Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
File:                     cW2obFNsYhV0g7YzwYU2K6f30fI.mft (raw, json)
Hash identifier:          kW2Bq/FJKuilRv6dumt57KHTUQCem044BGgfMHdQwN0=
Subject key identifier:   0F:57:39:B3:E2:45:2E:0C:9B:20:AB:5B:7E:B2:CD:E1:AE:D0:5B:4F
Authority key identifier: 71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2
Certificate issuer:       /CN=716da86c536c62157483b633c185362ba7f7d1f2
Certificate serial:       018F97CE0CCA420C4B1D28210757FC6D82B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
Manifest number:          0570
Signing time:             Mon 20 May 2024 21:00:14 +0000
Manifest this update:     Mon 20 May 2024 21:00:14 +0000
Manifest next update:     Tue 21 May 2024 21:00:14 +0000
Files and hashes:         1: ZVYRbJJDnIOABqPsvgBAHqspQAc.roa (hash: Aq1yloicDjE/I9POAvmPmzTGnCe1EwgfH9FRhHqLVw4=)
                          2: cW2obFNsYhV0g7YzwYU2K6f30fI.crl (hash: pgrjecGPEKuXqlNG4mHI/gDfXyG4x0qTEdSSKCWzDYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:ce:0c:ca:42:0c:4b:1d:28:21:07:57:fc:6d:82:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716da86c536c62157483b633c185362ba7f7d1f2
        Validity
            Not Before: May 20 21:00:14 2024 GMT
            Not After : May 21 21:00:14 2024 GMT
        Subject: CN=0f5739b3e2452e0c9b20ab5b7eb2cde1aed05b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:c0:14:34:cf:75:51:bb:66:df:39:4b:72:
                    a8:e1:d6:a3:55:77:91:07:c7:9a:3f:c2:34:ca:27:
                    1b:93:d7:97:74:5a:fb:22:fa:af:2a:cc:6a:75:b7:
                    48:95:5f:de:2d:7a:07:6a:41:01:44:35:4f:2f:fc:
                    7f:15:ec:f8:aa:95:70:ec:fa:32:4a:76:37:c2:77:
                    64:ab:5c:08:58:1a:fd:15:b1:7d:ff:47:cb:8b:5d:
                    86:ea:12:2b:4e:9e:66:87:40:7f:73:f8:d6:90:2a:
                    19:29:33:7c:a5:8c:18:5c:e4:df:84:10:a1:c2:b5:
                    a3:06:30:fc:bf:ad:ed:2e:53:e1:76:d5:38:30:28:
                    81:64:c2:ad:5b:da:4d:a2:d0:b4:0b:1f:c5:84:a5:
                    fc:46:e3:e7:5d:b7:16:c9:bc:72:32:f3:7c:eb:7b:
                    34:4c:30:cf:11:d7:07:c8:0e:d5:cd:00:e9:b0:4d:
                    6a:5d:55:cd:9b:d5:81:55:09:bb:e1:82:d0:c1:7c:
                    e3:a4:0c:b9:90:e1:26:62:82:8b:7d:a5:05:d2:9a:
                    72:34:1c:9b:9f:5e:c9:1c:a1:9b:b3:57:07:06:b5:
                    a5:91:6a:c7:5b:51:7f:ab:7c:a2:b3:e3:32:33:23:
                    c5:81:f1:80:48:0c:79:cd:cc:20:b1:ce:6b:a0:72:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:57:39:B3:E2:45:2E:0C:9B:20:AB:5B:7E:B2:CD:E1:AE:D0:5B:4F
            X509v3 Authority Key Identifier:
                keyid:71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:95:27:7e:2e:70:ea:dc:a0:0e:df:d6:90:8b:6a:12:db:e5:
         21:bc:c0:42:5b:d8:6e:79:85:cd:b9:d5:0f:a1:9b:0f:7a:84:
         94:a6:4b:3a:ac:4c:6d:4a:11:87:48:dd:39:62:74:55:40:2a:
         3f:6f:77:2d:58:bf:32:65:cc:2a:be:67:dd:e1:60:dc:ee:37:
         6a:f3:b0:f8:04:bd:53:f4:4f:a4:54:c9:7a:40:66:1a:9c:68:
         29:2b:33:bb:c6:4e:0c:4c:02:6b:e4:c9:0d:37:6f:45:f8:ab:
         8b:5f:cf:f7:eb:06:95:0a:3f:0a:fc:51:7a:9e:e7:de:5f:d0:
         ef:ab:9e:46:03:d3:3c:80:6a:b7:c8:d4:05:6b:0e:70:fa:36:
         b1:1f:3d:c0:f1:c6:9c:1b:f5:93:a2:fe:5e:6f:a4:52:13:05:
         42:2c:e9:29:b4:6b:94:02:76:6a:a5:5c:37:59:9b:61:de:50:
         6e:58:69:d5:b1:9f:ef:e2:d9:07:9b:d6:81:8b:43:17:ee:67:
         e9:80:66:39:f5:b7:6f:d8:1d:15:bb:f7:0a:50:0f:3e:0e:08:
         82:4b:a1:48:65:6c:cf:2a:fd:4b:90:fd:79:f1:bd:31:48:36:
         1c:e7:22:5b:3f:05:32:bf:50:ad:22:ff:91:28:88:68:eb:67:
         57:3b:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:20:56 2024 by rpki-client on console-fra.rpki-client.org