Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.mft
File:                     XnF2J_ey_MVvDXvkaaExcWB9JCc.mft (raw, json)
Hash identifier:          iCroSgvo1RInPmz9REb6z1fCntggFTmphI0fRDfH59Y=
Subject key identifier:   2A:ED:8F:92:32:C2:AD:DE:B3:0E:21:5C:26:0F:39:D4:47:9F:42:D8
Authority key identifier: 5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
Certificate issuer:       /CN=5e717627f7b2fcc56f0d7be469a13171607d2427
Certificate serial:       018F86A3E4B45C08FD57BFA9A8D40AD824AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.mft
Manifest number:          06D5
Signing time:             Fri 17 May 2024 13:00:38 +0000
Manifest this update:     Fri 17 May 2024 13:00:38 +0000
Manifest next update:     Sat 18 May 2024 13:00:38 +0000
Files and hashes:         1: DeYFRF8SgqWAkexS1A-BHXI9f8k.roa (hash: bNwkEAQRtlZIuFSB/u0r6n11dTYMMes8YeIHkjBbzSM=)
                          2: XnF2J_ey_MVvDXvkaaExcWB9JCc.crl (hash: OvE1aKx5kPmBENXpwzpTjmGfiJQPap9qFw6rwbC4J64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:e4:b4:5c:08:fd:57:bf:a9:a8:d4:0a:d8:24:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e717627f7b2fcc56f0d7be469a13171607d2427
        Validity
            Not Before: May 17 13:00:38 2024 GMT
            Not After : May 18 13:00:38 2024 GMT
        Subject: CN=2aed8f9232c2addeb30e215c260f39d4479f42d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:e2:39:fa:3d:25:f3:76:a3:8d:00:24:16:
                    0d:72:12:aa:d1:ec:04:c1:59:70:49:9b:dc:1d:a5:
                    fe:05:d0:5a:b7:8f:17:09:f9:fb:95:74:31:71:d5:
                    ca:1f:8e:cb:91:d8:e8:5c:cd:69:5c:8f:2e:95:ad:
                    a0:39:0b:d9:47:88:de:fb:6f:b4:e0:69:9d:8a:9a:
                    f4:04:2d:95:72:0b:91:0c:13:c6:02:eb:a9:62:2a:
                    a9:73:c4:0e:e4:9e:f0:6d:68:c7:e4:5c:71:66:3e:
                    58:b4:55:a0:d0:50:80:c7:d6:fe:12:a7:44:b4:9b:
                    d0:3c:96:42:c3:89:28:a7:3c:73:1d:50:71:d7:7a:
                    e5:32:27:a8:db:50:33:ee:8e:f6:b7:59:c2:01:08:
                    d0:cc:46:7e:b1:3b:ae:60:fe:94:01:84:38:d0:1a:
                    ef:de:54:b1:04:39:31:54:a3:55:6e:a8:42:7d:1c:
                    4f:b4:22:7e:c1:38:4d:20:fc:09:5d:c7:34:7e:d7:
                    89:cf:e9:ba:3a:18:f9:56:c0:79:af:01:bf:83:4e:
                    9b:9a:47:ba:76:f6:ef:65:52:fc:28:11:28:43:80:
                    8d:d3:5c:62:46:c3:02:7d:ec:98:24:e1:0b:62:18:
                    22:69:af:1b:8e:96:52:e7:2e:e4:b4:20:cc:c5:12:
                    79:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:ED:8F:92:32:C2:AD:DE:B3:0E:21:5C:26:0F:39:D4:47:9F:42:D8
            X509v3 Authority Key Identifier:
                keyid:5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:1e:2c:50:35:19:94:5f:8d:4b:7f:d7:e7:63:04:bd:8a:
         02:c5:dd:5a:b7:b6:dd:1a:71:1f:60:32:2e:4c:72:34:50:e5:
         f6:6d:f5:0f:7b:55:fe:4c:e5:d8:52:ae:6f:90:21:3f:61:4d:
         33:c4:1b:f1:64:46:96:5e:39:69:9f:9a:03:a1:4b:ea:ed:37:
         09:16:e7:93:5c:c9:50:1d:15:73:72:4b:b8:71:c0:d1:64:8e:
         aa:a4:e5:d9:8b:69:14:a3:91:03:2d:f5:7f:d7:eb:e5:9a:ad:
         90:ad:6a:76:60:8b:dd:86:e4:46:c2:ff:84:ef:99:e1:47:f8:
         6b:e9:f8:36:84:40:16:1c:05:e6:9a:ee:fc:32:81:25:43:85:
         73:3c:bd:a5:1a:d6:06:1f:e0:80:05:57:61:0a:01:ff:93:ea:
         77:7d:ba:5b:04:ca:6a:25:66:4c:cb:16:1d:1d:8c:b2:b2:28:
         1b:68:2d:b0:1d:8d:e9:1a:fe:f2:de:3e:2e:92:86:ca:64:4f:
         23:5f:2b:87:21:76:59:f8:f7:70:19:8a:ba:05:ca:21:98:7e:
         18:81:1e:12:75:b0:a4:fd:4e:46:af:ca:2f:24:29:d3:ab:62:
         c0:65:86:66:e5:b2:cb:28:0e:6f:50:c6:ec:c0:44:84:db:cd:
         4e:76:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:03 2024 by rpki-client on console-fra.rpki-client.org