Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File:                     x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier:          HmjyBSKB++IonsR/W8xa+hayW+CICTWNh3tmxVMmMYM=
Subject key identifier:   76:52:8D:8E:69:CC:BF:41:B6:96:B6:8D:03:0C:25:C3:91:5A:15:D6
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer:       /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial:       018F8748F21CD7EA1C8DB215F15B7AD94DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number:          0C03
Signing time:             Fri 17 May 2024 16:00:55 +0000
Manifest this update:     Fri 17 May 2024 16:00:55 +0000
Manifest next update:     Sat 18 May 2024 16:00:55 +0000
Files and hashes:         1: enM9vBn1hwi6cEgBjWqbnart_q8.roa (hash: osfJdcDDKc/AxBSylJokgYZkRXRcwQbkKkShCmg6X3Q=)
                          2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: Rx99GkUr8PBXWbO9i45R6Lttqc0UQphRANY4JUUrrLE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:f2:1c:d7:ea:1c:8d:b2:15:f1:5b:7a:d9:4d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
        Validity
            Not Before: May 17 16:00:55 2024 GMT
            Not After : May 18 16:00:55 2024 GMT
        Subject: CN=76528d8e69ccbf41b696b68d030c25c3915a15d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:de:10:78:ba:77:77:f8:e4:4e:35:14:46:
                    53:d9:86:77:66:da:fa:5d:58:47:a4:88:78:eb:79:
                    05:f0:2e:3a:bc:fe:d2:57:2f:d4:17:43:04:cb:3a:
                    f4:b1:e0:99:5d:27:a3:e0:01:ea:f4:d0:05:7c:ab:
                    e1:1f:0e:98:8f:c7:12:62:38:bd:9b:48:d1:97:8c:
                    e0:45:ee:93:59:fc:01:52:62:41:ad:ac:b7:86:7f:
                    46:9e:3d:90:5d:c2:42:b4:17:04:d0:f4:e5:a3:a7:
                    15:7c:47:17:93:1b:9f:b5:97:78:2a:9a:72:d0:38:
                    b6:98:40:5c:dc:f3:1e:5a:b5:5d:40:dc:d4:3a:47:
                    74:d9:bf:44:4a:b0:52:1d:32:be:2c:b5:78:f0:1c:
                    d0:c6:da:9e:1c:54:4f:30:7d:9f:23:7c:75:e4:c3:
                    96:52:cb:7f:8d:82:c4:a9:80:9e:a5:46:3f:c9:a1:
                    18:19:53:37:26:7a:44:bd:b5:2d:12:6d:cc:ea:77:
                    f6:3f:69:c7:0c:35:ca:21:89:37:14:44:27:ab:d9:
                    7e:59:88:2c:9b:38:4b:14:1f:68:2e:c8:a4:9d:30:
                    18:9b:e6:05:b8:31:60:b4:3e:c2:d4:24:83:e8:12:
                    fa:c4:65:54:39:34:fa:bf:7b:bc:d1:cc:8e:6a:c6:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:52:8D:8E:69:CC:BF:41:B6:96:B6:8D:03:0C:25:C3:91:5A:15:D6
            X509v3 Authority Key Identifier:
                keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e6:85:b1:24:08:97:27:49:ed:c7:c8:50:41:8a:44:83:de:
         d7:93:10:53:33:49:04:a8:8b:ef:82:cf:19:8c:0b:85:df:00:
         e1:df:e1:3d:25:bf:64:d8:91:41:1b:bc:b8:5e:b0:29:d8:56:
         dd:26:c5:21:8d:4c:c3:0d:d1:4c:8f:3a:b4:2b:0f:fc:c9:b0:
         6c:ea:6d:14:9c:1f:7f:05:c5:0e:62:97:54:e9:af:f1:9a:51:
         9c:19:6b:91:e0:80:3d:8a:fe:85:06:51:81:80:43:d6:2d:b8:
         8f:0f:41:f8:49:a6:23:84:9f:0a:5b:22:f5:f2:d7:73:d8:e8:
         28:71:c3:22:97:9d:7b:46:e6:24:d8:70:4c:61:bd:af:10:95:
         60:f9:f8:40:4a:1b:a7:dd:0f:f2:52:d2:59:18:39:09:a4:73:
         5f:86:4f:39:34:ea:1f:ba:b3:bc:a2:20:67:63:fa:22:d5:db:
         6b:9d:08:ee:e2:21:d6:66:6e:71:c7:b7:16:7a:1f:ef:7a:1b:
         32:18:34:55:d5:d5:7f:69:28:ec:9c:29:8e:00:06:0c:aa:2c:
         c3:38:ea:4a:8d:1e:3f:3f:63:b3:3c:a2:52:b1:6f:e2:c3:d7:
         61:95:7e:79:79:c8:1b:1a:39:94:52:e7:26:95:03:b0:00:5f:
         ad:2a:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:33 2024 by rpki-client on console-ams.rpki-client.org