Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File:                     p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier:          FYLebLmknMWx9jZyMz4tEzhmiSogVusuT9MneqUL/GM=
Subject key identifier:   BB:97:33:6B:6B:E8:4E:DA:21:3B:97:BB:32:80:C5:72:0A:EA:BF:5C
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer:       /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial:       018F94CEE889297C1B72E7BE8EEAE547D8A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number:          0D00
Signing time:             Mon 20 May 2024 07:02:18 +0000
Manifest this update:     Mon 20 May 2024 07:02:18 +0000
Manifest next update:     Tue 21 May 2024 07:02:18 +0000
Files and hashes:         1: 1-y0u6Yq2w_8IaZDUvagpby2ty6k.roa (hash: HU6M0wNTCNYVNeaQX7PH25SQOQ5cNWhTJgSEofnSA3w=)
                          2: QDO1E0geROextsHSTdeKuqlCnUQ.roa (hash: NwrIhAYsbca0sBcpIJ5gH4X1+3n/hBDZBG2G76hk/hU=)
                          3: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: gX+kpUvBg/P+N+OIYEeyN94taXnlR77edcEthVJzrj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:ce:e8:89:29:7c:1b:72:e7:be:8e:ea:e5:47:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
        Validity
            Not Before: May 20 07:02:18 2024 GMT
            Not After : May 21 07:02:18 2024 GMT
        Subject: CN=bb97336b6be84eda213b97bb3280c5720aeabf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:f5:85:75:3f:d4:1d:cd:8b:a9:7d:31:be:
                    f5:24:53:e5:bd:22:72:6c:07:ce:9d:dd:cd:3d:62:
                    79:1f:3d:28:39:96:f3:e9:c0:86:7a:42:16:52:88:
                    1e:23:d3:67:17:6f:04:eb:3c:3e:52:d4:04:77:a9:
                    1b:fb:81:51:2e:a7:2d:97:29:04:26:51:85:4b:a2:
                    1f:4c:9d:c0:b6:3a:65:a3:18:4a:6f:6b:46:39:a7:
                    94:07:41:f9:0c:9c:a8:20:17:b2:2d:78:e3:17:a6:
                    d3:fe:ce:74:e1:27:cc:41:da:ae:58:a4:2d:ab:a5:
                    6b:63:8f:49:58:7b:91:88:42:3a:67:9f:01:d5:64:
                    8d:f0:4c:dd:f3:72:54:e6:db:d8:2a:ce:dd:ab:94:
                    71:c5:3a:76:f4:93:a8:86:06:fa:66:bd:25:43:3b:
                    2c:23:83:f9:b1:4b:de:fb:83:71:f2:3e:ae:ce:23:
                    a2:cc:bc:88:75:10:ea:a8:19:5d:d1:d7:93:39:1b:
                    18:f4:34:6e:a3:d4:41:d2:55:40:9a:2a:62:93:25:
                    15:f1:51:47:8c:b3:30:e6:16:aa:60:86:87:64:5f:
                    67:17:42:0b:7c:24:23:f5:29:89:5c:4c:a4:99:0a:
                    d7:24:4f:cb:e0:10:9b:53:3c:b4:85:05:9c:96:f9:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:97:33:6B:6B:E8:4E:DA:21:3B:97:BB:32:80:C5:72:0A:EA:BF:5C
            X509v3 Authority Key Identifier:
                keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:30:5b:76:ea:23:6d:c8:29:7c:97:68:6d:ae:bf:33:60:db:
         7c:ca:63:75:9b:7b:bb:3b:b4:38:bf:18:22:42:3f:46:77:57:
         12:cc:05:4b:15:4d:a6:3f:16:f1:d6:24:fc:a1:f7:35:14:fe:
         4e:ad:83:15:9f:b5:d2:85:a2:40:62:f4:60:c4:c1:7b:66:c3:
         74:1c:ad:12:05:24:0c:78:e7:e4:29:4d:82:36:af:da:26:58:
         f6:34:5b:97:e2:81:93:07:6b:57:8f:da:63:7c:b6:91:29:9b:
         10:f8:5e:30:79:20:62:db:44:2e:16:7a:90:82:5d:ac:0c:29:
         75:64:e6:50:95:a5:86:87:20:0a:c9:99:d5:17:6d:b6:f7:a5:
         90:88:f3:82:13:89:64:17:16:55:39:aa:b6:59:c9:39:cd:4e:
         66:18:4b:33:66:b6:d6:c3:0b:27:a5:30:d3:2f:f5:79:23:0d:
         2b:0f:a6:6e:a6:cd:6c:d2:86:74:40:39:a5:54:e1:93:54:cd:
         fe:5b:42:eb:18:82:5f:d1:08:f1:bd:ea:a9:34:d6:2e:32:68:
         a3:66:cd:f9:4a:0e:c3:6c:19:2c:8e:8a:17:af:24:d4:9e:e5:
         b5:02:24:67:b4:6e:0d:fe:27:97:40:66:c0:82:07:96:02:a0:
         88:ab:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:18:52 2024 by rpki-client on console-fra.rpki-client.org