Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File:                     RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier:          2mWn0BrNEk5sAiIaf9aI+e/4YUszTnrxMWTCGV1lV68=
Subject key identifier:   6D:E2:D3:6D:BE:3F:92:05:E0:3C:79:87:1D:26:B0:C4:1F:3A:47:86
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer:       /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial:       018F88922957747E73BEC8F7F105008D30BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number:          088A
Signing time:             Fri 17 May 2024 22:00:31 +0000
Manifest this update:     Fri 17 May 2024 22:00:31 +0000
Manifest next update:     Sat 18 May 2024 22:00:31 +0000
Files and hashes:         1: 1cYYstZGsFSYJGWSJDWGb6YXQVo.roa (hash: 6Um92KdwzDb6HS8WpTb+XZ2gWLnhIwKGYvKMGH2Z6nk=)
                          2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: 2harUpsje5FVhGjYHYdaNNFyYSc31zxo9A4tppABgAA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:29:57:74:7e:73:be:c8:f7:f1:05:00:8d:30:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
        Validity
            Not Before: May 17 22:00:31 2024 GMT
            Not After : May 18 22:00:31 2024 GMT
        Subject: CN=6de2d36dbe3f9205e03c79871d26b0c41f3a4786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:e2:19:81:d1:d7:d3:c0:af:43:c5:8b:82:
                    f5:36:4f:b1:d9:d9:71:31:c3:18:5d:25:fc:07:63:
                    3f:cf:d8:e2:81:dc:e9:97:ae:0e:73:a6:ab:2a:cd:
                    c4:fb:b7:e3:92:13:40:7c:d6:fa:21:60:eb:3b:28:
                    89:59:36:be:10:12:be:8e:cf:85:03:cf:73:93:b8:
                    30:22:6b:43:07:df:20:69:f8:76:47:43:9e:b8:59:
                    4c:29:ac:06:ef:16:df:a6:bf:7d:02:bc:e2:56:1b:
                    2f:4c:06:63:86:15:49:2a:d9:ee:37:9b:e2:00:4e:
                    eb:c5:81:66:74:a0:39:e8:03:90:d8:8d:68:5a:71:
                    40:db:3e:e4:4e:9b:5c:8b:83:be:03:ad:84:ca:62:
                    ac:6b:78:a4:36:44:99:43:79:05:50:e0:57:4d:bb:
                    95:fb:60:5f:57:9e:45:20:62:3c:9a:f4:ca:13:17:
                    33:85:b7:55:f8:f6:9d:1e:e1:ba:6c:08:0e:28:d9:
                    e1:62:f3:16:19:6b:88:9a:94:c7:94:d6:b8:53:5d:
                    ab:df:90:0d:75:cd:8c:4a:fd:a0:f6:1b:6e:4d:e2:
                    de:3c:1c:67:65:f2:53:1c:e1:be:d5:b1:ee:1a:8b:
                    18:84:26:77:26:95:ff:68:d2:07:d9:d2:eb:c1:36:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E2:D3:6D:BE:3F:92:05:E0:3C:79:87:1D:26:B0:C4:1F:3A:47:86
            X509v3 Authority Key Identifier:
                keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:33:ec:f5:0f:ba:ef:52:7e:1d:d6:cc:8c:14:a7:ba:ab:f8:
         c7:4b:d7:e6:e5:b6:d9:e2:a2:88:34:f7:38:c1:34:48:df:c7:
         bb:14:53:85:16:23:92:dd:94:b9:6a:71:d4:c5:25:41:a3:a2:
         f0:9b:04:1d:62:32:7a:90:ac:7a:7c:7b:34:c5:e1:f1:1f:1e:
         2d:b7:63:52:86:ea:5c:38:ea:cb:8b:b7:d0:02:03:08:98:c8:
         ff:4c:bc:e3:ba:df:15:e8:59:c3:01:ea:a5:07:8a:22:61:c6:
         3e:10:8b:5b:60:c4:74:3e:c5:f9:2b:76:08:bd:34:32:96:f0:
         3a:99:46:40:d3:b6:1d:83:ed:a7:f5:f1:54:87:0e:86:3d:09:
         ca:24:a9:92:91:e5:87:d9:5c:69:3a:46:2b:95:bc:e3:2d:72:
         1b:dd:0c:8f:e5:1a:b9:7f:23:3a:a0:71:c4:43:75:78:f4:95:
         ff:4d:a7:31:c1:a0:18:65:58:63:9e:5b:d1:d3:99:b7:a5:d4:
         53:f0:b7:95:6d:2f:15:1e:b4:00:d8:b1:21:6e:85:91:37:55:
         56:41:c7:25:ce:91:dd:43:1c:51:6a:e3:ec:72:d4:2b:e4:9c:
         0c:14:68:67:4c:d7:c2:30:a1:1d:50:fb:e0:79:45:55:f8:73:
         31:4e:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:10 2024 by rpki-client on console-fra.rpki-client.org