Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File:                     mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier:          4R5TkKiFltliY55lkmJWB+UtdtDE5RYMzzWUviSZHQM=
Subject key identifier:   F2:0C:7F:C5:82:81:4C:8F:F3:DA:B5:CD:EB:BF:CD:CD:F3:C3:31:60
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer:       /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial:       018F841094B982C8E0D5D83C7194C4AFC342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number:          02D3
Signing time:             Fri 17 May 2024 01:00:30 +0000
Manifest this update:     Fri 17 May 2024 01:00:30 +0000
Manifest next update:     Sat 18 May 2024 01:00:30 +0000
Files and hashes:         1: 1QYdW1CUi3lP5JgZnnCz5Vw4Y6A.roa (hash: pGKES0Uz6KNO8UHtbUeKIhZvH7HwIvArEwYhURIS8NI=)
                          2: LmQ5QFvr12louAOsisdeK0Wn8X8.roa (hash: 0YvaypcJiCqC8Pr2sLafMCRqx1mRweLEsMkJOI/U6N4=)
                          3: MmuQlKUnQwLbZbYCrSiguroi58A.roa (hash: EtsX9ZXlhvaDxLhkSFcLbf0KAVpTDmjaRIoEmPeQEnE=)
                          4: bsRLm6ishuGZZLj5rwlAxXyDNwE.roa (hash: F/a3bpJIbymN+L760hZ7eBsLKowBc4bgezkZlmHGkWo=)
                          5: jDFCxnkLzS4FMFKisncoKIYKliw.roa (hash: hs9Ep3SwMRgsMB3vq1Cmd1Wk8EAzo0RFuiqoaA6PdBU=)
                          6: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: oZdVz4jedUcEX35zz01pRTbrMYWmM8Tpe2PSZN9M7tM=)
                          7: o25xEG7aL65n1z8XBE99M3Bf-_g.roa (hash: ohNGWjjtm1xdjaCPM1oQwUFOJ4eJ49JtocASO0nJkfM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:94:b9:82:c8:e0:d5:d8:3c:71:94:c4:af:c3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
        Validity
            Not Before: May 17 01:00:30 2024 GMT
            Not After : May 18 01:00:30 2024 GMT
        Subject: CN=f20c7fc582814c8ff3dab5cdebbfcdcdf3c33160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:1e:18:5b:c6:8d:49:69:09:92:be:39:2c:
                    db:eb:be:e6:9d:14:f5:2d:58:74:57:2d:6f:77:93:
                    fa:ec:50:6a:98:ac:03:7e:f1:3c:73:96:84:43:55:
                    d2:5d:c5:55:7a:2a:3f:f3:ac:c2:72:e0:d4:b5:ab:
                    27:9e:bf:e0:bd:a2:a1:de:f2:de:d0:f0:e3:e2:b8:
                    b4:0f:14:bb:e1:90:31:50:3d:e6:68:16:4e:9c:dd:
                    67:f1:76:f6:d2:c6:16:2b:5a:84:78:cb:43:b5:2a:
                    2b:e0:4e:4d:87:fd:d6:8b:e1:a9:fa:98:a7:eb:f0:
                    1d:17:12:2f:18:2a:ae:e6:1e:0c:b1:49:16:44:96:
                    0e:96:d7:84:f3:81:db:82:75:4d:f4:00:d9:a0:59:
                    05:ae:7d:a5:87:41:fa:01:71:c2:53:cf:e4:32:88:
                    9c:bc:cd:c5:6a:a1:c6:3b:13:3e:ac:09:aa:ed:29:
                    cd:1b:c9:42:1b:be:b4:ea:11:84:4b:a0:15:e9:12:
                    c4:8b:82:20:ec:2a:07:59:2b:59:92:d2:5f:8c:29:
                    6c:d3:15:eb:90:37:81:42:a6:e9:62:e3:34:eb:f2:
                    41:94:5e:90:6a:c5:90:e7:52:de:fa:0f:dc:dc:fc:
                    e1:ff:d9:7c:99:90:12:a1:7d:b9:e8:15:9b:32:7b:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0C:7F:C5:82:81:4C:8F:F3:DA:B5:CD:EB:BF:CD:CD:F3:C3:31:60
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:32:82:c7:54:89:35:3a:3c:4c:8f:30:95:98:7d:a3:b7:25:
         fe:11:2d:c3:b8:e4:de:f9:2d:b0:a1:62:62:0f:45:51:f0:9c:
         cf:8a:81:08:77:f5:7e:d5:78:a7:c3:5a:be:b4:66:c7:17:3d:
         52:4f:9c:cd:b1:0f:45:b0:77:52:ba:93:c3:1e:0a:5d:36:e3:
         20:c4:da:97:c2:8c:ed:42:08:a0:1a:e9:70:1d:60:b7:ed:bc:
         29:4d:98:f8:41:a8:a5:eb:91:1b:15:e6:38:c3:ca:dd:b6:df:
         fd:fa:4d:da:70:79:63:09:cc:28:ca:5e:69:30:71:12:90:ad:
         53:55:16:d3:a5:c6:7d:02:e8:a4:d8:1c:37:e6:46:05:88:1d:
         a2:ae:85:33:86:90:e6:97:ee:c3:3d:de:b9:83:1b:86:9a:bc:
         22:3f:e3:78:43:8c:0b:a3:b7:8f:32:1b:c4:e0:47:4a:6c:f2:
         21:6c:ab:74:09:07:21:62:da:7b:dc:2d:0a:8b:2d:38:a1:23:
         f4:ef:14:8b:c7:ef:1c:d0:17:d7:15:46:e2:08:82:5a:93:c3:
         3c:3f:06:c2:e7:34:14:6b:35:ef:90:1f:bb:16:31:20:0a:43:
         ce:d1:45:33:41:99:0a:2d:a8:38:a5:cc:d5:4c:9c:a5:30:8a:
         f9:75:3a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:54:25 2024 by rpki-client on console-fra.rpki-client.org