Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File:                     dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier:          v1Jzw7XzVDZ4z+U5Pk1jR/9k+wtkqgoKBXids3twZKc=
Subject key identifier:   EA:E3:F4:B3:5A:33:CE:6E:69:51:B5:50:77:B2:B3:00:DB:89:AE:09
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer:       /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial:       018F866C8F7F64DF852C0AF930BF9003D87F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number:          09AA
Signing time:             Fri 17 May 2024 12:00:12 +0000
Manifest this update:     Fri 17 May 2024 12:00:12 +0000
Manifest next update:     Sat 18 May 2024 12:00:12 +0000
Files and hashes:         1: Cqu8zRa3BHTWFdqjPGgPbMO17w4.roa (hash: g6ithyw9BWM9DrSwYs3dJi6mhFfKHd6SRoVEH/OXPeE=)
                          2: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: oNoSQ/QTqARmT2Hpsv4Qt3cb9edCKvJHvmAqSrn2Oow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:8f:7f:64:df:85:2c:0a:f9:30:bf:90:03:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
        Validity
            Not Before: May 17 12:00:12 2024 GMT
            Not After : May 18 12:00:12 2024 GMT
        Subject: CN=eae3f4b35a33ce6e6951b55077b2b300db89ae09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:1f:ca:e1:10:cd:43:c9:6f:c2:cb:79:b9:
                    42:95:c3:4b:9e:17:ca:27:2a:3a:34:86:9c:4f:4b:
                    fc:2d:e8:f6:84:ab:ec:ff:84:40:99:f8:01:df:4e:
                    56:c8:99:73:65:85:07:8f:dc:d9:22:2c:35:88:a3:
                    70:89:98:4b:aa:7c:da:e1:bd:f5:18:9f:c8:5a:57:
                    9f:1a:bb:cc:b2:36:41:38:ad:1d:44:fc:e0:ce:12:
                    86:bc:1f:f0:5e:37:0f:4b:e3:43:f4:3f:b2:44:ba:
                    42:4e:ca:5b:a9:39:aa:3f:7a:f2:b6:cf:17:67:20:
                    fa:f7:1d:89:d4:ac:be:50:59:4a:e7:06:a3:e3:0f:
                    97:f2:12:b3:56:35:34:50:88:5d:45:6b:2a:66:82:
                    57:3e:9c:8e:6e:d6:e5:89:1b:4a:31:03:5e:37:4c:
                    23:b1:57:59:1c:d9:9c:ce:a7:95:c7:bd:e2:7f:1c:
                    73:3e:32:c3:d9:fe:c6:fe:56:67:ed:9f:88:c4:36:
                    a8:33:d9:58:23:ea:c8:71:a6:f6:2e:cd:c2:48:48:
                    98:1a:c0:d0:6f:3f:91:db:16:16:63:f6:b2:6d:65:
                    b2:21:4b:b4:dd:77:67:b2:7b:70:57:25:c6:3f:2a:
                    84:23:86:fc:aa:01:c5:75:0d:9f:d4:b6:26:fc:ae:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E3:F4:B3:5A:33:CE:6E:69:51:B5:50:77:B2:B3:00:DB:89:AE:09
            X509v3 Authority Key Identifier:
                keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e0:c6:72:ee:95:be:3a:c6:52:e7:9a:e4:9e:62:a1:91:e0:
         5b:95:bc:91:47:84:45:53:30:fb:7b:4f:19:6d:4a:30:dc:9d:
         e0:f7:59:56:5e:ad:f6:21:66:f1:ea:5f:de:7d:ba:2d:85:29:
         31:69:b3:0a:c4:88:e7:90:df:58:57:67:1d:07:c5:1a:99:6a:
         69:9c:1b:17:7c:28:e1:25:be:4b:7d:fd:0e:ed:0f:9e:51:0d:
         09:55:55:cf:0b:60:7d:89:8b:9c:c6:6e:8d:87:2d:cd:a4:92:
         0e:af:7c:bd:13:bd:1f:9b:d0:d2:c4:5c:7a:e0:e9:91:c1:55:
         0e:e0:0b:42:75:04:ca:1c:bb:34:f4:17:e0:d9:63:35:6d:14:
         b8:53:7b:69:52:8f:a1:84:c9:a0:01:f9:5b:31:c8:99:aa:f0:
         f3:a5:ed:db:11:ec:95:bb:81:93:6e:78:9c:cf:9b:5e:53:d0:
         d4:3b:de:6b:00:e2:50:43:4e:8d:18:60:8c:1f:e2:e8:75:96:
         98:fe:7c:a8:fa:03:46:c6:dd:fa:4a:6b:bb:f4:b1:f6:c0:26:
         4a:ee:10:84:a0:0a:a2:fb:63:de:60:8a:94:8e:80:b9:aa:5b:
         67:67:8a:9e:3c:29:8d:6f:47:5b:c5:1d:40:a8:9b:0a:19:4e:
         3f:7f:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:08:03 2024 by rpki-client on console-fra.rpki-client.org