Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File:                     sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier:          9gc9Ez/ZoMH7lEwd/K4+qDGEoROZxNjecGaRTA8BSaQ=
Subject key identifier:   1B:D9:38:05:7E:57:B0:55:8E:12:29:DA:A6:7A:DE:D6:1E:47:CD:93
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer:       /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial:       018F8748D63C7A99FE736BAFFB99E8BBB553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number:          0C69
Signing time:             Fri 17 May 2024 16:00:48 +0000
Manifest this update:     Fri 17 May 2024 16:00:48 +0000
Manifest next update:     Sat 18 May 2024 16:00:48 +0000
Files and hashes:         1: 6tpsGcOXc5rjCDJmhWrp5GY2KYg.roa (hash: 0Ndxu0iR3gXo1jNOGxtuQ7pwYCE2+xe5tzlWqJ4UrJw=)
                          2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: KVavLdMH/okGLiQaYEf3qYjh89LMYZlWrY+5zKHZ/2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d6:3c:7a:99:fe:73:6b:af:fb:99:e8:bb:b5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
        Validity
            Not Before: May 17 16:00:48 2024 GMT
            Not After : May 18 16:00:48 2024 GMT
        Subject: CN=1bd938057e57b0558e1229daa67aded61e47cd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:e0:ba:d9:52:23:64:48:e2:b8:84:7e:12:
                    d9:20:45:99:90:44:ac:63:cf:73:bc:ae:f0:e4:0e:
                    2a:45:e7:73:68:fa:ec:c9:45:60:1b:ef:25:8e:00:
                    34:1e:52:2d:ab:c5:63:e0:b4:e6:65:71:f1:1b:85:
                    66:e7:a7:3d:65:a4:6b:2a:4e:c1:64:1d:3d:23:0e:
                    a4:56:d5:7f:82:a7:31:73:00:bf:19:a9:76:89:eb:
                    c8:ea:a6:79:b8:47:f1:3e:e7:66:94:62:39:7d:34:
                    e3:79:d7:80:29:05:e8:a8:63:15:c4:a5:5c:58:f3:
                    9f:2e:ac:d7:65:1b:35:30:7a:53:8a:56:66:4a:79:
                    41:60:62:cd:83:60:9b:bd:b2:f2:2f:66:ed:ac:fb:
                    81:e7:79:41:72:ad:93:f1:16:4c:5d:8a:c9:06:29:
                    7d:ba:c4:5a:d7:98:e9:60:66:18:32:8c:15:a3:65:
                    37:37:c0:93:7f:16:4c:75:36:b5:41:f6:19:0c:80:
                    38:29:6e:56:60:9f:5d:ef:36:15:cf:45:02:29:6b:
                    79:23:d4:38:76:58:ec:45:03:e6:a3:bd:21:45:15:
                    1f:f7:16:f7:80:c9:92:c3:59:f8:ea:32:7f:66:ff:
                    98:17:6a:19:61:48:39:81:e5:56:ef:bf:3b:d7:e7:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D9:38:05:7E:57:B0:55:8E:12:29:DA:A6:7A:DE:D6:1E:47:CD:93
            X509v3 Authority Key Identifier:
                keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6d:31:6c:40:82:d3:e8:fc:17:83:a8:42:15:52:25:74:47:
         aa:43:d9:0d:5b:d8:b2:67:7b:a4:41:5b:67:99:d5:78:00:ed:
         a2:6c:5d:4e:7f:2b:d5:73:0c:d8:d4:07:c9:a2:23:33:12:f5:
         23:da:2f:ab:ba:21:98:28:7f:d3:a9:91:42:f8:9a:7d:eb:b0:
         58:91:f7:a5:04:e4:c8:86:24:06:d8:7a:14:1a:07:9a:26:a1:
         ca:84:1a:ab:97:fc:45:83:c3:38:6b:de:c3:73:c1:09:58:a7:
         e5:a1:ab:95:de:1c:a0:e3:64:e9:c2:5c:8b:0f:f4:1d:d0:67:
         e9:54:7e:10:6e:43:cc:68:f4:f5:b5:81:d2:c1:ff:22:02:74:
         e3:62:fc:b6:86:98:bb:fe:ff:e0:7e:16:63:2e:4a:bc:98:5d:
         85:28:5f:cd:6c:63:d9:dd:b0:7f:1e:5f:f0:6e:ac:25:c2:fe:
         6a:6a:c7:2f:59:59:eb:26:54:e6:c3:83:97:2a:5b:0f:ef:3e:
         7c:53:36:31:31:d1:db:c1:3e:49:5f:73:bb:d0:d1:5f:9c:06:
         83:e8:13:b1:2e:c3:e2:08:a6:98:8e:64:8f:1d:45:53:f0:f3:
         52:18:c2:8e:6f:20:9b:f7:3c:09:a7:02:15:97:a0:a5:55:4c:
         80:f8:f9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:36:30 2024 by rpki-client on console-fra.rpki-client.org