Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File:                     _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier:          g+peDsZkaGvo580zsNrYCoZEmGQFe/xsxA92LsZ83FU=
Subject key identifier:   31:CA:C0:5C:57:A9:C8:50:C1:C4:F7:A9:82:0B:CE:75:79:0E:BE:2E
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer:       /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial:       018F874B106D1B0DB87B882D88BCF4117D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number:          10A8
Signing time:             Fri 17 May 2024 16:03:14 +0000
Manifest this update:     Fri 17 May 2024 16:03:14 +0000
Manifest next update:     Sat 18 May 2024 16:03:14 +0000
Files and hashes:         1: EWLEyVHhes6TOIJQ5cLvq5QyyYM.roa (hash: x8E0CftNWbRt5hozQir5SHPu1qQWGnT3OFyf2s2OkMQ=)
                          2: NAWuvCN1hB-Y9etFw5DeUDl27kk.roa (hash: KxNI8dutWNqWeqf7umw1g6YLYZctA486ahCXgZOFegQ=)
                          3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: SeWiHemMNSAnHvEI1T1KijYkz8hrzauKnX5cE5mBxuo=)
                          4: zwngkprKv9dWhJJtPwhumKEnFlI.roa (hash: IDNDPK/ym9YiJyYsBdhkd9KNjhkPgqOXskuzDxjjZUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:10:6d:1b:0d:b8:7b:88:2d:88:bc:f4:11:7d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
        Validity
            Not Before: May 17 16:03:14 2024 GMT
            Not After : May 18 16:03:14 2024 GMT
        Subject: CN=31cac05c57a9c850c1c4f7a9820bce75790ebe2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:2d:d1:f5:e8:f8:df:c0:40:49:b7:64:4e:
                    f7:01:c5:db:26:29:c5:57:ba:7a:a2:c9:c4:87:c6:
                    0c:e9:09:c9:61:0f:0a:ec:e5:56:f4:ab:c7:c8:a4:
                    7b:f5:e1:86:ba:b3:bf:ab:21:43:cf:21:2f:91:3f:
                    bd:aa:aa:68:5a:72:aa:00:4e:c0:95:8a:07:e8:55:
                    69:57:9b:ec:58:2e:62:2d:a5:4b:b7:83:c2:b9:06:
                    5c:0a:71:c7:00:c4:7a:03:0c:f9:c3:1b:5c:6f:7b:
                    69:7b:fb:79:a7:be:af:6c:28:13:55:9f:c5:b7:2a:
                    78:0d:a7:88:3b:84:1d:64:f6:f9:d7:3a:80:79:eb:
                    70:c0:3a:2c:87:67:90:91:ac:d4:a9:7b:a3:af:14:
                    76:b3:69:00:01:d5:b7:3d:ca:dd:04:fc:65:1e:e5:
                    72:ed:aa:74:c9:ad:33:d6:f1:4a:21:4e:a9:c4:28:
                    e6:4f:3a:04:30:92:5e:74:a5:4a:10:e3:a4:b5:c4:
                    8a:1e:9c:8f:58:4c:99:09:6c:47:d1:a6:24:77:d3:
                    67:be:cf:98:c4:1f:e8:e5:30:47:06:81:92:44:10:
                    47:87:38:cd:66:92:1e:6d:46:6e:9f:ac:12:4f:f1:
                    2c:3e:45:89:cc:fd:80:79:d5:60:59:a5:9e:55:20:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CA:C0:5C:57:A9:C8:50:C1:C4:F7:A9:82:0B:CE:75:79:0E:BE:2E
            X509v3 Authority Key Identifier:
                keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:4a:ca:7b:f8:5c:8f:de:12:04:74:79:94:82:7c:81:19:
         62:75:7d:65:de:0e:37:50:73:53:b9:fd:42:7a:e7:6e:c9:cb:
         50:56:f3:25:15:eb:30:4e:36:9b:e3:2d:f6:a0:89:74:73:82:
         51:a5:a4:75:5a:c9:9a:84:b4:09:13:45:a9:84:39:d9:fd:a6:
         c8:a1:2f:61:b7:c9:cd:2d:92:02:4b:f2:8a:7e:b3:e7:a4:4e:
         67:25:0d:f7:c3:d5:1c:1b:f7:a3:7c:b4:b5:fe:d8:ce:23:9c:
         62:98:73:64:b2:a4:87:cc:72:b6:d3:c4:2d:97:0e:d4:1b:e2:
         f7:86:31:d9:bb:5a:a7:23:e5:cf:87:a4:74:1a:90:0e:22:ac:
         28:07:5b:2a:da:69:a7:bf:ce:3e:1a:8d:f5:95:9a:d6:1f:7f:
         5d:7d:26:0d:a9:d5:e6:77:54:5c:61:d0:fb:a6:10:64:b7:12:
         d2:dd:b5:43:29:d0:69:ff:20:79:67:67:68:25:b7:a0:79:42:
         2d:7a:21:43:d8:6a:6e:ea:1e:f3:63:21:24:d4:11:3f:68:46:
         b1:c3:59:05:fe:28:a9:8b:ec:fd:9e:ea:59:19:a8:d6:cd:c2:
         b9:ee:ae:7b:00:08:18:2a:9f:20:35:a6:1b:32:44:44:39:61:
         74:c0:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:01 2024 by rpki-client on console-fra.rpki-client.org