Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File:                     XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier:          C5JbnidE7l36Pm1SmXtr80okXCadLNPHRP96a+48dTA=
Subject key identifier:   36:4E:C0:CA:5D:DD:D4:77:D3:4E:19:8C:13:DC:A3:35:7D:1E:6F:63
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer:       /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial:       018F87484E4E2A434A2A683C91ED78641E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number:          0137
Signing time:             Fri 17 May 2024 16:00:13 +0000
Manifest this update:     Fri 17 May 2024 16:00:13 +0000
Manifest next update:     Sat 18 May 2024 16:00:13 +0000
Files and hashes:         1: 50HXEtGJNL4Tut9pNJwL9NsRINs.roa (hash: 3qrJPLje4BgCzDvCc0XrFYNXv5+vf8XyKt4rXqqT12w=)
                          2: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: 3cjcCZRHuTMrA7MTkPpr6sLr6pYguKf5aWFepky3DFg=)
                          3: f1wnXB5KERqN1r03ElFYqIoFH18.roa (hash: CyIQIxlYTDKKlbgbCZo5m7ef73NWff7BgC1TtzjJff0=)
                          4: qm4XMXsErGpremVmdibloxuExA4.roa (hash: DlyR1M4FJXXfC5CLlGBHR50SLmMIUCTEJCrnSj8nslM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:4e:4e:2a:43:4a:2a:68:3c:91:ed:78:64:1e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
        Validity
            Not Before: May 17 16:00:13 2024 GMT
            Not After : May 18 16:00:13 2024 GMT
        Subject: CN=364ec0ca5dddd477d34e198c13dca3357d1e6f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:ec:64:09:13:b2:b6:dc:61:37:e3:4b:54:
                    8b:ee:0f:93:bf:2e:b6:d5:cb:5a:69:45:0f:44:48:
                    0b:d9:6a:2f:c0:9b:dc:64:e2:b5:78:1b:68:43:99:
                    30:1c:d9:d0:9f:45:0f:c8:d3:5c:96:80:0f:5b:b2:
                    a1:d8:a1:aa:89:fc:63:da:42:39:6f:1d:60:0b:37:
                    0b:db:7a:7e:e4:a0:23:b7:52:fa:e1:58:6d:ef:b9:
                    ce:f4:01:c0:cc:5e:e6:98:ca:fc:cf:3a:7f:0a:93:
                    72:3e:45:8e:fe:83:a9:86:c8:47:e2:8f:42:b4:e9:
                    16:ae:71:b3:f3:93:06:f3:ec:6c:e8:ba:e8:20:29:
                    12:65:5e:ba:3b:05:6b:c7:a9:aa:67:09:b2:66:2f:
                    32:bd:f9:20:0a:f1:98:4d:85:cc:6a:40:76:85:ab:
                    3f:24:d6:f0:aa:fd:b9:99:3a:2f:fc:51:bb:b6:38:
                    6f:70:98:02:4d:ce:ef:e3:a3:4e:fd:be:85:cf:4d:
                    c1:ad:bf:6e:34:19:93:36:18:86:ef:ea:73:0a:a9:
                    b0:9a:a2:5f:aa:e9:f7:ca:e2:57:08:9e:a5:a9:c5:
                    3c:47:90:da:ea:14:81:f2:e8:79:f2:38:2d:46:b1:
                    57:a5:58:18:f3:b1:dc:fe:6e:e6:ba:a8:35:56:2a:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4E:C0:CA:5D:DD:D4:77:D3:4E:19:8C:13:DC:A3:35:7D:1E:6F:63
            X509v3 Authority Key Identifier:
                keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6e:87:93:e9:84:30:c7:0f:eb:28:08:4b:3b:7a:e8:ef:b8:
         09:bd:95:ef:47:c1:7e:98:a3:09:53:65:42:34:47:60:b3:52:
         03:7e:1a:7d:2d:0f:cc:e1:05:6a:22:21:8e:ef:5c:92:f7:82:
         52:10:2f:b2:c4:eb:c0:67:7b:07:c4:43:3d:f6:95:ab:23:b3:
         c3:74:5b:81:b6:4b:92:09:6b:76:6f:99:4a:b2:46:7c:59:19:
         f6:5d:3b:04:be:1b:ff:ac:8d:69:3f:b3:59:a9:5e:29:81:65:
         e6:93:d4:07:17:15:f8:87:52:12:cc:99:1f:8a:aa:de:3f:5e:
         ff:9b:eb:2d:87:90:e4:8f:18:17:62:e5:6d:2a:5b:02:48:74:
         b0:14:05:3d:18:85:77:fb:6f:19:24:b9:58:d4:5d:99:33:56:
         7c:12:01:03:4f:51:e4:be:78:eb:51:ba:47:37:30:3d:18:e8:
         a7:e5:49:56:6d:e9:9a:12:78:97:77:ed:37:f6:b7:35:fc:0b:
         96:71:18:c6:eb:85:76:05:68:fa:48:c7:da:09:45:3d:5e:04:
         48:77:ef:fd:bc:e2:ab:1b:31:66:6a:f6:e2:3c:02:c9:55:18:
         63:c4:2a:77:9f:d3:b6:67:ce:82:34:35:d8:6f:4f:21:8d:f7:
         2d:25:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:20 2024 by rpki-client on console-fra.rpki-client.org