Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
File:                     gafOi6y-zusW9gC2B9G_0IAzswI.mft (raw, json)
Hash identifier:          9pTqAXYDMneBxmU9OznB5qIICo7ye2DXImMBfNh2PjQ=
Subject key identifier:   7E:7F:72:FE:57:C7:13:60:21:E9:A3:E9:6E:F4:13:46:FA:76:59:5A
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Certificate issuer:       /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial:       018F8748FEB4878DA60D2416C65805C52464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
Manifest number:          0534
Signing time:             Fri 17 May 2024 16:00:58 +0000
Manifest this update:     Fri 17 May 2024 16:00:58 +0000
Manifest next update:     Sat 18 May 2024 16:00:58 +0000
Files and hashes:         1: Z-jeEOVQfRNOTiPZ7sRto3L5xP4.roa (hash: pG/PoK7JAUeofs/wifs8itpvWIy2wu5X0VQVXTtu/1M=)
                          2: aRHWBpLTknT-Uw3yjoXIUqqXk1g.roa (hash: 4k9FAHalXSJzISYqBBDcM0r9fvxbYEHk8yd+BExW/y4=)
                          3: c1r0yUGUBAjz0gZ6aam7iWs7Pqk.roa (hash: Pkk8wQyw+FfNufIehtC1Pf2EfwrRTRXgi4qExEbpxZw=)
                          4: gafOi6y-zusW9gC2B9G_0IAzswI.crl (hash: eIpr4hjvGZtTwvOyt+4T3OtPiJ7di0QpWeWZSDJgOuM=)
                          5: h2enuMtI_dmNgc2x2Z3TqgBHb1I.roa (hash: QWIzNuk+JSvwl/zfyNmVOsrmkhVMPzXTsZVwUFQMwuI=)
                          6: jQxU70tNCkESDvzx9MfjkCcFITY.roa (hash: suk2U02U9qaMFYn71p6wtGvEDO0JALocFyeXiWekq/Y=)
                          7: vyo0pscUVnahoJ4kDP0Nb2UHb5o.roa (hash: 2utD2lnHIDyMuPJQEh84UsqMmBs0pc0gAt0OYYy1EZ0=)
                          8: xrmI2lOqw4vwh9asj_fS8nm8zOw.roa (hash: dhsYNtAvgceEPO6AQvmBZwT1HzUmAMfIkuvuxbqcbvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:fe:b4:87:8d:a6:0d:24:16:c6:58:05:c5:24:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
        Validity
            Not Before: May 17 16:00:58 2024 GMT
            Not After : May 18 16:00:58 2024 GMT
        Subject: CN=7e7f72fe57c7136021e9a3e96ef41346fa76595a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:05:8f:2a:1a:ad:44:c4:27:10:e7:ae:1f:
                    d9:0d:de:75:4e:fc:5f:85:f5:f5:9f:42:16:03:3f:
                    a9:e1:7d:98:35:64:7b:52:45:04:f2:67:5c:93:3d:
                    6a:f5:ce:3f:26:35:86:68:fe:65:db:c1:4b:ec:ab:
                    63:50:7d:3d:4f:e8:7b:3b:7b:29:0e:4d:fb:d7:14:
                    a8:20:15:29:78:87:ad:d3:8c:d3:7a:fc:08:8e:41:
                    93:5a:80:93:6b:33:89:c8:1a:d5:ed:62:25:a6:f7:
                    3f:60:18:5b:b4:f0:89:1a:bb:cb:be:21:05:92:9f:
                    08:11:81:65:cf:c0:bd:8a:44:50:29:d4:c5:28:35:
                    ac:69:db:83:94:f0:2e:42:e4:1b:43:c2:d6:d6:91:
                    d4:19:c7:a1:39:cd:27:02:98:c6:b7:11:7f:c6:dc:
                    2d:b0:c4:e2:c3:cc:a4:1b:c2:17:c6:06:e4:ec:9b:
                    d7:16:d9:63:b9:fd:55:6d:53:5e:4f:57:84:c4:a3:
                    a8:40:3a:80:0c:ba:1c:50:39:d9:39:a4:a5:a4:3b:
                    ab:ed:dd:c2:60:61:68:73:a5:0e:f0:d0:f5:4b:73:
                    3a:79:be:1c:a5:82:78:37:bc:bb:5b:bb:84:85:03:
                    1f:ca:f4:65:c9:ee:27:e8:b7:0d:ca:33:e5:ff:5f:
                    b9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7F:72:FE:57:C7:13:60:21:E9:A3:E9:6E:F4:13:46:FA:76:59:5A
            X509v3 Authority Key Identifier:
                keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d7:9d:d2:00:0f:60:14:b0:cb:51:66:63:4a:ec:ca:41:c7:
         1b:52:45:71:7f:9f:ce:ab:82:2b:b7:22:4b:d2:63:97:30:05:
         f4:46:fb:04:41:88:c1:83:3e:3b:f2:67:51:9d:7f:00:cd:e9:
         f2:a8:25:dc:f7:0f:e3:e0:37:8d:6c:ec:ab:21:7c:0f:2f:4f:
         04:dd:ef:9b:00:27:6d:06:fe:0b:a7:21:39:ff:c9:9e:6f:73:
         2d:d4:e2:9f:59:9c:de:84:5f:64:44:e1:84:50:8b:dc:05:6d:
         ec:5d:51:bf:77:15:d6:62:e1:39:8a:bb:cd:12:39:52:e7:0e:
         0a:45:f3:d8:74:c4:98:32:be:af:71:30:e1:f7:b7:bc:9c:73:
         14:78:96:c3:3b:64:e9:6f:1f:ef:4c:9a:22:1a:64:12:62:8d:
         d3:d8:0a:c7:63:4f:90:eb:0f:b1:de:54:79:42:24:19:31:db:
         44:d3:b9:7e:ec:af:ab:6f:e7:fa:54:ca:c2:20:83:2a:80:e6:
         09:12:a1:37:d7:f9:c2:8a:60:f6:4f:74:e3:9c:66:60:d1:0a:
         b0:a0:c8:94:de:08:b1:52:dd:fe:55:ee:2d:2a:35:6a:cb:ae:
         10:a1:64:57:96:45:1c:6f:fe:8a:ae:a1:fc:41:0a:21:ca:89:
         9c:bb:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:04 2024 by rpki-client on console-fra.rpki-client.org