Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File:                     xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier:          MkjY4tnjveGapBz5wybeGlZJS/2weY/y1/9Q5gqPMEI=
Subject key identifier:   65:48:F8:92:61:C7:22:45:67:43:CB:1B:1D:7A:EF:DB:1F:83:EC:BA
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer:       /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial:       018F87B6C1CFF3BD34684337DDC4BF2CFB66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number:          CD
Signing time:             Fri 17 May 2024 18:00:52 +0000
Manifest this update:     Fri 17 May 2024 18:00:52 +0000
Manifest next update:     Sat 18 May 2024 18:00:52 +0000
Files and hashes:         1: r9PoAttJILdtXqqEe0Wf0WVhGuI.roa (hash: 3VznGGkcARDV5I430nlBBcSIRWkxcOijThoWBd/ByiE=)
                          2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: YWLhXsJE02U9uupEFsnzGGOQEuJ76AIw+GtLHPP1Dag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c1:cf:f3:bd:34:68:43:37:dd:c4:bf:2c:fb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
        Validity
            Not Before: May 17 18:00:52 2024 GMT
            Not After : May 18 18:00:52 2024 GMT
        Subject: CN=6548f89261c722456743cb1b1d7aefdb1f83ecba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:aa:a4:fb:89:ed:40:bd:28:92:b2:11:01:
                    8b:2b:29:66:62:ce:d7:c9:31:4c:1d:82:15:6b:6d:
                    1c:14:3a:12:6e:c7:ed:3f:8f:91:3c:d8:c5:b3:e7:
                    bd:84:05:74:86:dd:98:f9:98:2b:34:47:19:f5:a0:
                    7a:94:f9:39:ad:3d:25:be:e2:1b:a0:c6:ce:81:36:
                    22:e0:1c:bf:2e:8f:ab:7c:39:bd:8c:30:f3:94:42:
                    f6:21:4e:c9:1a:44:53:d0:8a:81:89:4d:8d:3c:f9:
                    b5:52:a2:c3:da:24:a6:f4:3d:6c:e5:cf:7f:f0:29:
                    72:61:34:4e:bb:81:1f:87:a0:16:76:c0:81:ee:7d:
                    ce:19:fc:ef:d3:7c:2e:b9:12:40:72:d7:a5:8c:bf:
                    2c:88:8c:5e:d1:d4:d3:3e:b9:46:7e:75:f4:77:ea:
                    c4:40:94:22:0e:bf:ea:25:7a:55:d7:79:dc:23:df:
                    a4:90:7a:b2:5f:05:8a:aa:da:68:4f:39:c3:c0:7c:
                    c5:a0:33:cb:6b:ab:89:b2:95:33:9c:a5:fb:4a:4c:
                    ea:9b:d4:6b:7f:24:cd:2b:84:15:15:93:da:c0:5e:
                    3c:78:ff:6a:c9:55:49:29:37:25:83:7c:ef:0e:06:
                    fd:13:2f:07:e8:54:f9:28:bc:4b:dc:fc:c2:6d:8d:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:48:F8:92:61:C7:22:45:67:43:CB:1B:1D:7A:EF:DB:1F:83:EC:BA
            X509v3 Authority Key Identifier:
                keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:be:ce:17:14:3f:79:b6:ed:ac:69:c4:7d:ec:67:73:2e:b3:
         0e:8b:b4:79:7b:aa:31:39:da:7d:32:68:dd:f1:04:98:53:84:
         32:16:70:1e:b9:58:c5:81:d2:24:6a:76:60:3f:1b:a2:27:25:
         85:97:82:85:e9:07:69:67:c3:a8:7c:f9:fc:b3:6b:6d:fd:2e:
         a9:80:a9:a3:81:91:d2:b9:4a:3b:c3:72:48:52:d6:ab:1f:e0:
         97:36:92:11:7d:b1:4c:5b:36:c7:48:61:7a:e1:aa:1e:d3:48:
         75:7a:3d:ba:95:f2:ca:2e:0e:d8:d1:b9:4e:d6:b5:7e:ce:a9:
         f1:dd:8a:09:d1:a7:cd:cb:3b:a7:4a:1c:14:90:8d:dd:c4:0b:
         ab:44:6b:0f:1b:fa:51:07:be:85:58:14:18:1c:c4:0d:38:cc:
         f8:50:e3:60:5e:2f:f2:a5:53:ee:22:35:2f:b4:a4:9d:d2:41:
         72:71:58:bc:e3:a2:9b:d9:ff:93:b0:57:fc:60:33:f8:4e:8e:
         69:fe:e0:89:1c:9b:e2:63:6b:96:19:07:2a:c1:cf:47:4a:3a:
         72:ff:00:7c:12:11:02:68:cf:3a:4c:15:0a:81:a5:8d:e2:3e:
         df:a3:55:64:ef:0a:e3:6c:f7:9f:1d:c6:c6:a5:61:43:20:33:
         28:62:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:26 2024 by rpki-client on console-fra.rpki-client.org