Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File:                     xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier:          RWWgMjr0Apj6nXvedHBg+ngfOC55aHK2URJ/Z7L22pE=
Subject key identifier:   A1:F9:60:37:29:31:E4:76:6D:5C:97:82:9C:D8:D5:DD:5F:73:6C:36
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer:       /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial:       018F87496CA4F6E30A88F8B97F6106386B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number:          0D1B
Signing time:             Fri 17 May 2024 16:01:27 +0000
Manifest this update:     Fri 17 May 2024 16:01:27 +0000
Manifest next update:     Sat 18 May 2024 16:01:27 +0000
Files and hashes:         1: obBE1iEcSoN0jyqaLFcOElOHPKo.roa (hash: FQKVFtHKjJwJLhwwBumbkysX2tVuC3A8rzbcfYkoEPc=)
                          2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: P4cg+nD3h1OLhNN2JBwwkY8yKeMnAvdSSzzmuGqI6Ik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:6c:a4:f6:e3:0a:88:f8:b9:7f:61:06:38:6b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
        Validity
            Not Before: May 17 16:01:27 2024 GMT
            Not After : May 18 16:01:27 2024 GMT
        Subject: CN=a1f960372931e4766d5c97829cd8d5dd5f736c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:6a:ab:6e:e0:a5:d4:51:31:48:54:eb:9a:
                    01:b6:b2:8a:9d:65:c8:c4:e3:2f:f8:b7:33:0f:ab:
                    02:e3:ed:a8:64:0e:b8:8c:b7:d5:c0:b9:02:ea:b6:
                    86:08:fe:8d:da:25:59:c9:9c:16:54:1e:96:0e:69:
                    d4:a2:7a:f6:bc:06:ab:97:30:8e:0f:f8:08:45:5a:
                    b1:ae:ab:4c:68:cc:30:8e:a6:a8:a1:19:c8:9b:7a:
                    b3:d8:90:65:3c:49:e4:2a:d2:66:f9:b8:38:74:3e:
                    1e:f0:b8:dd:f0:57:47:11:f7:99:02:52:34:d0:31:
                    20:c7:21:d9:bc:7a:6d:83:8a:d1:b4:83:34:57:98:
                    d0:b5:b1:ae:9b:62:23:4c:c4:f4:29:43:bf:73:29:
                    22:d4:99:ff:48:d8:aa:f5:a8:44:5f:66:50:7e:f3:
                    98:ca:e8:b3:16:85:3c:d1:65:68:71:5f:a0:fd:af:
                    e4:2f:02:d7:3e:d9:a0:63:e3:a1:a2:7f:43:ab:01:
                    25:13:0c:18:1b:4a:b0:a1:c4:26:b4:ab:55:d6:c6:
                    67:5e:e6:d2:3f:51:a8:7d:62:0a:5f:57:78:42:92:
                    79:a9:75:6a:c0:07:7a:26:74:06:b8:f4:f0:9f:90:
                    2c:11:54:77:96:50:1d:70:51:fb:83:d9:f6:91:dc:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F9:60:37:29:31:E4:76:6D:5C:97:82:9C:D8:D5:DD:5F:73:6C:36
            X509v3 Authority Key Identifier:
                keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1b:33:b9:30:19:3f:3b:72:9c:dc:9e:b6:d2:8a:22:92:a2:
         68:ba:f3:f0:e9:70:7c:0d:5f:1e:55:c5:00:0b:ef:d9:85:4a:
         a8:e7:bf:1e:1f:fa:8d:c5:f9:b6:f0:bf:0b:87:2d:92:d4:fb:
         ab:8c:97:70:61:bb:04:98:dc:ba:83:da:03:19:37:bd:d4:04:
         2d:cf:d8:26:c1:8a:ca:81:c1:51:85:c4:34:0b:48:a5:c4:32:
         e6:e2:74:f4:62:9a:3f:7f:01:52:34:a1:f3:6c:da:2d:d6:b9:
         e7:c5:f7:18:50:a4:93:24:2f:0d:bd:6b:88:d8:f7:ed:b9:f8:
         f6:3a:98:7c:ff:ed:30:a6:7c:fa:03:f6:67:9d:a3:67:a5:e8:
         36:98:b5:c4:d0:8b:96:2c:5b:f9:85:cd:77:68:c0:84:ce:c6:
         f5:28:c2:2c:88:54:fb:7e:b0:ce:c9:1d:7c:95:58:96:d5:2b:
         23:d8:da:c5:a1:8c:b8:7d:b4:c2:15:91:bf:20:30:51:32:a4:
         34:13:ef:20:2a:65:b9:b7:46:21:ae:1b:0e:fa:47:c2:65:d1:
         53:2d:8a:4b:18:d4:6b:d2:97:25:bd:3d:ac:de:6f:b7:44:26:
         ef:a4:48:34:fe:a3:a5:05:0c:6c:f3:73:a5:34:4f:22:cf:c4:
         f5:70:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:11 2024 by rpki-client on console-fra.rpki-client.org