Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
File:                     xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft (raw, json)
Hash identifier:          I6InaWM5fpNiGZV0jrJ+IFvKsxZBE8C4FXAQQ2mzymw=
Subject key identifier:   B7:58:6B:96:4E:AC:0F:2C:E6:1A:C3:B1:48:07:BA:A9:67:EF:EE:8C
Authority key identifier: C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB
Certificate issuer:       /CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
Certificate serial:       018F874A34CA2A5B5918DF6CEACEF78ED15F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
Manifest number:          078F
Signing time:             Fri 17 May 2024 16:02:18 +0000
Manifest this update:     Fri 17 May 2024 16:02:18 +0000
Manifest next update:     Sat 18 May 2024 16:02:18 +0000
Files and hashes:         1: 9i82H_09lshfIbRKVFSkuO45xXk.roa (hash: prSspuYuEm4iwJEqJMSvicG71NZ1K8plyeOHD3bX5dI=)
                          2: xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl (hash: dah0W37lcfDhiE3SU8aXgxt2eUjx7W1NLSWgOO7rYpI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:34:ca:2a:5b:59:18:df:6c:ea:ce:f7:8e:d1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5cdce32adc62afb77e43186cf7c2c071e42b7bb
        Validity
            Not Before: May 17 16:02:18 2024 GMT
            Not After : May 18 16:02:18 2024 GMT
        Subject: CN=b7586b964eac0f2ce61ac3b14807baa967efee8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:b8:fb:48:13:60:3e:ab:70:6a:66:e0:93:
                    59:94:d8:d3:05:4d:11:28:2e:fa:7a:77:d5:25:46:
                    38:15:b2:d7:5a:b8:4c:6a:a3:c4:db:25:10:5d:e5:
                    69:4c:d6:e9:b8:83:7f:71:ae:a8:fc:02:61:d2:1f:
                    77:25:ed:6f:11:3f:89:69:71:69:58:bb:29:32:0a:
                    b3:8f:2a:ec:22:6e:7a:45:e4:bb:ee:93:d9:02:be:
                    9b:d9:43:a6:e6:b8:1e:7a:aa:32:c4:ff:f5:c5:77:
                    63:41:92:60:50:d7:d8:b3:a5:b6:ab:5e:db:05:5e:
                    dd:a5:48:7b:62:ed:a7:1b:f0:79:14:19:ad:68:36:
                    41:e4:5d:8c:29:ff:70:8f:cb:52:d0:3c:d5:1f:49:
                    53:22:1b:5a:3a:f6:e0:f3:7e:c6:3d:3e:36:4c:bf:
                    16:78:ef:76:ab:3b:32:ea:00:91:39:11:60:1c:ab:
                    37:38:75:98:5e:ad:ba:a2:f3:ca:0a:1e:f0:ad:7f:
                    33:e0:b1:31:e0:f4:73:64:b8:45:54:5c:e4:b6:ce:
                    c3:e7:1f:69:7b:d5:33:0f:ef:16:59:09:15:dd:70:
                    df:3e:8b:f3:f6:aa:3d:9e:6e:8d:11:3c:c1:b5:5e:
                    de:cb:e1:b9:0f:7a:f1:47:f0:6c:54:9d:aa:2e:0c:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:58:6B:96:4E:AC:0F:2C:E6:1A:C3:B1:48:07:BA:A9:67:EF:EE:8C
            X509v3 Authority Key Identifier:
                keyid:C5:CD:CE:32:AD:C6:2A:FB:77:E4:31:86:CF:7C:2C:07:1E:42:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc3OMq3GKvt35DGGz3wsBx5Ct7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/21945d-2899-4d9d-aa45-b0a28bb35b20/1/xc3OMq3GKvt35DGGz3wsBx5Ct7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:31:36:cc:fb:f3:0e:64:3a:64:2b:b6:5c:b1:f6:31:62:c3:
         4e:b4:6f:44:3a:bf:5a:ad:20:2e:90:0d:86:6e:59:5a:cc:54:
         02:d5:bd:01:89:86:9b:6f:ab:fd:55:96:9a:57:7f:d1:9d:dc:
         60:32:eb:82:37:7e:1d:90:41:46:c6:79:9f:60:a6:83:1b:ef:
         0a:21:ce:7b:91:fd:ad:7f:eb:c1:36:a6:59:af:4e:09:18:d9:
         ae:e7:08:fa:1f:d1:5d:87:10:ce:c7:20:3d:3e:d5:32:b9:36:
         38:5f:6d:04:89:5f:53:e5:87:02:b0:e6:e4:11:43:c4:42:40:
         f6:7e:a0:7e:5c:4d:6a:28:66:6d:02:79:f1:19:43:80:b2:31:
         20:98:1b:a3:73:22:63:cb:27:2b:8d:06:4c:8e:58:02:31:c7:
         7b:7d:9b:cd:4e:d7:c1:8c:ef:f6:6f:31:c9:14:ed:da:39:eb:
         f8:49:7a:e7:2b:0f:8f:8f:08:2c:75:ab:66:37:b9:87:e4:7f:
         40:3c:c8:18:96:3c:60:d8:66:a1:fa:0c:68:50:85:50:4c:11:
         fb:49:65:33:63:70:d7:9b:94:de:fc:d5:64:d3:92:78:47:b4:
         78:e6:bb:d7:19:1c:69:09:d2:fb:92:87:98:39:30:b5:60:1a:
         69:3a:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:37:07 2024 by rpki-client on console-fra.rpki-client.org