Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File:                     XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier:          n9pDAE/cSzEQ+aSibnYHPHKN1klypizuNN2kJhxjp2E=
Subject key identifier:   4E:29:4D:E9:41:1F:B4:65:7C:DA:06:C7:69:6A:DC:08:E1:C9:1D:86
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer:       /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial:       018F885B27B00007CBF73C8B8307DFFE885E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number:          0442
Signing time:             Fri 17 May 2024 21:00:26 +0000
Manifest this update:     Fri 17 May 2024 21:00:26 +0000
Manifest next update:     Sat 18 May 2024 21:00:26 +0000
Files and hashes:         1: B8y1kCwpGiLQEvaVWkqHENau-Sc.roa (hash: B4in8Xzl6a4AQaFy6gNV/dVcz09nHn4UiMZqVplrac8=)
                          2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: htUUdTs0tc6jrclalIuDUQF3QRtxEtNtFpnJuFVg210=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:27:b0:00:07:cb:f7:3c:8b:83:07:df:fe:88:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
        Validity
            Not Before: May 17 21:00:26 2024 GMT
            Not After : May 18 21:00:26 2024 GMT
        Subject: CN=4e294de9411fb4657cda06c7696adc08e1c91d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:a5:e5:f7:52:04:40:a2:62:50:a3:ab:6f:
                    fe:e0:ff:6c:eb:cc:58:7a:e0:f0:4a:a4:04:76:40:
                    40:1d:76:46:3d:7e:97:38:35:c2:2a:dd:27:c7:75:
                    4f:23:17:3e:48:a6:56:b5:56:df:82:76:4c:6c:33:
                    47:c6:95:83:6f:bc:2f:9d:63:b6:d4:d4:f1:af:f1:
                    79:a1:3f:77:46:31:6e:33:55:4f:20:60:6d:e8:91:
                    af:24:f7:84:ee:d4:a4:5e:b4:b9:8b:c4:04:d9:7e:
                    79:ed:a7:2c:ba:49:ca:3c:25:73:0a:ca:9c:34:ae:
                    f3:7e:82:07:b1:7d:bc:f7:85:39:21:15:56:3e:ee:
                    88:f3:b7:5c:d0:09:6f:a6:e3:50:93:bf:8f:e7:af:
                    cb:8c:56:d8:f5:5f:e1:a5:86:7d:56:8e:5f:13:16:
                    a3:a3:98:5e:52:b6:0b:78:d2:c1:56:f7:1c:70:61:
                    c8:35:72:09:d7:ce:98:20:db:c5:89:95:39:da:06:
                    67:67:de:09:3e:7a:9d:65:4e:6c:93:b9:7d:45:e4:
                    e0:61:d8:74:23:bc:a5:24:92:29:a1:70:a0:2f:38:
                    35:b7:9d:97:37:d2:4b:4c:31:32:17:11:86:b3:b5:
                    d9:ca:0c:8c:c8:99:b3:35:df:c8:9c:7b:a2:44:ce:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:29:4D:E9:41:1F:B4:65:7C:DA:06:C7:69:6A:DC:08:E1:C9:1D:86
            X509v3 Authority Key Identifier:
                keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:72:5b:ff:67:58:cd:17:de:f9:7b:55:1d:b6:66:74:cf:
         b9:a9:b1:a5:a5:03:7a:7d:b3:66:87:c5:91:e3:9a:54:5e:90:
         ab:d1:76:d6:7b:3d:ea:25:84:c2:f5:6f:30:9f:35:a5:e0:cf:
         fe:1d:5d:26:ef:77:41:22:af:6c:45:b9:1f:e2:ed:4a:90:1f:
         a6:0d:9e:06:ef:ad:41:c4:6c:ef:39:ff:9b:6c:45:be:2c:6f:
         18:7e:ac:fb:54:aa:34:f9:79:30:86:18:5a:00:06:ce:87:3b:
         2b:13:a5:0c:5a:52:0c:05:01:6d:1c:de:3d:ab:57:5e:db:19:
         8c:47:9e:56:c8:86:45:e7:09:24:d5:14:d8:a3:b2:31:0e:e1:
         7e:e0:5b:97:52:08:d5:6f:76:ef:56:5a:89:c2:03:19:fa:7a:
         5b:4b:ba:ee:23:85:94:5b:47:2e:a9:be:6c:f7:12:0a:19:d2:
         21:68:66:4f:a1:ba:0a:da:05:93:ff:49:d6:f4:b4:82:1f:fa:
         0e:85:3d:ff:7d:d8:70:11:35:2a:44:46:0e:8d:5d:e9:04:62:
         4c:da:78:33:a6:3b:ff:e9:ff:7b:df:09:be:1d:d2:4a:43:f9:
         f9:d8:0c:2b:45:fd:3b:51:cb:85:41:65:db:a5:b5:ce:de:cc:
         63:0a:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:48:31 2024 by rpki-client on console-ams.rpki-client.org