Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
File:                     o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft (raw, json)
Hash identifier:          FESs3ujD+/Vu9OSnYYpEC5gEGJj+gH/1MDkT5jOs4OQ=
Subject key identifier:   41:7F:E5:59:7F:75:7D:BD:18:6F:49:46:EC:B4:11:46:D6:E8:AC:41
Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
Certificate issuer:       /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Certificate serial:       018F97CE2E5B0EA8CAC0187FBF9059B31763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
Manifest number:          02DE
Signing time:             Mon 20 May 2024 21:00:22 +0000
Manifest this update:     Mon 20 May 2024 21:00:22 +0000
Manifest next update:     Tue 21 May 2024 21:00:22 +0000
Files and hashes:         1: M_Ne64yUsvnXCkOWKwcjEFI4cJY.roa (hash: iGsMbUcGGo7BhT0oBE/jghZc4jxnGwl7CEhzlo+QnuY=)
                          2: o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl (hash: RA/2D+3wJSdA4spC7nCZX/Vr1LZddzWfcwfF1ZE8qQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:ce:2e:5b:0e:a8:ca:c0:18:7f:bf:90:59:b3:17:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
        Validity
            Not Before: May 20 21:00:22 2024 GMT
            Not After : May 21 21:00:22 2024 GMT
        Subject: CN=417fe5597f757dbd186f4946ecb41146d6e8ac41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:29:6a:68:2a:ef:ea:6b:96:ee:44:7c:6a:
                    cd:53:5f:aa:25:f3:94:95:af:42:44:dc:de:8f:a6:
                    03:48:fd:8e:65:b9:08:eb:6c:bd:7f:ec:42:9c:8f:
                    12:b2:87:0d:b9:ad:e9:04:42:42:d3:8e:7c:bc:15:
                    68:dc:1a:8c:3c:96:b0:04:3d:79:b9:90:0e:a5:ed:
                    d8:15:16:9b:00:cb:2e:5b:4f:00:34:b8:f9:cd:ed:
                    34:e2:34:e2:c2:c9:c8:b5:4a:57:35:3c:8a:73:92:
                    3d:7f:a1:42:d9:fd:57:10:29:d4:8c:24:25:c2:fd:
                    91:63:e2:c2:b8:99:3d:c3:30:e0:b7:9f:f2:56:e0:
                    32:d7:40:a8:8c:cf:d8:a8:8e:59:2d:cf:10:88:48:
                    33:8a:30:72:6a:d6:cf:cb:cd:56:ee:40:c5:67:21:
                    9d:b6:34:bb:d5:eb:79:eb:ef:91:7b:c7:00:1a:14:
                    67:7c:8e:3e:7c:86:76:7b:4b:67:5a:a8:cb:c7:e1:
                    8e:05:b4:78:66:e3:53:6c:12:75:e2:82:63:de:20:
                    47:31:2d:fb:bf:be:5a:c3:0b:fd:1a:b5:3e:4b:cb:
                    5c:de:a6:14:17:94:e6:d8:ed:3d:d7:6c:aa:1d:21:
                    7a:47:cc:f2:46:8b:dc:84:dd:8a:96:35:d6:bf:df:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7F:E5:59:7F:75:7D:BD:18:6F:49:46:EC:B4:11:46:D6:E8:AC:41
            X509v3 Authority Key Identifier:
                keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:02:12:a8:cf:a9:73:a1:43:7a:b3:5d:3e:eb:4e:16:f3:46:
         ae:e5:5b:2a:4d:60:f7:53:ab:c9:db:10:50:f7:09:b9:32:41:
         b2:9d:e2:64:9c:68:c5:be:ef:ff:c0:62:06:20:61:12:8f:88:
         71:97:a7:84:45:48:f3:c3:39:3f:ce:e2:81:40:7d:b8:fd:80:
         c6:c0:aa:02:96:36:1f:08:46:ec:b0:b4:28:4c:c7:dd:80:ae:
         db:11:7a:66:90:28:6e:1c:67:7b:26:d2:f0:40:22:07:4e:6a:
         73:87:26:2e:de:37:a3:02:1b:3a:b9:e6:1b:47:ed:f2:2f:36:
         bc:47:35:7d:3a:c8:14:db:a3:75:65:a0:29:92:c1:ba:e1:2b:
         a1:4e:88:69:db:31:5f:94:9f:0d:eb:95:66:77:8b:ec:49:45:
         cf:03:8c:7b:e4:23:2f:65:6a:f2:08:19:65:ef:1a:3f:db:02:
         e0:26:b5:a3:b9:e8:29:a8:52:e8:38:bf:4c:39:9c:55:81:33:
         00:26:fd:ff:ba:cb:53:66:b4:f9:35:eb:34:40:e0:fe:eb:5c:
         a3:2f:9d:00:4e:58:68:e4:7e:e9:ab:80:a4:f6:89:5e:00:16:
         5b:c5:f5:58:33:8e:ca:09:01:03:2b:8c:c7:36:2f:22:9d:fb:
         23:48:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:43:44 2024 by rpki-client on console-ams.rpki-client.org