Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File:                     dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier:          cNV5bRPIL1GVM5+iVXLlh3QmlcryO9x+utn7aRz3Gy0=
Subject key identifier:   AD:27:0F:86:86:28:40:BE:42:B8:38:F7:B1:8D:14:18:00:72:0D:6F
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer:       /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial:       018F5CCDD36D9F148D40DC2ABAC71C3EFA44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number:          0E99
Signing time:             Thu 09 May 2024 10:02:23 +0000
Manifest this update:     Thu 09 May 2024 10:02:23 +0000
Manifest next update:     Fri 10 May 2024 10:02:23 +0000
Files and hashes:         1: Q_Lg6CK7aS6mDfL3ZzKO388DoR0.roa (hash: AnFPFnZrZvN7dRDXRZZY6f0odHCkTCAbH1Rse8JT36Y=)
                          2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: 1XrfZiWQ4nzQ5YICo9Zx9Ng1i1q4GY5ZyWwKojTaFfg=)
                          3: mbLpksk5lTtge2F7Eb0EyrCB4zI.roa (hash: 1zD2W4z/ZPxeJc6MacfK7bHnQm20ZnoDkwjWHMvLDdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 10:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5c:cd:d3:6d:9f:14:8d:40:dc:2a:ba:c7:1c:3e:fa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
        Validity
            Not Before: May  9 10:02:23 2024 GMT
            Not After : May 10 10:02:23 2024 GMT
        Subject: CN=ad270f86862840be42b838f7b18d141800720d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8d:2b:73:60:3d:94:49:14:3b:ef:f6:1b:c7:
                    85:96:d5:c8:c5:20:3e:42:64:86:4c:80:f1:14:04:
                    18:ca:bc:42:b4:ae:fe:da:1c:fd:00:2e:54:8e:49:
                    3b:5a:dd:f1:33:b0:41:a3:a8:73:36:70:8b:35:06:
                    1e:88:bd:35:c5:1c:8c:6e:88:2f:8c:59:d7:8c:20:
                    87:40:72:30:c1:5a:b6:5d:9d:bd:6d:f4:50:ca:dc:
                    ef:cf:99:77:de:22:e5:9d:ed:aa:4b:0a:7b:68:fa:
                    27:bd:08:7a:f5:01:85:09:8a:d5:cf:f3:2a:95:fe:
                    e8:fb:aa:bd:bc:f9:d3:78:e8:f2:83:aa:8b:34:f6:
                    bb:de:79:57:1d:3e:df:25:d3:da:28:89:8a:99:a0:
                    46:2e:35:fd:69:ac:a7:f8:27:47:fd:b9:d0:13:f1:
                    f1:3a:d0:3a:5b:57:dd:49:6c:fa:b5:bf:9c:93:a1:
                    b8:4f:a7:c2:7c:76:d1:3b:e0:8d:51:bf:8f:9a:29:
                    41:0b:b8:6d:76:e8:a7:82:83:e4:3f:90:81:c8:bc:
                    64:a9:57:ce:5a:c8:7d:70:a3:55:51:ff:f1:61:fd:
                    ea:43:ce:98:96:c5:e3:c2:93:ef:36:a7:cc:47:da:
                    cd:32:fb:cf:f8:b3:1b:b8:c1:b1:40:44:aa:bd:7a:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:0F:86:86:28:40:BE:42:B8:38:F7:B1:8D:14:18:00:72:0D:6F
            X509v3 Authority Key Identifier:
                keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:90:cf:f3:be:4b:9a:b7:a9:74:b6:e1:4a:62:68:c8:a8:4f:
         3e:7a:bd:93:e8:02:d0:9f:34:98:90:03:c5:b7:3b:65:5a:60:
         99:90:75:39:66:04:f3:f8:40:4e:90:00:14:93:36:a1:f7:ea:
         69:28:77:74:0f:d1:89:f1:9e:a3:38:b7:dd:42:73:76:ff:9a:
         6e:f9:cc:27:77:ae:07:68:c4:27:3c:63:27:51:6f:1f:b3:2c:
         b1:13:67:dd:13:eb:27:9e:d2:08:25:a0:fd:04:11:fb:dd:c5:
         5d:b8:ad:80:f2:ec:d8:18:21:1a:a1:e2:32:cd:53:cb:f7:25:
         50:2f:3b:ca:23:3f:e1:dc:08:2f:97:15:9b:57:6d:01:c3:96:
         14:03:78:39:07:10:16:7f:71:fb:b4:21:2d:de:3e:0a:83:c1:
         2a:c7:45:83:62:55:14:16:55:7b:78:ec:05:58:96:5a:d5:e5:
         54:5f:93:00:7d:57:79:a3:96:94:6a:1a:6f:32:20:ea:e4:95:
         36:4a:6e:bb:9e:c6:75:c3:d5:f0:a2:98:2a:da:f1:1f:2e:0a:
         10:75:73:89:37:12:85:a5:d0:96:20:ba:7b:33:bc:a9:7e:3e:
         7f:7a:9f:22:bd:2f:a4:3a:80:94:87:e6:51:64:5b:e2:64:6e:
         3d:de:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 19:29:52 2024 by rpki-client on console-fra.rpki-client.org