Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
File:                     dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft (raw, json)
Hash identifier:          fbiHrcITUn5648le3NkOXyAmf8h6OePfDwaC4gRjeM4=
Subject key identifier:   6A:58:00:D8:59:F1:0B:5D:EF:2B:87:E8:EC:21:33:D6:E2:00:9B:34
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Certificate issuer:       /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial:       018F87493AF7EBD1B416199C9AE40F3D2E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
Manifest number:          0E12
Signing time:             Fri 17 May 2024 16:01:14 +0000
Manifest this update:     Fri 17 May 2024 16:01:14 +0000
Manifest next update:     Sat 18 May 2024 16:01:14 +0000
Files and hashes:         1: _yUWqSmfb8BN0vfxiyfhsRK-dQE.roa (hash: dysHMglVOwPXc0pnyjWd2FyVEEK4KPnUBtnZf3a9iZk=)
                          2: dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl (hash: 0RyvE1lzAvdxgFVGqAN+mHt5OMVjsgFac0RhRCNpSuQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3a:f7:eb:d1:b4:16:19:9c:9a:e4:0f:3d:2e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
        Validity
            Not Before: May 17 16:01:14 2024 GMT
            Not After : May 18 16:01:14 2024 GMT
        Subject: CN=6a5800d859f10b5def2b87e8ec2133d6e2009b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:46:0d:ef:31:10:d3:f7:e0:61:c3:25:1a:
                    96:98:a5:17:9d:51:11:3a:7e:c9:ae:86:14:98:3e:
                    60:60:d9:d0:8f:e9:bb:81:1e:05:72:dc:55:ee:45:
                    fa:23:a9:aa:52:d1:7c:29:ac:de:c8:b9:38:3e:65:
                    11:29:73:ee:f3:23:30:ee:11:85:e7:fb:e2:26:8b:
                    d3:63:2d:81:87:ca:78:c1:15:db:be:ca:09:32:8e:
                    f9:c2:3f:ff:af:01:cd:65:70:51:1f:c0:68:f5:84:
                    ac:a4:dc:58:6e:da:42:40:49:7f:47:b6:82:ee:36:
                    93:47:8f:30:c4:7e:68:38:12:d3:72:62:ff:f9:f6:
                    87:28:b8:be:a3:ae:d3:0f:d0:83:08:9a:9d:16:5f:
                    9d:87:24:12:6e:dd:fe:4b:3d:71:b0:94:2d:e7:83:
                    24:44:e5:22:ce:d6:1f:e3:2c:39:01:8c:5e:a4:53:
                    be:02:72:03:99:9d:1b:97:41:9a:04:82:e5:82:4e:
                    b7:16:4d:d7:94:8c:f8:d4:8e:91:d3:87:a6:81:2a:
                    cd:16:b4:e4:d1:70:b1:55:56:ff:b9:27:5c:80:b4:
                    95:08:8f:9a:2c:d0:5c:08:a1:1c:46:18:81:ca:70:
                    75:55:03:32:84:07:88:52:1e:fc:f9:3d:5a:d4:03:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:58:00:D8:59:F1:0B:5D:EF:2B:87:E8:EC:21:33:D6:E2:00:9B:34
            X509v3 Authority Key Identifier:
                keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:63:40:49:f4:e1:48:33:c6:b9:e9:f8:1a:ba:2b:ae:66:b3:
         19:12:58:01:29:3a:e6:5b:04:4c:2c:f4:2a:15:ec:57:57:74:
         87:70:dd:ce:a4:53:12:0b:f7:52:3a:1f:98:d6:7e:8c:2d:da:
         30:f9:4b:dd:bd:40:6d:69:ad:bb:12:9e:96:4c:2a:16:cc:3d:
         4e:3e:c9:9b:7f:ab:a2:b6:c1:8d:61:57:4e:1e:34:19:30:b5:
         67:a6:76:7b:a4:dd:41:6c:38:3d:ce:b1:6e:7c:59:69:19:0a:
         80:d2:09:ce:ad:3e:55:da:1c:df:e6:ef:08:5a:5c:71:f6:bd:
         2d:57:35:2f:16:a3:da:b6:4e:5c:0f:03:87:7b:21:43:d6:5f:
         2b:31:2b:08:64:88:14:92:ba:f0:9e:fe:17:11:e4:3d:e9:28:
         e6:a7:26:a7:3d:dd:16:1c:c7:77:b5:ad:e4:ef:0b:ba:1e:23:
         43:05:5b:e4:4e:ae:82:66:40:f5:f8:f7:7d:f9:67:b5:83:fc:
         8d:d0:78:13:71:f5:7f:47:a0:78:fb:11:ef:7d:ef:20:04:86:
         1b:6b:22:87:ac:cf:cf:25:c5:7b:4b:fe:6c:31:b8:78:74:12:
         29:b5:50:43:65:db:d1:13:14:2f:46:02:7c:c9:b2:0f:2b:67:
         d7:23:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:23 2024 by rpki-client on console-fra.rpki-client.org