Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File:                     gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier:          P1evxgP2UUpGI11h5AnNiD91WHrlMFGLtu3x8od1M90=
Subject key identifier:   9E:3D:1F:DB:D4:F6:50:F7:51:4A:8E:7B:2F:17:F5:A0:B1:DB:E4:E4
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer:       /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial:       018F8749C87B98A17CA24265649335D2A2DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number:          0A78
Signing time:             Fri 17 May 2024 16:01:50 +0000
Manifest this update:     Fri 17 May 2024 16:01:50 +0000
Manifest next update:     Sat 18 May 2024 16:01:50 +0000
Files and hashes:         1: fBHJBJdkuvn6LhH9Q_zqyen8Rt0.roa (hash: /Y31ZKMhudsMwcjHg1gRGz55kJiPPmW2fv9vVaRVe3w=)
                          2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: lZIDWSpvQSYUsbHuhxPy9780JKxO0kP1IlFWwiL76sY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c8:7b:98:a1:7c:a2:42:65:64:93:35:d2:a2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8166038385b343d55e76b728efe23c0731787668
        Validity
            Not Before: May 17 16:01:50 2024 GMT
            Not After : May 18 16:01:50 2024 GMT
        Subject: CN=9e3d1fdbd4f650f7514a8e7b2f17f5a0b1dbe4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:58:7b:d8:33:80:cf:1c:29:01:d4:d7:74:
                    ba:dc:f8:cb:b6:19:2a:d8:fc:96:82:d0:b9:9c:b2:
                    72:0d:eb:af:a5:c5:ac:e0:db:14:63:12:b8:97:31:
                    d9:9d:cc:78:44:11:30:b3:d7:46:bc:8e:1a:f4:d5:
                    94:4d:7e:5c:4c:7f:bb:52:ee:76:aa:31:a5:f9:c4:
                    b1:4c:e1:1b:fe:77:91:0d:c9:19:71:05:3c:4a:00:
                    fa:fa:b5:c9:75:ce:56:c5:77:fe:e3:df:3f:7c:50:
                    28:26:9a:4c:df:d4:57:4e:b8:68:83:81:ee:a4:f4:
                    19:57:26:59:8c:eb:f8:6f:29:34:b4:52:ab:cf:f5:
                    35:4b:7a:a7:16:d8:67:3f:7e:e4:9d:c2:5a:8b:81:
                    4a:1e:c5:ba:9c:13:1f:2f:27:38:2d:d6:fa:b3:8a:
                    87:e6:34:57:30:9e:b8:c2:6b:fe:2a:4f:a4:17:0d:
                    06:6a:00:7b:03:18:b4:ac:84:77:41:15:2b:09:35:
                    6a:2e:92:8b:6b:01:58:2c:c4:a9:38:a7:fd:6f:cc:
                    5a:84:50:2d:0c:f4:a5:76:29:59:6d:36:bb:09:f7:
                    2d:cc:9d:1a:fd:94:01:58:34:f5:a2:5e:cc:9e:5d:
                    77:a2:f3:8b:f6:f6:af:99:58:75:91:db:e9:4d:f1:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3D:1F:DB:D4:F6:50:F7:51:4A:8E:7B:2F:17:F5:A0:B1:DB:E4:E4
            X509v3 Authority Key Identifier:
                keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f3:8b:9d:19:c9:1f:9d:b9:14:bc:d5:f0:fc:af:df:61:99:
         06:d4:4d:d9:ad:b5:61:25:70:27:e6:eb:b1:17:a1:c6:37:03:
         09:ea:97:da:64:a1:0c:11:e8:91:35:cf:3c:89:91:af:b4:ee:
         ff:24:7d:d4:bf:64:5d:c9:e7:d4:0e:1a:70:84:04:6b:f7:e7:
         78:fa:67:28:13:d8:46:df:d3:71:e3:18:5f:d6:08:66:9f:08:
         c7:6a:5a:45:0b:79:81:02:b7:a6:e6:92:82:bf:ab:b0:ab:79:
         b1:2e:fb:5e:d2:d5:97:1c:58:85:d3:49:87:09:a1:e7:ee:cb:
         6a:15:b6:24:d6:11:ee:96:60:04:97:c1:6b:7a:d0:2b:c8:fd:
         d4:bf:0b:ef:55:0b:6b:ba:b7:37:cf:c1:e8:62:2f:18:91:08:
         8e:6a:d3:1c:6c:97:72:20:5a:40:88:d4:69:00:8b:ff:4d:44:
         10:de:0d:3e:92:92:49:88:fc:cd:a0:96:e3:5e:6d:53:7c:52:
         18:e8:2a:23:0e:49:63:16:87:53:40:3b:76:43:8e:7e:2e:20:
         13:5e:9c:2b:70:59:3f:48:72:6b:1e:2a:c1:5b:80:bf:4e:c4:
         62:63:f0:ec:98:96:e4:24:7b:c1:42:62:3c:12:10:06:fe:83:
         04:49:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:24:30 2024 by rpki-client on console-fra.rpki-client.org