Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File:                     xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier:          NcklUl41pi6OOPvih1e/kHXdLujNlBMIZBmU9hWqR0A=
Subject key identifier:   B3:D9:A8:2F:31:B0:13:B4:B9:54:0F:B1:A7:AB:70:3E:C9:9E:2E:A0
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer:       /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial:       018FB1C7621B176BA303C8EB1A5D27980A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number:          0BAA
Signing time:             Sat 25 May 2024 22:03:04 +0000
Manifest this update:     Sat 25 May 2024 22:03:04 +0000
Manifest next update:     Sun 26 May 2024 22:03:04 +0000
Files and hashes:         1: 2Uj8qhc_QzLiWUho8uanAFTkIN0.roa (hash: jn5u7pUpMdQu5riz74WGmiQHaGW9geHLoo5e6mWq04Q=)
                          2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: NH0rtiyikIp8ZRzLHMZXuyiUxiN4LdzuxrafomXKPz0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 22:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b1:c7:62:1b:17:6b:a3:03:c8:eb:1a:5d:27:98:0a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
        Validity
            Not Before: May 25 22:03:04 2024 GMT
            Not After : May 26 22:03:04 2024 GMT
        Subject: CN=b3d9a82f31b013b4b9540fb1a7ab703ec99e2ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fc:71:fe:f4:03:37:57:f4:47:9c:10:75:19:
                    a1:36:e2:3a:4a:6c:8c:bd:c9:91:47:50:eb:9c:ec:
                    d6:29:83:b7:4b:ce:c0:fc:2f:c3:3c:d7:f4:30:f2:
                    35:69:d1:9c:41:95:cb:6b:b4:35:39:f6:b0:77:4d:
                    b4:16:b4:e3:f1:11:4f:53:da:9a:f2:9c:f0:0d:3b:
                    3b:48:dc:f0:29:e1:56:4c:1a:af:72:94:40:c8:a8:
                    eb:62:84:a8:5f:ff:53:d6:c8:09:ca:07:ff:a9:73:
                    5f:05:b0:63:ea:11:0e:7d:8c:8c:30:bd:11:61:d9:
                    60:e8:e0:2d:ee:05:cc:96:44:7a:41:b1:e0:cb:30:
                    9b:bf:c5:3c:13:e9:bf:b1:d2:57:43:35:37:60:15:
                    1c:0f:41:34:28:33:2d:00:8c:31:8c:8a:b6:da:f8:
                    74:09:a2:a4:43:7d:b5:79:92:5e:2a:40:e3:f4:a2:
                    e5:33:0b:72:dc:53:db:47:14:59:06:f4:a9:32:af:
                    0f:92:47:66:52:a4:14:87:40:5c:cc:0e:df:a8:d5:
                    cb:50:4e:46:25:a3:59:f3:3e:b7:bf:ab:b9:de:81:
                    4a:d7:46:ae:99:47:37:71:1a:b8:38:70:32:1e:2f:
                    75:e4:28:03:95:a9:d8:16:dd:ab:21:f6:d2:53:90:
                    ae:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D9:A8:2F:31:B0:13:B4:B9:54:0F:B1:A7:AB:70:3E:C9:9E:2E:A0
            X509v3 Authority Key Identifier:
                keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:cf:91:8f:b7:88:fd:b6:03:f6:e1:6a:20:d2:d0:c1:6a:66:
         29:27:97:1a:dd:aa:31:5e:d7:67:7e:56:48:cb:cc:c7:a0:c1:
         2b:d6:c0:de:35:57:71:1b:54:78:4e:76:56:c7:e1:f4:e3:db:
         51:8d:dc:c3:d7:2b:ad:33:8d:86:39:82:7d:d3:1a:82:98:dc:
         e1:85:14:ac:bc:3e:c7:b7:06:1b:5a:74:8a:97:01:59:c5:2b:
         9e:78:b0:43:92:c1:6f:d6:c6:4a:7d:34:ca:7e:b5:8a:f8:d8:
         87:39:71:23:47:a5:e2:97:f9:64:b3:9c:55:85:85:9e:1e:37:
         f7:fb:37:5f:92:cd:58:a2:e7:99:47:fc:6b:eb:c0:c4:08:a0:
         6e:c0:ec:0f:9e:88:b7:4e:7a:6f:8f:1c:af:1c:90:43:4f:34:
         c5:eb:a1:cd:04:98:3b:09:a5:50:77:be:d5:74:e6:7c:b2:24:
         92:f5:55:bc:d1:ac:d7:9d:03:0c:16:d4:91:ba:a9:90:fd:d0:
         57:55:2a:15:96:8d:b4:f3:77:29:df:76:c6:dd:7b:46:fb:a2:
         f9:2c:ca:2b:01:84:d0:82:ea:72:ae:10:ab:e4:a5:a1:62:a1:
         c2:3a:66:43:cc:52:23:60:5b:62:96:6e:d1:5f:32:1b:96:a2:
         0d:fd:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 04:01:00 2024 by rpki-client on console-fra.rpki-client.org