Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File:                     mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier:          axHxiezjkeeXn0RMOVPEv2LLBAlJCPAgQfZwIkVsLOQ=
Subject key identifier:   79:B6:28:B1:B3:CD:61:2D:9E:EF:32:E5:10:57:C6:8C:60:F7:1F:C3
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer:       /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial:       018F866CCD99FD2CCE99CC3AD73F538CE2AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number:          02A7
Signing time:             Fri 17 May 2024 12:00:28 +0000
Manifest this update:     Fri 17 May 2024 12:00:28 +0000
Manifest next update:     Sat 18 May 2024 12:00:28 +0000
Files and hashes:         1: MZlZKyECGY5z3xPOFQOq4x1GbdM.roa (hash: Pzkv2dIGqmufdZbwaaqCYoLqLqCyoKpkRh6faM0+6jc=)
                          2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: 2D84185bbWWXqHCIPNfFWuoW58Epv7Bt39sreuOpJRk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:cd:99:fd:2c:ce:99:cc:3a:d7:3f:53:8c:e2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
        Validity
            Not Before: May 17 12:00:28 2024 GMT
            Not After : May 18 12:00:28 2024 GMT
        Subject: CN=79b628b1b3cd612d9eef32e51057c68c60f71fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:3e:88:32:89:06:32:c6:61:a4:2a:72:6c:
                    51:2a:8f:23:1d:78:65:32:ab:20:09:f4:a9:d9:9d:
                    23:71:9e:9a:f5:57:9f:f4:05:7a:34:f5:c8:4f:d4:
                    f7:c1:4d:92:18:e6:3b:8d:20:9e:4e:bc:ff:f0:f3:
                    ed:c4:8f:65:49:4a:b1:9d:db:17:8f:50:d1:e4:84:
                    a0:33:5f:41:7f:99:1d:9d:fd:62:6e:5a:40:1f:d8:
                    03:31:00:a3:d8:3c:30:4c:8b:fa:52:ed:af:e9:1b:
                    c8:af:61:5e:50:3c:88:8e:35:4a:67:3e:45:1a:1f:
                    c1:9f:a3:ae:08:ec:54:8b:3f:26:54:a3:87:b0:87:
                    d8:c8:a5:40:40:d2:ed:08:35:df:6e:60:19:b6:20:
                    65:2c:85:3f:98:c5:b3:0f:54:37:3b:40:63:aa:53:
                    78:85:34:f8:dd:3b:8f:f2:3f:eb:8d:3b:04:02:8f:
                    17:d4:dc:37:18:7b:b3:78:b1:b6:95:03:be:b8:17:
                    54:98:ac:94:d7:1b:b8:db:5b:bb:bf:6b:58:c8:f1:
                    86:de:9c:35:d7:78:6e:ef:aa:8c:f4:5f:74:04:3e:
                    76:64:a5:21:b7:34:ee:a9:d4:33:ab:50:6f:6e:f9:
                    a6:ee:7e:71:88:d5:38:fc:27:be:52:d5:e8:a7:dc:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B6:28:B1:B3:CD:61:2D:9E:EF:32:E5:10:57:C6:8C:60:F7:1F:C3
            X509v3 Authority Key Identifier:
                keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:59:fc:a7:2c:20:f4:8f:2a:60:33:28:59:bb:29:c3:d1:
         5f:76:b1:87:40:d9:bf:a5:c3:e7:8d:ad:46:0c:4b:3d:f7:ca:
         4d:80:88:1c:1b:93:32:d4:7e:e0:ac:d7:94:4b:c0:0d:0c:ab:
         1a:8e:68:f9:80:25:de:a3:c7:69:9b:0b:26:59:85:eb:6b:3e:
         1d:8a:94:59:15:31:dd:7d:45:42:9c:02:1b:cd:d5:8b:7a:a4:
         dd:a3:7d:cf:05:b9:55:12:3e:da:9b:24:54:70:6a:60:23:2c:
         5a:9b:d3:13:1f:25:22:c9:e7:fe:1e:3d:f0:43:0e:00:fd:97:
         e3:6c:41:fc:99:02:20:a2:ad:10:2f:b9:fe:a1:84:cf:62:6f:
         6a:79:95:f1:cb:fd:6d:69:03:57:b1:7b:2f:97:4f:78:fe:05:
         ad:31:13:4d:f3:c5:e9:53:d2:8c:cc:22:4b:b0:83:25:78:1e:
         67:48:51:18:4e:51:bb:a6:ac:58:05:eb:fc:89:8c:ce:36:70:
         6d:db:ef:de:07:3a:28:a6:06:23:4d:da:aa:3d:d0:16:79:58:
         e7:b7:b1:a0:2c:f6:6b:fa:24:55:6f:40:c0:3f:0a:45:8d:ad:
         4f:3b:4f:b0:6f:20:e6:e4:be:37:ee:45:cf:05:64:a1:ea:98:
         86:f2:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:14 2024 by rpki-client on console-fra.rpki-client.org