Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File:                     dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier:          FBz++D7w8KXb1LEcA5uD6g2kHBoYEmN9fqn5Hdo5NyE=
Subject key identifier:   7D:DE:00:B2:95:DE:38:13:5E:4A:93:85:94:AF:4C:62:B4:EC:94:32
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer:       /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial:       018F87B65421249EEFC0652ABA415ECA1716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number:          0130
Signing time:             Fri 17 May 2024 18:00:24 +0000
Manifest this update:     Fri 17 May 2024 18:00:24 +0000
Manifest next update:     Sat 18 May 2024 18:00:24 +0000
Files and hashes:         1: VMLmv6_KQOMYqpT9GJsdJ_JRNnk.roa (hash: v1uGCoEjm/ouB+1ArHuT5FJOKFxID208UwFTeKOmFrU=)
                          2: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: jY3yg4jPRt7TYNbZM+sPgS3oueFTGy/PIU9UCI7n9gg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:54:21:24:9e:ef:c0:65:2a:ba:41:5e:ca:17:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
        Validity
            Not Before: May 17 18:00:24 2024 GMT
            Not After : May 18 18:00:24 2024 GMT
        Subject: CN=7dde00b295de38135e4a938594af4c62b4ec9432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:27:ef:10:e7:03:ab:7c:15:51:a9:cb:05:
                    5b:f9:b9:a9:20:ab:12:d6:56:db:e9:d7:a7:47:68:
                    8c:a9:36:6f:0a:c0:78:07:8c:f5:62:78:2a:c1:a0:
                    81:5c:38:d7:6e:34:62:94:29:f3:f8:38:fb:8d:54:
                    6f:58:a2:f2:db:dd:d4:a4:67:0a:34:fd:65:aa:41:
                    aa:ca:2a:76:2c:a4:85:e4:ef:c3:56:1d:bb:00:3e:
                    14:2b:99:d1:64:bc:d1:6d:35:31:7c:ca:7b:6a:e7:
                    06:25:7a:4e:66:e0:dc:e3:ec:d6:9a:f7:ff:99:28:
                    eb:a4:43:30:26:c2:44:05:42:d5:da:5f:e3:7e:0f:
                    03:81:99:20:f0:96:c8:6e:9a:bc:d7:a2:11:66:2d:
                    3c:79:93:9d:62:f4:2b:70:7b:73:8c:2c:de:12:0f:
                    ef:f0:85:5f:13:f4:d3:2a:9c:9f:ca:97:7b:e0:fd:
                    bb:15:2f:a8:c8:99:af:1e:9a:ad:e8:99:7c:a2:58:
                    66:b5:00:0b:89:ea:a6:a4:a2:bb:ed:bf:18:35:13:
                    6f:cc:aa:ad:3d:33:93:ba:6e:4a:fe:4a:8d:0a:7b:
                    b7:f5:ed:6d:ac:7f:82:21:d4:ba:a7:ba:49:3b:ac:
                    96:e1:8f:e0:cb:44:ae:a9:bc:6e:10:0d:12:9e:58:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DE:00:B2:95:DE:38:13:5E:4A:93:85:94:AF:4C:62:B4:EC:94:32
            X509v3 Authority Key Identifier:
                keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5f:56:86:e1:fd:de:72:31:d7:4b:c6:a3:d0:8d:35:07:6c:
         ed:e8:2f:74:3a:fe:40:a8:66:14:03:89:5e:20:51:c9:42:86:
         d2:7c:f8:4e:c2:1c:72:06:a0:cd:ad:da:a3:51:2b:41:e4:6f:
         54:04:5f:79:1a:8c:24:c8:58:91:01:dc:4b:f4:d5:27:7b:aa:
         35:a4:12:c7:cb:e9:5c:59:c3:93:aa:76:ce:55:31:f0:5a:17:
         c2:f3:30:eb:fa:71:5f:2d:ca:49:d9:da:43:48:45:0b:6b:eb:
         e4:3e:e3:67:9c:1d:84:fd:10:ae:52:2c:6d:94:01:27:89:c6:
         ab:d1:65:35:dc:2c:fc:31:b7:2f:ea:89:eb:aa:ff:da:4a:aa:
         18:bb:fb:73:bc:0e:b2:d3:46:22:6f:88:0a:d9:f9:a4:95:a1:
         5c:ee:86:d1:7a:b9:f1:30:f2:da:e7:ba:14:12:0c:ae:40:92:
         cc:b0:e2:bb:0e:85:55:1b:7f:dd:67:26:50:fe:35:0e:4e:a2:
         6e:ff:63:b9:e0:24:00:e0:94:bb:97:4c:5f:d2:3a:71:5a:88:
         58:9d:2f:72:1d:bf:7c:7b:32:6d:8e:fa:16:c0:3d:81:8f:82:
         cc:90:ec:82:f4:55:f6:11:79:da:5e:4d:e2:3a:0a:79:82:93:
         69:45:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:18 2024 by rpki-client on console-fra.rpki-client.org