Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
File:                     s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json)
Hash identifier:          393A3+gqrCmWbH26nUxLzjgj/hyqQtwAw+FasE39h4U=
Subject key identifier:   E0:91:95:5D:AF:78:A2:37:22:2C:44:1F:2F:34:26:D7:E5:2D:4A:A2
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Certificate issuer:       /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial:       018F89385AE330ECBA16D63F9F06BE77283D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
Manifest number:          023D
Signing time:             Sat 18 May 2024 01:02:02 +0000
Manifest this update:     Sat 18 May 2024 01:02:02 +0000
Manifest next update:     Sun 19 May 2024 01:02:02 +0000
Files and hashes:         1: qgeRMUl5m6W98pxw4dgZKejnNZ0.roa (hash: wqarHFyuEknZwGXNH/ThJNY7/N6FZS4KNCu5einF/Wc=)
                          2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: PXCkxRf6c0wF/i5tASGYCGuKjLzBdkaGSgVY/ZQSVVM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:5a:e3:30:ec:ba:16:d6:3f:9f:06:be:77:28:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
        Validity
            Not Before: May 18 01:02:02 2024 GMT
            Not After : May 19 01:02:02 2024 GMT
        Subject: CN=e091955daf78a237222c441f2f3426d7e52d4aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:b4:cb:13:f1:a6:31:bf:c0:0a:9f:02:26:
                    f9:b1:5d:25:e5:bf:78:1a:a0:23:71:5b:f3:d6:24:
                    8a:9f:ad:40:55:3e:1b:1d:74:cc:cd:9b:8f:f6:2e:
                    93:aa:a6:e4:88:3d:dd:15:66:23:30:14:4b:eb:09:
                    e1:5c:7a:47:94:17:4e:dc:8d:4f:20:81:aa:76:59:
                    ee:74:0d:b2:f0:27:54:fe:42:ff:ed:f4:f7:fe:11:
                    3a:02:12:4e:5d:14:bf:83:c0:d7:1c:77:ee:74:4e:
                    42:db:1e:fd:99:62:43:75:e6:fa:12:19:fc:f3:ac:
                    86:ca:09:9d:11:ed:60:e4:d6:8c:bb:1c:f1:f4:ec:
                    fc:22:d5:9e:5b:07:12:d0:3c:6c:9a:d9:f5:3e:91:
                    0b:14:61:b8:3e:4b:4c:06:77:33:23:c3:4f:20:bc:
                    9b:f4:1e:53:62:7e:f4:a1:45:d3:d6:47:6a:28:d4:
                    e9:63:2d:7f:92:6d:d3:ae:f2:7c:10:00:01:f6:a5:
                    b1:89:3f:2f:1b:1e:e9:fc:ed:4e:08:47:3f:50:1e:
                    23:d4:4d:f2:e3:91:cb:0e:3d:92:ea:d4:49:1a:ba:
                    36:d7:fd:b3:c5:7f:5a:be:f0:06:ca:eb:8b:b4:d7:
                    74:c1:14:4e:b6:f8:39:36:85:84:c2:22:d0:fc:02:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:91:95:5D:AF:78:A2:37:22:2C:44:1F:2F:34:26:D7:E5:2D:4A:A2
            X509v3 Authority Key Identifier:
                keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a3:b2:c8:4c:eb:d7:44:65:4a:e5:5d:11:1d:76:ec:82:69:
         fe:c7:04:9d:8c:2f:9c:ad:e2:39:e5:10:fa:63:9c:66:42:24:
         2c:07:58:eb:a0:0f:c9:b1:ae:50:d2:70:bd:9e:a4:0d:f9:5e:
         ba:f0:55:2e:08:0c:8f:21:0a:4c:3e:75:c6:a8:2b:90:60:f6:
         ac:40:c9:c1:54:94:fd:f4:5e:c3:3b:6e:e2:4e:fe:97:c0:fd:
         10:c0:5f:b5:f6:b0:8b:69:25:da:63:40:f0:f2:51:76:5f:98:
         1a:00:eb:6e:e8:f0:b8:3d:3b:5e:ce:23:fb:6c:d3:d7:b7:84:
         30:8e:83:25:d9:2b:93:3f:7a:d1:c0:cd:8b:fa:15:ec:95:18:
         de:5c:85:a8:e0:3e:e6:b4:44:ab:d6:02:73:d4:37:90:c8:1d:
         a0:18:e6:37:5c:37:5f:63:3b:cd:1d:09:dd:58:42:42:0a:c3:
         f5:35:a2:29:26:a2:5b:1c:66:ad:06:3a:ad:10:63:42:b8:7f:
         2e:60:5c:7d:3d:68:9c:68:7a:86:8e:19:5a:5f:04:89:0a:b4:
         2e:23:b7:e5:c0:00:03:fb:d4:bc:53:45:13:73:12:5a:25:c5:
         b6:a0:a2:50:15:3e:83:32:94:d8:47:ad:b0:c9:70:16:e9:b6:
         0f:4f:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:36:33 2024 by rpki-client on console-fra.rpki-client.org