Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File:                     pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier:          DvC9FIikDixmwyTlB7RqSxebk2fe6NzvUFwG/Gfjcus=
Subject key identifier:   2A:A8:C3:A0:DC:C8:3F:8B:C3:EC:73:5C:71:11:6B:E8:01:56:FB:90
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer:       /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial:       018F85FF35442CD6514E0ADB386D07DA30CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number:          04B8
Signing time:             Fri 17 May 2024 10:00:45 +0000
Manifest this update:     Fri 17 May 2024 10:00:45 +0000
Manifest next update:     Sat 18 May 2024 10:00:45 +0000
Files and hashes:         1: G8WextlxghXzAp58wjND-E0JJY0.roa (hash: L/CK5Wmz42ildCokJWhII6wbAj4JXQ0vi6bhp8y+vCs=)
                          2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: tt8hBkIjdTrP4IU3qTNHH97k0KNze8hwi/0Bs9mcSyE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 10:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:ff:35:44:2c:d6:51:4e:0a:db:38:6d:07:da:30:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
        Validity
            Not Before: May 17 10:00:45 2024 GMT
            Not After : May 18 10:00:45 2024 GMT
        Subject: CN=2aa8c3a0dcc83f8bc3ec735c71116be80156fb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:47:5a:11:8c:c2:20:44:03:39:89:ea:82:
                    32:8b:86:1c:8b:5d:d0:4f:c9:b6:45:ed:88:a9:18:
                    f6:4b:9c:d5:70:34:f5:4c:3f:68:d5:64:8f:00:6e:
                    31:3f:7b:4a:46:10:70:07:3b:e1:e1:62:3b:ba:29:
                    cf:b3:42:b3:bd:b7:c5:14:79:bc:e6:8e:7f:af:02:
                    81:5b:92:7f:0c:96:8f:1e:45:44:25:49:93:b9:08:
                    57:1f:3e:67:2a:78:54:6d:30:be:91:a0:c1:88:c2:
                    dc:c5:2f:f6:cb:ed:1f:49:ee:31:81:e0:68:c7:a3:
                    9c:c5:64:15:46:82:12:37:71:c6:c4:d5:d6:ff:7d:
                    ad:ba:ed:65:49:21:33:79:b5:c2:93:2f:55:1a:be:
                    a2:d6:d2:06:03:9b:6b:72:aa:a1:71:ca:7f:e6:49:
                    0e:4a:6b:1b:d2:3a:23:ee:8c:15:d9:5c:00:5c:db:
                    a7:22:52:2a:9b:c2:78:e9:18:4e:41:05:b5:f1:41:
                    c5:5d:ab:0f:dc:87:d7:2a:99:90:3c:cd:18:53:7f:
                    1e:f8:88:60:12:05:c1:c7:76:8c:f4:99:6c:9a:ba:
                    e8:4a:0f:79:e2:12:09:5a:9e:0b:91:2b:0c:e7:d4:
                    9e:ba:05:2f:a3:f9:16:6f:30:a6:bd:27:3b:cd:f2:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A8:C3:A0:DC:C8:3F:8B:C3:EC:73:5C:71:11:6B:E8:01:56:FB:90
            X509v3 Authority Key Identifier:
                keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:81:4b:af:7d:f3:29:fc:51:ce:b0:0a:ed:8e:03:a4:95:
         66:ea:d5:43:97:56:ee:81:b5:1c:e4:c5:b6:46:72:9a:26:4b:
         61:6e:b2:20:ec:29:7b:ad:81:b4:76:ac:9e:4e:6e:b2:68:87:
         87:98:e3:3f:a4:61:d9:e0:6d:6d:3c:81:d2:67:9e:2a:10:1d:
         da:7f:cf:3e:c2:a2:5d:e4:f6:e4:23:11:2b:d7:ee:1a:7c:f7:
         e3:da:b0:ed:c6:4b:d0:75:ea:f8:4f:16:99:85:27:ca:ee:6c:
         7d:1f:74:8e:1c:0d:41:4e:0f:28:85:9f:0f:c4:d6:ea:1e:0f:
         81:79:58:76:ed:03:1d:9c:f4:c3:be:98:7c:7c:4a:cd:73:d1:
         23:11:81:5a:69:63:32:6b:2a:ae:28:58:99:ed:b7:a0:1d:63:
         5f:0e:81:52:f2:f9:a4:d6:1d:5e:4a:33:f9:4c:4a:dc:02:06:
         b7:9b:6e:19:2a:4b:d7:60:06:f4:a0:27:d0:d8:43:f0:48:37:
         0a:c1:11:6e:b2:7f:86:d5:17:28:90:0a:85:70:28:47:0f:16:
         4f:07:6e:c3:c7:bd:9b:b6:ee:b8:53:34:88:d2:69:a9:9f:d4:
         ae:9e:13:3a:81:d2:c1:5d:00:ed:23:23:cd:95:10:57:03:46:
         82:cf:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:24 2024 by rpki-client on console-fra.rpki-client.org