Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
File:                     Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json)
Hash identifier:          Aq8C16fCN7nmmdcWogE3j+U6PfmExnx0nn7liTIH/c4=
Subject key identifier:   17:39:A1:23:46:ED:CE:7D:7B:3F:E1:7C:C1:42:3D:89:77:1D:F2:72
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Certificate issuer:       /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial:       018F874B03F14A84E428645FD6EACEB43026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
Manifest number:          03E0
Signing time:             Fri 17 May 2024 16:03:11 +0000
Manifest this update:     Fri 17 May 2024 16:03:11 +0000
Manifest next update:     Sat 18 May 2024 16:03:11 +0000
Files and hashes:         1: G2ZRrWWdD_vRRf4MdjkU9q46Qh4.roa (hash: t/MrRS8tEgfvvrtziPd89bjV11BN8vLnUdI+y9UDuKk=)
                          2: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: K0KOe6rv5Nyno/lmOtGuPrENy7UMgzYS4BS6Zhk10Es=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:03:f1:4a:84:e4:28:64:5f:d6:ea:ce:b4:30:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
        Validity
            Not Before: May 17 16:03:11 2024 GMT
            Not After : May 18 16:03:11 2024 GMT
        Subject: CN=1739a12346edce7d7b3fe17cc1423d89771df272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:50:24:d2:e8:02:3e:1b:58:57:f9:a1:1b:
                    de:2e:43:64:aa:cd:89:37:56:cd:c5:b3:33:4d:17:
                    dc:13:aa:20:e0:2c:65:ce:6c:c9:98:d9:f1:45:71:
                    e4:26:7b:37:44:e8:8a:a7:a9:9e:01:0f:31:50:4b:
                    24:e0:2d:f0:f9:5e:4f:eb:41:60:84:ef:16:d8:52:
                    6a:88:d0:9c:b2:d6:d9:20:e9:38:c2:63:97:5b:91:
                    6b:84:9a:f6:66:25:8f:2d:7f:85:3e:dd:11:d8:59:
                    aa:5b:34:9e:97:96:28:c1:0f:c6:4f:d0:a3:97:ae:
                    0e:58:e4:0a:9e:38:22:4e:7f:d5:fe:0d:11:a8:48:
                    e5:ee:60:44:ac:0b:2f:bd:24:22:86:9c:7e:80:b3:
                    89:47:c7:a5:38:c7:eb:d6:c1:2c:98:b2:31:78:7a:
                    51:47:35:67:8a:79:80:68:94:97:e6:d4:49:7c:72:
                    17:10:ff:f1:9b:f2:49:5a:7e:da:7f:b1:f6:83:88:
                    85:b3:fa:28:52:92:1b:58:bd:37:99:62:dd:b3:a5:
                    a3:e0:4e:d3:38:15:43:85:eb:8e:07:d6:7b:09:07:
                    12:41:83:4c:7f:3a:a1:cf:c9:71:9b:bf:b0:e8:01:
                    2b:48:a9:7a:8b:b6:33:dd:96:75:5c:ea:c0:4c:48:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:A1:23:46:ED:CE:7D:7B:3F:E1:7C:C1:42:3D:89:77:1D:F2:72
            X509v3 Authority Key Identifier:
                keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7d:8d:c6:bd:68:d9:38:bf:e3:f8:69:f7:e5:fe:16:2d:86:
         38:60:33:99:61:f9:3d:2f:62:ea:dd:6c:62:3d:0f:eb:49:b4:
         f8:fc:88:0a:fa:88:40:61:ab:57:27:89:c6:61:78:3d:49:e9:
         4c:0e:4a:c0:48:a2:e5:5e:bb:a2:b8:10:87:15:a4:21:67:4e:
         33:a1:0a:46:a7:c1:3d:eb:7f:cf:a1:94:5c:b9:c4:d1:65:fb:
         16:05:09:5d:ca:39:2c:31:96:6e:08:a6:6f:84:73:24:64:13:
         06:ba:2c:5c:ec:25:b3:3a:67:a5:24:d4:54:68:27:08:3e:55:
         a4:f9:3d:6a:b9:42:bd:f4:97:42:66:22:ae:de:47:78:b1:1f:
         98:4a:ab:af:4b:d2:91:ed:e0:8b:6d:b7:3d:2a:3b:61:e8:c2:
         bd:7f:8a:f5:29:3a:ba:aa:b5:51:60:3f:f2:0a:30:f0:88:d1:
         91:04:36:69:4f:15:61:67:34:ce:dc:fd:be:0a:d9:0b:b6:f4:
         eb:e9:30:41:f3:c3:40:5f:b8:a6:50:31:aa:5d:2b:47:17:54:
         ed:46:d0:63:79:11:32:50:e4:d0:94:b3:d2:19:63:88:f3:78:
         30:03:a8:27:02:ab:f8:d0:6e:f5:93:02:b6:5a:c8:e9:90:70:
         32:89:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:09 2024 by rpki-client on console-ams.rpki-client.org