:80:29:90:86:4b:7f:5d:74:dd:9f:80:
         d5:a0:ba:88:f0:8c:82:a8:e2:52:54:8f:43:84:cc:d1:b2:bd:
         23:95:55:68:19:12:34:9a:2b:3d:d3:2c:30:1e:dd:b9:6d:e9:
         43:b7:78:e7:19:2c:62:8b:ac:dd:a7:ed:05:f9:5d:ec:57:01:
         24:d2:93:20:a5:14:bf:51:dd:a3:99:b7:cb:5e:4e:7a:27:69:
         94:d3:8b:c7:e0:89:d7:8f:8e:c7:8f:12:33:c9:83:72:0d:66:
         9c:46:fb:8e:b8:fb:75:4f:3f:7a:f8:6c:3a:90:eb:ff:a2:d7:
         11:5b:ca:06:28:29:aa:73:1b:da:b3:e9:a0:e6:f4:9a:9a:72:
         e9:c1:e3:b6:5e:c7:12:80:5c:2e:7f:cc:5f:0f:02:a7:35:de:
         ee:f9:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:38:11 2024 by rpki-client on console-fra.rpki-client.org