Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File:                     XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier:          Gc3h2NZ6A9lMcZCgkQRHnOIITDXfXd31FNH87EPisto=
Subject key identifier:   E2:2C:EB:06:D9:05:0B:1E:7A:44:A8:93:E6:B8:3F:3E:88:39:C9:84
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer:       /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial:       018F8748C1AE700A9D198C1911EDE80FEDB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number:          0560
Signing time:             Fri 17 May 2024 16:00:43 +0000
Manifest this update:     Fri 17 May 2024 16:00:43 +0000
Manifest next update:     Sat 18 May 2024 16:00:43 +0000
Files and hashes:         1: SovXy98GLh6Q5VVfLYJBB7W7zgw.roa (hash: AAvbCkhBhxqKvDMz2aVyCslFO0ilsu/7PSEJAxZirSQ=)
                          2: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: 66DQ/Qpw3++i/3tne9xE9QHsQxzpq/A7APK3hDvRrVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:c1:ae:70:0a:9d:19:8c:19:11:ed:e8:0f:ed:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
        Validity
            Not Before: May 17 16:00:43 2024 GMT
            Not After : May 18 16:00:43 2024 GMT
        Subject: CN=e22ceb06d9050b1e7a44a893e6b83f3e8839c984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:5e:52:f0:5c:78:4c:88:91:f8:ce:df:95:
                    38:b9:3b:54:07:e4:64:34:ea:92:f4:3b:c5:83:dd:
                    d0:61:ff:e0:cb:40:94:74:93:0c:e0:a9:56:24:c4:
                    d3:b0:97:10:ab:54:64:da:eb:28:de:0f:40:22:a9:
                    d3:12:4d:ee:54:b6:99:c2:1b:52:5a:04:ec:2f:4d:
                    2e:31:79:b2:62:bd:88:23:f2:82:d0:2f:be:49:07:
                    03:88:67:4c:a5:16:9d:12:29:d5:b6:14:18:97:fc:
                    90:55:42:69:d5:75:6e:40:a2:6b:37:15:2c:a0:28:
                    12:0d:d0:4e:26:ba:9b:d3:62:13:3e:88:3a:50:77:
                    e0:61:cd:2b:27:ab:bf:0c:c5:69:37:ec:95:40:86:
                    d7:71:8b:be:4e:67:46:41:5b:2d:5b:a4:45:3c:76:
                    5c:0a:19:5b:cb:57:8e:2f:94:a4:b4:f2:42:ec:e7:
                    64:df:8d:da:92:78:ed:f4:d4:a9:9f:89:a9:24:7a:
                    21:63:f1:04:4e:52:b1:6d:f1:5c:80:35:d5:0f:79:
                    38:bd:47:3d:f6:92:78:7f:16:33:05:29:d0:aa:61:
                    a8:3f:1c:96:a1:80:26:c0:2b:94:a5:8f:89:d3:85:
                    05:62:7e:bc:53:bd:e0:19:89:74:77:69:29:c5:9b:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2C:EB:06:D9:05:0B:1E:7A:44:A8:93:E6:B8:3F:3E:88:39:C9:84
            X509v3 Authority Key Identifier:
                keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:1b:9b:65:38:eb:49:5b:36:ee:ba:5d:78:2e:47:89:f2:
         00:f4:45:db:ff:07:8c:89:d0:17:2a:f3:4e:c3:c1:96:91:34:
         7b:11:f6:ff:f9:55:4b:a1:49:d5:bf:42:3d:8f:25:a6:06:50:
         dd:de:eb:d0:67:ee:f8:a4:c6:97:fa:5c:6c:11:0c:5b:ae:af:
         6b:74:7f:c1:5f:8d:aa:c1:f3:a6:10:a8:a4:77:f4:98:be:28:
         af:b4:ce:27:11:7a:14:d1:bb:05:f3:9b:ed:f2:70:83:d9:5b:
         79:6c:15:af:83:fa:3c:bb:0c:41:80:f2:2f:56:d1:37:96:15:
         f2:dd:8a:22:56:8f:9b:69:cd:81:73:0b:c3:17:36:59:2f:59:
         6a:85:ab:cd:e8:9e:ae:cc:c1:84:26:7c:b7:5a:dd:d6:6d:81:
         01:18:28:a3:02:23:f6:bb:f3:b6:a1:a4:e2:77:a2:4f:8e:80:
         6f:59:37:77:f9:2c:7a:a4:4f:ea:38:ce:e5:fb:d9:4b:63:1f:
         5d:17:f0:6b:64:f6:dd:93:61:de:97:ab:c0:3f:e0:05:7d:e9:
         d9:1b:4d:a8:59:a2:58:8d:ff:ae:ae:f0:86:ad:7f:e6:82:ed:
         10:96:7f:46:cb:1d:12:9d:63:cd:20:75:cf:0f:ce:a5:c1:5a:
         84:01:9d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:48:02 2024 by rpki-client on console-ams.rpki-client.org