Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
File:                     30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json)
Hash identifier:          GOwZyh8g7lZBja4N9/ej5I5aK1r/KsRryvelk9VTzFU=
Subject key identifier:   B1:E8:42:C1:53:FE:1B:D8:46:A8:1F:90:F5:C2:FB:BF:9E:06:77:43
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Certificate issuer:       /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial:       018F5702E7EC2A87C510B129D1F33F4A4B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
Manifest number:          0DF2
Signing time:             Wed 08 May 2024 07:02:39 +0000
Manifest this update:     Wed 08 May 2024 07:02:39 +0000
Manifest next update:     Thu 09 May 2024 07:02:39 +0000
Files and hashes:         1: 1-b57h1_ErhmJk9hAaVCwMRyP-RU.roa (hash: 9jGPIVkm1R9JpdptgwAXdt90FKSXTTHXT7/zC1EeCYw=)
                          2: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: SODpmOHMbRpEzuepEiAW4twnrR1eqRX1ESLF1H6Ehtk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 07:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:02:e7:ec:2a:87:c5:10:b1:29:d1:f3:3f:4a:4b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
        Validity
            Not Before: May  8 07:02:39 2024 GMT
            Not After : May  9 07:02:39 2024 GMT
        Subject: CN=b1e842c153fe1bd846a81f90f5c2fbbf9e067743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:b8:43:f8:b7:38:26:e7:5c:b1:67:6d:56:
                    8d:9d:da:c9:9a:e3:fc:44:37:4f:af:dd:5c:3f:27:
                    48:d9:96:72:46:2d:35:7e:f1:64:32:e3:b8:a7:11:
                    f2:6f:a5:7b:23:48:49:b4:5b:39:50:fb:ac:f2:74:
                    9f:40:31:5f:41:03:7d:84:cb:ce:0b:76:de:c6:35:
                    dd:87:8b:d9:97:87:13:9e:29:69:4e:8a:38:71:f5:
                    a4:3f:d5:d9:df:db:0c:a6:6d:5b:71:b6:31:de:e8:
                    c1:8c:47:36:4c:33:69:db:62:38:dd:ba:5a:74:0c:
                    0e:df:1a:60:1f:4d:69:59:23:73:39:11:e2:74:44:
                    ca:24:d4:af:4d:13:db:79:4a:8a:6c:8f:51:90:83:
                    ff:25:9d:34:f1:63:99:6a:56:7e:c5:3d:42:1e:bd:
                    e9:e3:ed:19:5d:ef:f0:a9:93:eb:91:b5:49:2a:a1:
                    ac:5c:4f:a5:ac:c0:2b:e8:70:eb:b9:eb:3f:7f:44:
                    61:26:c8:23:b9:77:1a:2e:60:c0:4d:7f:99:38:56:
                    c2:1f:88:e5:71:b0:f5:43:8e:46:d4:81:d1:82:27:
                    17:0c:cc:b2:bf:a9:46:f2:43:97:97:cb:b4:2c:6d:
                    82:dc:38:5c:ba:b1:c9:61:5d:13:f7:60:3f:49:2f:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E8:42:C1:53:FE:1B:D8:46:A8:1F:90:F5:C2:FB:BF:9E:06:77:43
            X509v3 Authority Key Identifier:
                keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:9c:7d:f2:03:c9:aa:6e:46:c8:98:0c:f4:c2:42:52:d4:
         b5:7f:ad:75:d8:aa:53:ed:b7:3e:d9:e8:f8:3b:bf:e2:46:8b:
         0b:66:ce:a9:b4:de:3a:2f:bb:44:38:1d:62:0c:fc:a0:ed:bc:
         aa:6e:f1:ef:e7:74:53:e2:9b:dc:d2:5b:f1:fe:e8:fa:9d:09:
         32:c4:fd:bc:5e:a7:7c:f0:b3:17:ae:7f:ba:f6:30:0b:36:08:
         c3:b9:ef:2a:92:62:55:78:23:52:67:74:c0:bf:75:42:51:6f:
         53:d8:bb:c2:65:7d:9e:ad:fd:68:4b:5c:77:96:78:1c:45:a6:
         30:27:29:60:e2:01:01:a0:e8:65:8a:7f:f4:60:d0:d9:f0:bb:
         54:67:7b:99:6f:44:82:35:5d:f1:1b:f1:35:39:2c:bd:cc:27:
         c5:3a:c5:c1:2c:d0:d5:29:07:8c:2a:15:29:cc:22:13:23:8e:
         62:30:5b:22:4f:a6:55:69:96:28:f4:ef:23:49:66:ea:1d:9e:
         a8:ce:e6:cd:5a:02:c2:e7:41:a0:b4:12:c0:5b:db:70:95:a1:
         67:fe:9d:bc:ea:5d:2f:51:7d:c4:fd:f5:35:80:0d:24:4d:c2:
         84:bc:02:54:6b:fa:9b:4c:08:34:20:f4:5a:d8:a6:92:b5:87:
         9d:2b:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:16:11 2024 by rpki-client on console-fra.rpki-client.org