Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File:                     xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier:          GUNpE8eTvc5//fe5pzPUmkRrJDe6G4EdUfZEOExDkqg=
Subject key identifier:   3D:80:5A:31:0C:17:29:44:FD:6B:0C:2E:08:FA:7B:75:D2:40:A5:B2
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer:       /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial:       018F874961F7CB149C097662BB134FFF8EB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number:          0864
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: aQLSPM2r6x2nztD4Mh5MgIhGDPM.roa (hash: ZROeaG8KQULgjgWVFWqMKKqblI6KXUxuBG40n/xanOw=)
                          2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: seqhuyBn8MhLfflf9gFFxwYUOP2q4m1VCyuLIacFVLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:61:f7:cb:14:9c:09:76:62:bb:13:4f:ff:8e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=3d805a310c172944fd6b0c2e08fa7b75d240a5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:05:ff:36:61:6d:eb:fe:7c:72:73:18:b8:
                    dd:db:6a:af:59:7d:b8:ed:3e:03:c7:1f:ba:c2:b8:
                    40:91:d9:d1:14:d0:90:e0:42:10:62:39:41:f0:d6:
                    a8:77:31:58:5a:79:a1:c2:02:4a:bd:1d:9e:5c:26:
                    fc:77:7e:a3:06:95:c4:0c:f9:63:3b:68:0d:08:a8:
                    94:58:0d:0c:a8:c0:2e:86:1a:a8:63:f9:e5:c3:62:
                    2e:fa:80:1f:49:b9:00:d3:06:a5:32:07:33:d6:34:
                    9f:8b:fb:6d:13:9b:bd:d2:e1:8e:eb:34:01:93:a2:
                    cd:3c:b9:47:ce:70:5e:d5:6f:29:f0:e6:98:be:9a:
                    f2:19:d6:df:a2:dc:e0:d8:16:73:b1:f9:c3:c7:86:
                    31:e2:e8:fa:45:27:b0:86:af:21:f6:c1:ce:af:25:
                    3b:04:2a:26:fb:1c:d1:02:22:7c:aa:33:cf:f9:33:
                    53:dd:2f:07:53:88:f0:6e:85:54:85:f9:5c:05:97:
                    d1:03:c5:5b:ac:4f:f6:66:04:d7:52:73:84:41:48:
                    a0:74:14:82:42:0d:a1:77:e4:a2:ed:c7:4d:1a:4a:
                    84:21:bc:46:54:21:60:c2:27:6f:f2:b1:7d:45:2b:
                    54:dd:4b:29:02:15:0f:d5:cf:79:8a:6a:8d:c0:eb:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:5A:31:0C:17:29:44:FD:6B:0C:2E:08:FA:7B:75:D2:40:A5:B2
            X509v3 Authority Key Identifier:
                keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:04:9e:46:f1:81:8c:0e:d1:7f:4a:61:6b:a1:40:91:a3:c8:
         96:14:1b:73:78:16:14:b8:96:99:ea:4d:68:71:f4:6f:43:56:
         b1:59:52:70:12:b9:2d:d2:e8:b7:0c:8b:27:53:23:a8:ec:4f:
         c1:ab:dc:fa:6a:8c:c6:9f:62:9b:3a:eb:54:a1:a4:36:bf:5f:
         ad:c3:4e:7e:a6:3b:95:57:36:cb:00:d4:9c:df:5a:6f:64:2b:
         43:0b:ff:9b:31:39:49:c1:7a:68:3a:1f:a1:af:9e:40:4b:ec:
         29:4f:55:cd:36:cc:8d:c4:8e:ac:79:94:b9:72:d7:20:04:b3:
         3c:5a:4c:58:27:e8:80:45:af:58:69:f1:d7:cd:91:29:d1:b3:
         7c:ce:3e:b5:75:89:08:e7:86:00:e1:79:de:bc:00:1c:0a:56:
         97:29:34:63:22:60:51:02:2d:03:d4:2c:be:65:88:56:f7:62:
         dd:8b:32:31:a3:e2:16:13:02:ec:f9:48:c0:b9:49:d4:36:98:
         53:7b:cd:2c:48:28:64:76:61:33:69:8f:cf:c5:44:75:72:f8:
         3e:30:b5:f0:50:d7:6c:39:eb:b3:d7:32:1f:c0:2f:9e:51:57:
         57:9e:d4:5e:ba:28:0b:c9:32:98:ef:76:32:42:e2:34:f3:1b:
         31:21:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:01 2024 by rpki-client on console-fra.rpki-client.org