Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File:                     h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier:          jaTY6VHmGAgButlmFoOESpTfiHKISiQazh03Y2cUReo=
Subject key identifier:   E4:98:6A:0F:28:02:83:EB:F2:90:8D:E8:33:C9:F7:10:AE:CB:07:49
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer:       /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial:       018F87114EAFABC4429F313A5E026C1CD789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number:          04A3
Signing time:             Fri 17 May 2024 15:00:09 +0000
Manifest this update:     Fri 17 May 2024 15:00:09 +0000
Manifest next update:     Sat 18 May 2024 15:00:09 +0000
Files and hashes:         1: XvfSLjhoVhrDWlKhd4RiYCrFulQ.roa (hash: 2ezV8CQoOgrFf84zgF805ts2yAkrNGR0+Vkdd61ZSco=)
                          2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: inKLnL3Rq0LAOe0OgZkBKwl8u75j2HebB/afT6Tu0Fw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:4e:af:ab:c4:42:9f:31:3a:5e:02:6c:1c:d7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
        Validity
            Not Before: May 17 15:00:09 2024 GMT
            Not After : May 18 15:00:09 2024 GMT
        Subject: CN=e4986a0f280283ebf2908de833c9f710aecb0749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:af:d1:d4:ab:2a:91:80:44:00:e1:72:a6:
                    91:d6:b6:85:0a:b2:a5:cf:4a:07:4d:c0:94:8a:3c:
                    62:de:68:25:62:b1:cb:33:39:58:a7:87:49:f0:2c:
                    96:8c:3e:f4:43:5a:3e:8c:90:5a:37:3a:23:69:4a:
                    12:4a:b5:96:58:15:5c:bd:40:55:31:a7:44:e7:6e:
                    fa:a7:bd:1d:60:9c:28:14:4d:3d:28:92:67:2f:80:
                    8c:b7:95:e9:c8:d9:9d:6b:0e:17:e8:b1:c3:9a:d5:
                    6b:31:43:be:77:54:77:f3:4b:10:e4:9c:8b:97:2c:
                    2b:50:50:69:7a:3f:18:7d:14:c2:1a:82:82:e5:4e:
                    f3:7b:50:2a:b3:4b:d2:23:21:e6:fc:a7:18:bb:63:
                    81:01:1f:7f:03:cc:7d:22:26:e0:a2:b5:9b:7d:93:
                    dc:5c:3e:e5:95:c4:2f:21:7e:be:13:83:35:bc:6a:
                    43:fe:7e:fe:c5:7e:c7:13:15:de:e5:99:74:ca:b5:
                    1f:e2:19:23:5e:8e:9a:17:3a:bd:63:32:2e:a0:fd:
                    2e:8c:38:93:bc:6f:48:d7:45:9a:5f:73:29:d3:fd:
                    92:46:40:28:ec:7d:69:c0:3b:a9:f6:5d:bd:0c:df:
                    85:37:48:1b:08:fe:4c:e0:91:6a:89:3a:37:8e:50:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:98:6A:0F:28:02:83:EB:F2:90:8D:E8:33:C9:F7:10:AE:CB:07:49
            X509v3 Authority Key Identifier:
                keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:75:c5:d5:6f:07:6a:23:c7:69:eb:64:87:58:03:7c:05:
         ba:b8:0e:d1:96:85:a5:7b:cb:02:ee:9f:54:4c:aa:6a:71:e8:
         19:53:8a:67:0b:9f:1c:02:0b:2a:22:2f:bc:bf:c4:ae:57:be:
         c4:4f:33:ed:18:31:1d:53:ad:96:5f:67:9e:84:7e:a4:0f:9d:
         67:3b:05:30:2b:0f:39:96:d6:ed:cf:a7:a5:99:16:15:ff:f9:
         85:22:34:38:dd:31:6a:bf:a7:5c:bd:3f:0c:d6:41:d1:cd:a6:
         a3:51:6c:95:3c:4b:73:c9:21:3f:b3:33:ef:cd:d6:fc:12:60:
         57:d5:c8:3d:2b:81:53:98:c1:0a:f6:13:5f:5b:5b:2d:6f:86:
         cb:65:d8:fb:84:fb:cb:1c:02:20:46:3d:cc:13:89:9d:3e:7f:
         29:e4:6a:95:a7:2e:c0:8f:1c:8a:b7:75:8d:0a:cb:4f:40:6f:
         7a:bb:99:13:bc:87:7b:9c:96:02:ab:d5:a7:d9:9e:0b:22:92:
         db:26:21:cb:32:be:07:15:ce:f6:6b:58:e3:05:9d:13:c2:25:
         8c:6a:99:94:1d:4c:09:6c:1c:d7:85:24:6b:d3:69:d3:29:e6:
         26:80:8c:04:cd:7a:b8:06:ba:bb:df:9c:5d:99:9b:79:e3:df:
         77:c3:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:30:34 2024 by rpki-client on console-fra.rpki-client.org