Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File:                     Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier:          nxQ/YnWkcZnzSyI3v6E0e0zuJulDTLg7TthckuTMqEk=
Subject key identifier:   0D:A0:DA:2C:EE:74:E7:52:8B:D7:0F:1B:E3:E3:C3:4B:80:E8:86:CD
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer:       /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial:       018F885AD7306AAC3CDA3E4F74F06646C67F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number:          0E2D
Signing time:             Fri 17 May 2024 21:00:05 +0000
Manifest this update:     Fri 17 May 2024 21:00:05 +0000
Manifest next update:     Sat 18 May 2024 21:00:05 +0000
Files and hashes:         1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: 7UQQTk+2nHwEkYi9S/XKZIp2p8YDLsn3/OKyiZ1Ltxg=)
                          2: acfBZ_3u_EB1ThVk3XcJQ0BSBGc.roa (hash: AyBGe4pkyUwL3nFQvBhJBl2V87IF09pwdNMGGrRlOOc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:d7:30:6a:ac:3c:da:3e:4f:74:f0:66:46:c6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
        Validity
            Not Before: May 17 21:00:05 2024 GMT
            Not After : May 18 21:00:05 2024 GMT
        Subject: CN=0da0da2cee74e7528bd70f1be3e3c34b80e886cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:b6:e4:1b:5c:dd:57:b9:75:ba:6a:6b:43:
                    63:6d:ad:4f:42:1a:26:7e:84:f6:ed:c6:85:eb:d5:
                    c0:bd:47:4c:5f:07:86:b1:7d:3c:ff:de:3d:d6:05:
                    2f:18:2d:62:6c:23:87:e1:35:f9:64:00:62:02:0c:
                    80:49:ca:cf:05:2d:f9:01:f1:6a:21:70:1d:41:39:
                    66:b5:06:b6:a1:34:0e:88:86:c8:bc:ee:c6:04:73:
                    d2:3b:1b:99:64:a9:a6:a8:70:a3:5f:1e:d8:b6:c8:
                    6d:98:a0:92:58:da:d7:fe:65:fa:cf:a5:83:7b:18:
                    c4:0d:d8:8a:e4:74:b2:96:0a:0a:9e:e0:0f:f2:4d:
                    da:0a:16:2e:e5:08:58:36:54:dc:b0:fb:69:f7:9a:
                    e1:23:3f:47:22:20:57:00:79:5f:94:bd:31:10:f3:
                    a2:79:64:9b:b7:7e:a3:1b:0a:35:fc:6e:93:96:ac:
                    3c:ca:71:cd:fe:e9:8d:54:75:19:40:fe:6a:fd:0a:
                    15:e8:b1:dd:b6:8b:94:c4:3f:e1:38:b9:8a:99:36:
                    8d:9c:76:e5:ce:c7:13:c5:b1:80:c6:06:b3:98:dc:
                    1c:29:77:a5:68:20:31:96:1d:c9:c3:d2:33:3f:e2:
                    9f:22:89:68:a1:22:15:53:9e:e9:2c:6e:25:e3:21:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A0:DA:2C:EE:74:E7:52:8B:D7:0F:1B:E3:E3:C3:4B:80:E8:86:CD
            X509v3 Authority Key Identifier:
                keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b7:1b:85:3d:41:23:e4:a9:33:2b:b1:4c:c2:c6:f7:39:65:
         a8:6b:37:0c:85:54:63:85:f3:25:c1:ea:3d:84:25:25:ba:0c:
         76:c8:eb:f6:16:bd:c3:2b:73:69:e3:8d:ad:78:25:e8:89:47:
         63:03:c6:2e:ee:f1:02:a4:08:1b:55:14:b5:dc:78:dd:42:89:
         5f:c3:2e:ba:11:26:28:ce:18:eb:52:e5:b8:da:da:7e:f9:6e:
         81:a6:b8:af:9a:15:01:03:1c:72:b1:2b:a3:56:37:b4:28:8c:
         b4:c9:60:e1:7c:51:b2:b5:ac:84:31:bf:63:19:34:35:37:78:
         01:87:dd:a3:e6:8d:b0:41:d2:38:f5:07:1d:ce:8d:01:90:12:
         eb:bd:0a:7f:a4:f9:96:c2:11:88:84:ea:e2:45:1a:cd:f9:fd:
         c5:05:b9:5c:0c:fb:50:7d:25:7f:69:87:4e:e3:10:35:9c:3d:
         55:3d:9f:70:ea:74:58:64:a1:13:4c:01:59:fe:a1:59:20:76:
         59:39:93:7a:b9:9d:6e:d6:53:0f:a7:ef:32:6e:a7:e8:bf:f1:
         8e:23:12:3f:9a:de:fe:10:78:19:48:6e:78:79:9d:6b:da:18:
         bf:a0:41:f8:9e:90:99:57:99:df:f0:44:69:bd:3e:36:2c:46:
         75:9c:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:15:04 2024 by rpki-client on console-fra.rpki-client.org