Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File:                     D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier:          m0hrAKGgnV+wmTggICXMnl0wNKoIIx+klfPiCe+N+ZY=
Subject key identifier:   0E:C6:77:97:B2:3C:3A:25:C7:F0:15:7B:3E:2C:C2:74:FA:93:A2:BF
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer:       /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial:       018F51DB397B248F3A12CA01A278C6FE80AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number:          0817
Signing time:             Tue 07 May 2024 07:01:12 +0000
Manifest this update:     Tue 07 May 2024 07:01:12 +0000
Manifest next update:     Wed 08 May 2024 07:01:12 +0000
Files and hashes:         1: 43ZgZiYXx0zR1wkgRVeO849JEEo.roa (hash: cDQTL2+xBhMlz76u3BpBMD8cdGVcIer+bJRQoEBzS20=)
                          2: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: W0MIh5kElytEfU5pmKHIywqiSL4tZPSPw49g/3vaKeQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:db:39:7b:24:8f:3a:12:ca:01:a2:78:c6:fe:80:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
        Validity
            Not Before: May  7 07:01:12 2024 GMT
            Not After : May  8 07:01:12 2024 GMT
        Subject: CN=0ec67797b23c3a25c7f0157b3e2cc274fa93a2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:8a:c6:e7:93:01:8f:21:fc:28:33:88:8d:
                    bc:f0:18:6a:36:03:61:6f:df:e9:82:ba:0f:37:fb:
                    86:7e:01:8e:eb:05:36:b5:0a:ce:7c:5b:aa:f6:5f:
                    84:d7:f5:f3:c5:9b:a4:58:fc:ad:a2:cf:17:36:c6:
                    e1:a7:e5:80:01:56:90:59:6a:55:d3:f7:52:fa:cd:
                    41:f9:47:0d:e7:d9:4a:c8:78:be:50:4f:fd:aa:cd:
                    d8:85:78:e5:e6:3b:da:98:59:b0:5f:12:1e:f2:97:
                    b2:b4:b7:ae:b3:34:9b:08:60:f1:56:10:7c:8f:01:
                    c1:c4:36:22:f8:35:01:b1:b9:7d:d2:d0:5b:8b:58:
                    bd:ae:bd:ad:f7:a3:85:51:9b:11:8f:e6:ad:37:15:
                    5a:1f:92:b1:af:5a:6a:55:21:f7:3b:46:35:14:49:
                    35:f8:d7:37:7a:6b:2c:fa:3d:fc:4f:a3:ce:87:76:
                    4b:5e:95:ce:ee:e6:08:7d:04:45:99:85:27:ea:e6:
                    19:8e:32:ae:f3:40:ba:29:5e:e6:b5:7a:ed:c0:be:
                    4c:98:78:5b:df:98:59:a1:76:ad:8b:a7:ac:44:5c:
                    62:ca:4e:40:ff:d4:53:9f:4e:4e:b6:a2:e1:0a:51:
                    5f:bd:ce:e0:9e:a9:fd:0d:2b:f8:7a:af:86:af:b2:
                    58:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C6:77:97:B2:3C:3A:25:C7:F0:15:7B:3E:2C:C2:74:FA:93:A2:BF
            X509v3 Authority Key Identifier:
                keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:31:50:54:a6:23:ea:81:a3:8e:6f:86:7e:ca:d3:2e:1b:c2:
         5a:95:a5:95:96:f0:a0:c5:c0:a3:b9:f2:06:23:6e:16:ca:a1:
         99:33:1c:2f:d1:51:68:94:9c:a6:72:00:01:df:05:cb:d1:ba:
         3a:5b:fd:c4:8c:30:e9:88:d4:79:25:0f:66:47:7e:83:ef:be:
         aa:93:88:9a:74:2e:e8:89:f1:c0:68:1d:5e:99:30:05:ea:38:
         b3:42:d9:34:8b:01:a5:a0:db:e6:51:2d:99:b2:95:97:ae:a5:
         8b:a4:6f:1a:77:a5:2f:69:5e:2b:a5:13:12:1e:b3:6b:47:db:
         25:fb:15:12:25:06:92:2f:99:52:18:c4:39:cf:3b:ca:f9:d7:
         78:2d:d6:c8:cb:29:04:27:76:03:06:3a:92:80:32:52:c2:05:
         1b:f7:29:f6:0e:67:51:9b:a2:23:c2:bd:aa:10:db:b5:0f:60:
         4f:08:71:5a:81:98:96:c8:88:61:35:3a:3e:25:7d:d6:d5:6b:
         9e:22:80:2a:6d:7b:40:94:2e:ce:1a:d5:56:93:17:02:83:27:
         64:03:2a:7e:68:d9:8f:be:2c:58:a7:61:1e:c2:b6:ff:67:53:
         4d:2a:fb:d6:10:20:8b:08:82:e2:7d:54:8a:7b:8e:55:c7:2c:
         6f:88:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:11:26 2024 by rpki-client on console-fra.rpki-client.org