Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File:                     mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier:          5LYPUEvoQUyXmwqGNI/8UY1gxUTuiqHo6f/wxn//+Tg=
Subject key identifier:   58:51:A3:35:C3:84:E2:97:E1:3F:FF:74:35:F3:F0:17:96:50:37:46
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer:       /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial:       018F86A3D13A2C2E26908CF2670D1DB98081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number:          0B17
Signing time:             Fri 17 May 2024 13:00:33 +0000
Manifest this update:     Fri 17 May 2024 13:00:33 +0000
Manifest next update:     Sat 18 May 2024 13:00:33 +0000
Files and hashes:         1: TH0oE1oNXe1wilD_b9t4Ms6Xk2U.roa (hash: oLQqz1I0tcwIYa5vAN7hd/fC01SoL5PWmImJO/ofdCw=)
                          2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: +NxPhy3YaRd+VUFPirZgdh5Vl4sjXpiNhTeKnON1nV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:d1:3a:2c:2e:26:90:8c:f2:67:0d:1d:b9:80:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
        Validity
            Not Before: May 17 13:00:33 2024 GMT
            Not After : May 18 13:00:33 2024 GMT
        Subject: CN=5851a335c384e297e13fff7435f3f01796503746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:26:9e:42:09:de:87:f0:3b:a7:d1:b9:f5:
                    ed:b6:9b:95:d0:69:8d:a0:9e:4c:96:2a:bb:c3:06:
                    7c:e4:7c:84:39:eb:ee:fd:2a:b7:b5:03:24:57:ab:
                    7d:1f:ca:c7:81:f2:7a:f3:24:c1:57:11:bb:7e:eb:
                    82:42:b9:c9:77:c2:d0:ea:30:46:0a:50:f1:78:04:
                    ba:66:87:1a:cd:8f:54:14:b1:1b:09:22:62:d9:1c:
                    d6:3e:20:9e:23:aa:1b:db:75:22:6e:d9:2b:ab:3f:
                    67:fe:f6:98:a0:84:9f:3b:33:61:5b:15:18:11:82:
                    36:c7:d7:f0:e0:bf:ca:dd:8d:0a:f4:17:f9:c6:c3:
                    d4:03:60:ed:48:bc:59:aa:c7:26:fb:14:ab:8f:7c:
                    0b:9e:be:a1:4d:26:3f:95:68:81:ae:2a:a9:16:bb:
                    de:cc:3a:4c:94:f6:f1:61:45:ee:21:69:c8:76:07:
                    12:54:82:e4:1d:d2:18:10:cd:ea:5b:55:8d:52:8d:
                    a7:14:d0:f5:0d:7c:d8:98:e9:60:7b:50:d8:a3:62:
                    ab:64:c0:fb:4c:6c:0c:e4:83:b6:50:2d:61:4a:9f:
                    e3:70:27:43:8a:86:db:40:3f:50:2d:61:7f:63:b2:
                    0b:fa:4a:31:90:88:7b:88:62:4c:65:db:44:04:22:
                    b7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:51:A3:35:C3:84:E2:97:E1:3F:FF:74:35:F3:F0:17:96:50:37:46
            X509v3 Authority Key Identifier:
                keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2d:0c:e7:34:59:4f:10:78:f1:46:2c:3f:5e:12:95:6d:4c:
         47:9a:b9:35:ab:8e:50:e5:1d:2f:cc:7e:d2:26:0f:28:d1:f3:
         08:c2:23:ec:ef:53:b1:64:e1:4d:2f:bc:51:46:c6:92:85:78:
         33:4c:07:2a:e8:c9:db:4d:7b:6c:9a:c6:9d:65:7b:62:48:f2:
         b1:32:c0:49:cb:1c:c0:5e:37:b4:88:5e:5d:22:a7:0a:11:b6:
         9f:55:4e:e8:3b:73:2f:86:56:2e:80:01:c8:5c:e6:2c:fe:97:
         2e:82:19:55:1b:2f:bc:d2:09:27:4a:8c:63:e4:8b:73:89:09:
         71:f9:27:ba:01:dc:8e:e8:60:75:1a:be:00:a8:ab:6f:54:f3:
         40:29:2f:76:cd:a8:01:c3:a4:eb:b4:a1:b7:bb:ed:91:65:0e:
         9c:81:a6:74:72:de:bc:28:80:cd:3f:92:fb:0d:4a:8f:5d:ba:
         98:b8:2e:ac:cb:81:61:ac:de:b7:b8:f0:c9:57:22:d8:c2:fc:
         a5:4c:c0:17:b4:fb:03:dc:f8:b0:63:23:cf:60:c3:c4:1d:36:
         34:2e:31:f3:e9:bd:9d:04:25:5c:5b:01:fc:74:3e:e0:b4:b9:
         97:34:e1:fb:3c:88:08:8e:d3:a0:d3:51:95:ad:2d:98:89:e2:
         ce:34:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:52:04 2024 by rpki-client on console-ams.rpki-client.org