Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
File:                     cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json)
Hash identifier:          4lpFluNyEC0F/J5nF57iA/66cvEaP+j1E96f6jt4qmU=
Subject key identifier:   8E:E7:68:F6:D3:9A:02:58:BE:53:C4:88:F4:FB:B9:5D:1B:FF:51:62
Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2
Certificate issuer:       /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
Certificate serial:       018F885B2542F612FB21CFA9643DA48E6E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
Manifest number:          0B73
Signing time:             Fri 17 May 2024 21:00:25 +0000
Manifest this update:     Fri 17 May 2024 21:00:25 +0000
Manifest next update:     Sat 18 May 2024 21:00:25 +0000
Files and hashes:         1: EtAIWS__oTHE41ZIkR2WW7aWvy8.roa (hash: /9/YwNCd8aJK7bPGo/gihtd0nzwv1WPxRa/zHmQqzno=)
                          2: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: NR3Wkam06ifbjMq64Vqz3fZDEQxdy5zRcvpZr02c9BM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:25:42:f6:12:fb:21:cf:a9:64:3d:a4:8e:6e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2
        Validity
            Not Before: May 17 21:00:25 2024 GMT
            Not After : May 18 21:00:25 2024 GMT
        Subject: CN=8ee768f6d39a0258be53c488f4fbb95d1bff5162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:62:ff:b7:2b:f5:0c:99:ce:8b:a6:2e:79:
                    3a:50:b7:39:e5:25:67:ae:64:82:e2:a5:ee:4c:3d:
                    d5:e6:ff:1c:d3:5b:fc:a0:43:15:b0:6e:84:80:e7:
                    62:0f:2d:21:80:17:f4:6e:98:2d:e1:a1:34:ac:70:
                    6e:d0:6a:c7:7f:c5:b0:56:e1:45:ec:a6:05:52:de:
                    2f:87:3b:cb:5c:b4:da:ba:ba:03:04:a0:67:08:0a:
                    28:e7:6c:a3:c3:11:89:d0:96:51:4a:f5:5d:ee:f9:
                    80:32:14:95:82:18:46:12:c1:ec:e0:02:fb:fb:fd:
                    e0:f6:34:c6:6e:42:93:da:d5:36:2c:19:00:78:b8:
                    5b:15:ba:aa:5e:f5:e1:2b:a0:ec:d6:26:5a:97:6d:
                    20:35:43:1d:80:e4:27:60:18:8b:67:c8:8a:d1:a3:
                    4d:6a:10:3d:9f:69:47:de:ff:7a:1b:68:6d:f4:56:
                    77:9b:3a:44:49:25:e5:e3:d1:f3:bf:46:c3:c5:c3:
                    39:e9:6a:f1:1a:fb:1b:e0:43:2d:de:fb:04:bc:1c:
                    75:1e:d1:af:c8:66:20:e5:10:8f:70:9a:9b:b7:92:
                    e0:3a:0e:ec:f3:0e:8c:e9:0f:f0:1f:c2:ab:6d:fd:
                    f6:c5:b4:8d:b8:03:23:b1:39:92:43:63:8d:fc:40:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E7:68:F6:D3:9A:02:58:BE:53:C4:88:F4:FB:B9:5D:1B:FF:51:62
            X509v3 Authority Key Identifier:
                keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:f0:57:14:40:38:17:29:fb:94:67:d3:3d:5d:cf:95:37:
         bb:cb:8e:48:17:0f:14:1e:cf:7f:c6:bb:bb:f5:96:21:b0:b7:
         9d:1c:11:f8:92:34:09:8e:fc:0f:9c:98:e3:75:60:f9:36:83:
         85:9c:33:2a:f3:4b:7b:17:59:86:e6:e7:90:93:e2:09:30:6b:
         89:4d:3d:c7:4c:b6:11:1f:a9:17:47:59:91:61:29:2e:03:4c:
         c5:ed:75:25:a1:8a:f5:7a:e4:33:1c:94:1a:fc:fd:1b:45:bc:
         b9:3b:8d:71:ff:e1:9b:28:c8:e2:c0:d1:ae:e3:34:70:79:05:
         63:6f:e2:0a:c8:4e:c9:91:4f:6a:ab:4d:1f:95:32:20:9a:7a:
         83:97:89:07:7c:5e:5a:e5:b9:c9:f8:14:b7:6c:1d:b1:a3:b1:
         5c:63:d0:1e:22:1b:ce:99:53:cf:4d:a4:02:6b:20:b5:f0:6b:
         54:fd:77:22:85:ba:03:ee:29:02:53:17:8b:30:2d:6e:3c:6e:
         ca:3f:4e:f4:4e:ef:dd:b6:a8:54:0c:1f:ed:d4:37:12:63:b1:
         b0:5d:44:9d:ae:69:f8:a1:50:b9:f0:82:ee:18:5e:5e:44:7b:
         5c:94:d2:31:42:9e:12:66:60:80:e4:83:34:b6:9c:ba:1c:8e:
         19:aa:64:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:33 2024 by rpki-client on console-fra.rpki-client.org