Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File:                     tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier:          M/AVSLT/fIsAzUP0RcO6SOtk9hJXyaKZplK3mnfggYM=
Subject key identifier:   39:7E:45:E5:89:A8:96:51:31:38:93:B7:D1:EE:FF:76:BB:43:A2:4B
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer:       /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial:       018F8824834AFC1BC10A12BD25257F5797A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number:          0A16
Signing time:             Fri 17 May 2024 20:00:45 +0000
Manifest this update:     Fri 17 May 2024 20:00:45 +0000
Manifest next update:     Sat 18 May 2024 20:00:45 +0000
Files and hashes:         1: makasdgj9joi2Qb4esFFl2b7XiE.roa (hash: lKFNU4r/QNGeXadZMPZkBFgP7YXjXxGi+m1t7CHK2IE=)
                          2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: vljBJ4KkxuuF+BTEewfjKVArkgv9uDhiTJPI2RoUwWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:83:4a:fc:1b:c1:0a:12:bd:25:25:7f:57:97:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
        Validity
            Not Before: May 17 20:00:45 2024 GMT
            Not After : May 18 20:00:45 2024 GMT
        Subject: CN=397e45e589a89651313893b7d1eeff76bb43a24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:1e:98:37:ff:01:29:5c:fe:d0:c8:3e:b1:
                    8f:97:ae:24:e9:68:eb:3c:f9:e2:19:aa:1f:e1:a9:
                    10:4e:09:75:e8:1e:21:dd:f1:28:e6:a5:ca:4d:9c:
                    bd:03:72:2a:c8:3d:db:64:be:fc:1a:c4:d8:45:44:
                    a4:44:7a:9d:0d:2e:a9:eb:25:85:d1:67:71:55:fe:
                    9e:53:08:48:56:b7:0d:ff:87:54:f8:32:40:fb:69:
                    ed:94:f2:67:77:28:2c:75:88:07:c0:97:cb:d9:9d:
                    90:da:ff:e9:b5:8e:d7:6f:ff:ee:47:ee:80:7e:a5:
                    d6:de:dc:f9:01:fc:e0:3f:80:fb:7e:e4:45:3a:84:
                    6c:82:3d:d6:c0:08:b7:0c:99:0d:a3:04:fe:e8:72:
                    5d:56:89:89:b5:5b:86:4c:96:3a:1b:12:75:f2:db:
                    a6:51:80:bd:f5:61:28:75:e4:ab:92:d7:14:e2:49:
                    c8:bf:af:5c:4f:c0:85:1a:e2:af:58:9f:11:e4:7c:
                    56:f5:95:91:e5:ec:33:10:3a:2e:8e:e8:41:97:5a:
                    42:14:c2:ba:cf:35:1b:1b:3b:e2:0f:7c:33:22:b4:
                    82:63:62:8f:8e:03:37:77:79:8d:48:15:f1:8f:6d:
                    19:bd:11:6c:24:14:94:d5:ce:bd:a6:58:87:03:fa:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7E:45:E5:89:A8:96:51:31:38:93:B7:D1:EE:FF:76:BB:43:A2:4B
            X509v3 Authority Key Identifier:
                keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a0:3c:d3:46:e8:2b:8d:b3:29:9c:ea:46:2c:9c:84:11:50:
         88:e6:d0:86:71:42:4a:1b:cd:2a:7d:07:24:f2:c9:6f:af:29:
         7c:7e:13:b5:76:30:79:1a:dc:39:36:7d:0f:46:ae:e3:1e:87:
         f5:d9:c8:02:c5:6d:d7:02:9c:6b:53:65:b3:fa:89:a6:b4:1f:
         8b:5a:b6:f8:cc:76:6e:1f:e6:d8:3f:6b:07:5e:16:bb:7d:08:
         8c:08:c2:31:1f:13:9d:de:aa:18:be:4a:9b:93:1a:e8:09:d1:
         fd:1b:13:15:d1:63:6c:84:82:3a:f1:9e:a3:98:e9:ae:af:00:
         93:09:4e:8d:a9:e3:90:9f:4b:b8:ce:95:f7:96:64:be:5c:e7:
         d7:66:d6:68:ac:ec:39:ff:45:26:88:30:2d:fd:c4:2d:38:f4:
         1d:d0:0c:ee:55:8b:bb:a8:42:cf:0e:cd:eb:4c:c6:42:e0:0d:
         25:0f:e0:d8:f7:b1:0f:41:d4:09:88:eb:63:16:cb:82:bd:95:
         70:70:c3:e4:70:d6:fe:34:ac:83:df:0a:4a:0a:38:43:33:fd:
         c2:ef:3a:d2:0c:f1:17:77:9f:7e:63:a1:07:af:e5:fa:a7:c5:
         ae:30:3a:e8:ac:6f:bd:8b:7f:64:c0:19:d2:84:d6:ac:98:f2:
         b3:fe:8c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:35 2024 by rpki-client on console-fra.rpki-client.org