Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File:                     fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier:          os2QsWoi8OA+IM/DmyUW54zjM+9d9Z9xHb9BuJryWnI=
Subject key identifier:   A7:F5:88:D8:1B:A9:E9:62:38:0E:D8:40:4B:36:88:79:83:1B:52:2C
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer:       /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial:       018F874AB4F5895642A8F6BC3B188879A1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number:          085F
Signing time:             Fri 17 May 2024 16:02:51 +0000
Manifest this update:     Fri 17 May 2024 16:02:51 +0000
Manifest next update:     Sat 18 May 2024 16:02:51 +0000
Files and hashes:         1: J3felz2QutEZIqm52BySKt44WhY.roa (hash: OSE9/OKab0TD8jDx2ZccFVYTms50ub+hSqKVrRfb7ko=)
                          2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: gSUplcEM6ls72+/s5wTzP9136ygyFJuXJ0QQFixj6qM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:b4:f5:89:56:42:a8:f6:bc:3b:18:88:79:a1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
        Validity
            Not Before: May 17 16:02:51 2024 GMT
            Not After : May 18 16:02:51 2024 GMT
        Subject: CN=a7f588d81ba9e962380ed8404b368879831b522c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:a4:bb:28:54:ba:67:c0:33:5e:23:6d:cc:
                    69:18:77:76:fc:e1:6d:02:ec:d0:28:9a:26:35:7d:
                    c1:41:e1:a5:d6:74:01:98:d7:26:99:4d:70:a3:aa:
                    17:39:4c:79:51:a9:5c:43:b4:5a:60:c7:2d:a5:1a:
                    cc:b9:8b:09:1c:86:5a:eb:77:81:e3:f4:fb:38:cb:
                    e5:ed:20:c4:2a:d6:24:0c:81:d1:f0:b4:ca:6b:a3:
                    1f:8f:a8:54:52:88:92:03:3c:27:bb:ff:cf:3b:a0:
                    96:47:b2:c2:34:28:c1:58:ca:98:c9:a2:67:af:0d:
                    5d:8f:02:44:47:60:4f:0c:7b:2b:52:14:f9:e1:42:
                    5b:fa:93:06:83:6b:60:b2:0d:f1:7a:64:cc:0c:13:
                    7a:ec:fb:d8:f2:fa:03:ca:9b:4f:93:71:65:96:fe:
                    39:86:d8:89:52:6b:de:3b:f6:bb:7f:96:03:fe:ee:
                    e7:bc:14:72:ff:3c:dc:de:0a:c9:8e:2d:79:b0:1b:
                    19:ce:dd:c8:fb:1b:a1:e4:ed:e6:cb:16:4e:cf:d6:
                    b1:f8:58:31:8c:84:ed:68:6e:74:d6:8f:28:4f:1f:
                    d0:95:54:03:27:3c:0c:28:d0:f3:6f:da:3c:15:2a:
                    3d:d8:eb:3e:aa:6a:7a:48:a2:18:f4:93:1e:bb:9a:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:88:D8:1B:A9:E9:62:38:0E:D8:40:4B:36:88:79:83:1B:52:2C
            X509v3 Authority Key Identifier:
                keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:25:61:0d:ff:00:23:c2:3d:b3:3a:4c:75:13:c8:f0:2d:
         c2:3f:75:a2:89:a8:94:d3:ce:ca:0f:36:e7:6a:9a:0f:2b:7b:
         f0:59:44:63:38:a8:93:09:bf:96:1e:e9:37:7e:55:9f:cf:6f:
         61:11:0d:20:44:e4:b1:5b:57:4c:42:d1:68:22:4d:d5:f3:db:
         56:af:e0:3b:99:4d:0f:ff:dc:fd:bf:da:ca:61:07:64:c1:84:
         6b:76:b5:92:0d:e2:f3:cd:e6:19:61:ec:2d:a0:4b:b7:df:ba:
         d0:df:8d:48:8e:b0:25:83:e8:2b:54:bc:20:49:90:45:aa:b8:
         e3:f4:a8:2d:00:a8:04:78:b6:59:19:41:15:a7:24:9e:74:3b:
         5b:cf:f9:c2:0a:e8:83:e9:55:46:ce:61:c0:92:ff:4b:bb:1a:
         a5:20:5c:2a:02:99:01:33:13:84:56:ce:c6:51:e7:26:73:80:
         29:56:d3:02:ba:0d:65:fa:ed:95:be:8d:66:c3:6c:19:e8:2c:
         3f:bb:f3:ce:22:49:e1:ea:f7:a5:b4:29:ce:f3:cd:5a:b0:76:
         07:99:ae:dd:50:0d:3a:35:8c:df:2e:c4:53:70:cb:f0:ff:41:
         c2:74:e2:80:ed:a5:ad:c6:78:75:cf:d6:bb:7e:75:1e:e7:9f:
         aa:e2:b7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:35:54 2024 by rpki-client on console-ams.rpki-client.org