Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File:                     _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier:          7spnyU04IPtGnKj8ddVLuZ/8aC7e+30IBB2kY6w1WmI=
Subject key identifier:   6E:C3:DC:89:08:9F:90:7C:1E:E2:BE:F6:43:5D:57:66:2F:53:4D:18
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer:       /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial:       018F885ADB77AB0BBB9CC743E717424FEFC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number:          04C3
Signing time:             Fri 17 May 2024 21:00:06 +0000
Manifest this update:     Fri 17 May 2024 21:00:06 +0000
Manifest next update:     Sat 18 May 2024 21:00:06 +0000
Files and hashes:         1: 1R3jpIfthzSXKUY4x5lBxEwKJuA.roa (hash: JSndcIwp63jpBG4l9NCLkkDupDZQ0s08lf+D7QQ0NS0=)
                          2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: FvlwoktSc7ftO2pn4xISAGrBMNjAomSYUYxpMQHd0zo=)
                          3: x3J_JCSJsXEjbN5DwV8U0lj_C_w.roa (hash: yD+sHfhiUJLr03Jh3O5bJ9ni3JeGiwET3sSdSdiNNEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:db:77:ab:0b:bb:9c:c7:43:e7:17:42:4f:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
        Validity
            Not Before: May 17 21:00:06 2024 GMT
            Not After : May 18 21:00:06 2024 GMT
        Subject: CN=6ec3dc89089f907c1ee2bef6435d57662f534d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:0e:51:24:47:90:0e:ed:b5:08:e3:3f:d7:
                    8a:eb:82:1c:bf:1f:ee:ce:25:fc:57:7d:ad:d5:94:
                    84:dc:84:a5:fb:52:34:c0:6e:5d:f3:d3:79:38:e3:
                    e7:f6:db:4e:9b:b9:b8:df:3b:39:73:76:bb:e0:c5:
                    38:7b:18:27:80:d7:1a:84:74:a3:09:df:dd:78:5e:
                    96:96:9e:68:d3:91:03:26:18:1a:9f:af:f0:bf:0d:
                    5e:81:0c:e4:b1:05:82:2c:00:5f:14:9c:a0:1f:7b:
                    c6:98:32:c8:27:4a:f6:f9:7f:01:ed:fe:20:e9:1a:
                    ef:c8:86:e9:ba:c7:6b:28:1c:91:7a:99:0f:09:a0:
                    73:3a:a6:35:a3:ff:05:5b:4a:c4:bc:ac:7b:1d:80:
                    be:ce:76:ab:23:a4:59:f2:31:28:59:a4:21:0b:51:
                    63:a9:1d:29:5c:6f:a2:05:35:cd:cb:cc:dc:f1:8c:
                    4f:fa:13:19:6c:65:55:cd:d9:f6:23:bf:26:1e:08:
                    33:a4:01:40:93:21:c5:ba:58:9d:da:f3:41:f4:d6:
                    99:88:00:68:02:f9:66:5f:49:1e:11:87:4d:82:97:
                    c9:01:18:b2:ff:64:aa:34:2b:d5:c5:dc:3d:00:fc:
                    53:ad:95:5e:95:a6:e1:20:60:f4:0c:28:5c:d4:57:
                    6c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C3:DC:89:08:9F:90:7C:1E:E2:BE:F6:43:5D:57:66:2F:53:4D:18
            X509v3 Authority Key Identifier:
                keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:96:9e:9f:9f:d7:d0:64:61:53:45:6d:84:90:0a:9a:d5:77:
         00:b8:ca:e0:51:a6:0b:64:12:53:54:b4:d3:df:81:9a:b4:bf:
         a6:01:a2:03:8f:28:fe:e5:37:67:ed:31:b0:d6:bd:b1:fe:16:
         8e:2b:11:6d:e0:bc:29:e7:89:ef:49:74:a3:e1:1e:8e:f6:81:
         33:c8:2e:7d:0a:54:52:9a:15:c9:9f:be:cd:28:15:29:d0:98:
         41:25:5e:f3:c0:7a:47:70:42:95:ca:fe:21:c0:8e:41:1c:80:
         d1:1b:08:a1:9e:b9:24:db:a4:60:01:d9:b3:61:97:b9:20:73:
         6d:bf:78:14:40:73:0f:2d:d8:cb:e1:a7:29:08:2c:9a:ff:cd:
         d3:d8:2e:86:55:1a:bf:c5:3e:04:9c:05:7f:ab:fc:ab:ec:19:
         20:1d:c9:32:ce:b2:7f:62:d7:15:ce:f4:92:3d:bc:12:71:90:
         1f:dd:2e:b4:f8:4a:f7:c1:68:82:78:60:16:b3:c3:06:8c:6e:
         58:e4:eb:46:a7:ce:60:7e:d7:3d:63:f2:2b:ae:d6:f7:5a:02:
         ef:cc:fc:4f:93:6d:f9:a3:cb:9c:11:3e:26:55:7d:0d:71:3a:
         26:ae:36:92:a1:18:b8:47:e5:46:be:5f:05:85:ca:9b:6d:fa:
         3d:d0:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:58:43 2024 by rpki-client on console-fra.rpki-client.org