Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File:                     aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier:          Nv6AYEdOEmcaHTt28RLgJErr4dsLVHQ6/yb6VMen6Oc=
Subject key identifier:   73:CB:F1:97:B0:D4:6A:BB:5F:6A:30:FD:06:E8:09:00:16:BB:3D:B5
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer:       /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial:       018F874B270BFEB704C77A7E678437094699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number:          0FAB
Signing time:             Fri 17 May 2024 16:03:20 +0000
Manifest this update:     Fri 17 May 2024 16:03:20 +0000
Manifest next update:     Sat 18 May 2024 16:03:20 +0000
Files and hashes:         1: NHr1Xp5Ar6_93HkTVGyR6sinkvY.roa (hash: 82sWz1oTAlquyAHess5iFJmPLLjRvhrqqSCAr5qzrEc=)
                          2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: hbi1Pt0LNxhpESpnqYQjzgX301mTto5xjmHkwrpO/VA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:27:0b:fe:b7:04:c7:7a:7e:67:84:37:09:46:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
        Validity
            Not Before: May 17 16:03:20 2024 GMT
            Not After : May 18 16:03:20 2024 GMT
        Subject: CN=73cbf197b0d46abb5f6a30fd06e8090016bb3db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:88:9e:43:f9:bf:2a:06:91:ca:f2:04:9c:
                    ec:f1:68:34:8b:9c:69:43:27:4a:3b:dd:9e:0d:4b:
                    d1:f6:6c:e5:72:eb:60:ac:b9:39:dc:11:ac:26:19:
                    eb:7a:d7:58:75:59:fe:1b:c3:6e:22:e8:35:8d:a7:
                    a8:15:32:19:f2:d6:64:fd:bb:7f:ce:30:d7:62:14:
                    77:77:b6:f0:06:d3:03:9a:4d:2b:6d:99:e6:5c:36:
                    65:8b:42:5e:b3:1c:32:7b:1b:a1:74:d7:ed:48:14:
                    43:30:86:ce:64:79:82:dc:12:c7:2e:9e:d4:e1:91:
                    f3:42:20:39:63:d8:61:e3:b8:41:0c:9d:2a:cc:b7:
                    41:ed:23:7f:6d:48:f6:44:78:05:e9:cd:0f:38:2f:
                    ee:b6:05:41:e8:47:0f:b0:d6:c0:a3:83:6c:2f:6f:
                    35:34:3e:c8:f2:33:e1:56:3e:9a:fa:c6:a4:81:a3:
                    a7:da:2e:52:48:e5:f5:2a:9d:df:d0:31:e3:f9:cb:
                    f9:ee:7c:f1:2b:6d:a3:d9:ff:6f:ef:34:aa:5e:04:
                    50:d0:ba:50:b4:13:9e:b9:ba:5e:97:88:89:f3:d4:
                    75:2f:8d:ba:2e:81:a5:13:87:0b:10:12:1d:f7:62:
                    a3:95:af:58:76:06:f4:3d:b7:ff:0b:15:7c:ea:fd:
                    94:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CB:F1:97:B0:D4:6A:BB:5F:6A:30:FD:06:E8:09:00:16:BB:3D:B5
            X509v3 Authority Key Identifier:
                keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:c2:75:35:8b:9e:b4:06:21:54:54:80:70:89:7a:1b:77:
         ec:0e:e5:a0:88:85:b8:a4:f0:75:ee:32:c5:63:26:86:12:2c:
         ea:66:35:3e:1d:7f:f4:45:63:7f:c4:02:14:dd:c2:ab:95:7f:
         3d:db:ee:d9:be:ca:0a:53:5a:e0:70:07:b5:e6:70:84:a0:05:
         84:94:8d:98:20:3e:5d:bf:d4:d1:4f:ca:e4:0c:61:6b:61:0a:
         2d:9e:5b:37:89:28:4b:6f:75:33:18:9e:21:22:e5:1c:c9:ac:
         98:59:81:25:e5:6b:73:56:0f:89:ca:8a:92:a3:08:a3:83:23:
         8e:49:2c:07:ac:8c:7c:03:3f:69:38:f5:e5:f1:86:e9:73:f1:
         0e:b5:62:e3:da:ad:47:c4:80:a0:e3:8f:94:d9:9e:25:cf:a8:
         95:50:70:df:5f:63:f6:66:8b:2c:bf:c3:45:31:a9:84:c4:d2:
         42:f2:2e:5b:dd:94:49:9b:57:7b:de:10:8b:92:4a:2c:b5:ed:
         fe:9a:08:bc:d9:2c:8b:4b:b0:79:da:53:bf:cb:53:a4:f4:95:
         4a:c8:39:cf:d3:ad:3d:6b:fe:96:bb:b1:0a:60:6f:e3:98:a4:
         34:e7:d4:c2:48:60:06:de:13:c7:07:78:12:74:dd:98:fb:18:
         43:bb:f1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:33 2024 by rpki-client on console-fra.rpki-client.org