Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File:                     8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier:          7DSJtsR75bOET2li/0JgTFhGBqF7R1WWG+qAAMYPzpc=
Subject key identifier:   06:1D:5D:AB:AC:51:F8:94:B5:0A:CD:FD:31:59:AD:B9:4E:C5:24:C6
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer:       /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial:       018F4079C7F8417CB9E69CF0C5037300099E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number:          0A43
Signing time:             Fri 03 May 2024 22:01:13 +0000
Manifest this update:     Fri 03 May 2024 22:01:13 +0000
Manifest next update:     Sat 04 May 2024 22:01:13 +0000
Files and hashes:         1: 5TTqix2iOKfjBahfXZZ-ML87goo.roa (hash: 0C2PsrUIBEtTRGUBR80N45H8dDWp/c6p/9E39F4htRw=)
                          2: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: LHbQspRtR3oABg69Asrf5toyECWPs++mSL149Od01dA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 14:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:79:c7:f8:41:7c:b9:e6:9c:f0:c5:03:73:00:09:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
        Validity
            Not Before: May  3 22:01:13 2024 GMT
            Not After : May  4 22:01:13 2024 GMT
        Subject: CN=061d5dabac51f894b50acdfd3159adb94ec524c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:6d:07:50:f4:3d:a5:07:b8:d8:0c:1f:40:
                    82:c9:d5:10:98:f5:da:cd:01:fb:3a:94:b0:43:c1:
                    8d:21:5b:71:4d:d1:37:46:c9:c7:21:72:44:22:f5:
                    29:94:3a:ba:4d:92:9e:a4:40:58:5d:55:e2:51:fa:
                    76:a9:c3:21:d9:b7:51:a3:77:91:1a:0e:2e:56:31:
                    c2:13:d1:d5:2e:44:b4:e8:99:3f:7f:14:6b:45:1a:
                    f2:92:b3:93:a6:b9:e4:64:b7:7d:5f:f5:ab:0e:f8:
                    bf:fc:83:e8:f2:77:da:37:bd:f4:a9:b8:6e:56:61:
                    88:f8:4a:8f:8e:5a:f0:13:ee:62:d4:4c:a2:15:8e:
                    cb:67:a9:40:af:12:56:9f:0f:b7:1e:d6:ff:8f:3d:
                    03:91:68:a5:08:d9:37:84:3a:cd:d2:a3:91:51:e9:
                    ef:c8:65:c2:7f:a8:4f:4f:89:83:d3:4a:df:82:6e:
                    fb:86:59:5c:95:70:cd:6e:a0:8a:5c:f1:4c:ef:ae:
                    c7:2b:53:5d:7b:fb:33:a2:d5:9a:3a:37:1f:e8:0b:
                    fc:33:5e:58:bf:ca:2f:3e:5b:63:a2:6a:2d:7b:1b:
                    04:c7:a9:ab:67:fd:95:a5:e9:c2:68:c0:8e:ba:0d:
                    62:b5:6f:5d:b9:20:31:56:89:30:78:35:c9:7b:84:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1D:5D:AB:AC:51:F8:94:B5:0A:CD:FD:31:59:AD:B9:4E:C5:24:C6
            X509v3 Authority Key Identifier:
                keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:bb:00:8f:3f:30:f1:16:46:6a:12:24:e1:a3:20:86:99:
         0c:84:2c:8c:84:c3:d9:f3:86:b9:2e:fa:5b:d2:dc:a5:6f:52:
         d0:36:3a:dd:73:94:6c:05:a4:a3:07:7e:d8:6b:46:61:12:29:
         a9:e7:de:22:50:3d:34:15:ab:ef:30:7f:85:6b:87:23:2a:c4:
         c4:98:76:6a:57:9c:58:28:1b:53:87:84:e5:59:5f:72:b6:ce:
         f9:9f:d1:9f:5c:d0:69:28:4c:cf:36:67:60:8a:dc:8e:15:71:
         53:61:19:05:98:1a:05:ca:7c:4b:98:73:bb:6c:e6:1e:58:ed:
         9b:56:e1:32:b9:de:aa:9d:8b:60:40:a2:21:09:de:3a:9c:ec:
         7b:dc:5d:3d:28:e4:e4:e4:61:dd:8a:6c:65:79:73:47:db:17:
         8b:4e:dc:1d:8a:74:69:bd:a8:46:b2:11:1f:d3:9f:68:33:3d:
         c6:8c:56:67:39:39:65:ac:60:53:75:ef:b6:c0:dc:1b:0f:67:
         ea:da:20:88:28:11:1d:1c:d1:87:06:60:c2:40:62:bf:13:a7:
         9d:bd:ab:93:ad:e7:5c:bc:c4:a4:bb:6f:3f:57:9e:a8:1c:42:
         b1:6b:61:07:5b:74:89:b8:98:f4:4a:26:8d:2c:dd:8c:90:87:
         e8:71:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:40:40 2024 by rpki-client on console-fra.rpki-client.org