Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File:                     hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier:          CHgBAcfAhO1g5Ipq02XtTS4swOBgnVjIh9G+vgolFHM=
Subject key identifier:   DC:AC:26:30:31:9E:7A:D2:E0:97:5C:EC:5E:08:7B:A1:D3:38:8E:76
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer:       /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial:       018F87496157A253EE274EB39D56446B5B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number:          0A7E
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: Ey2SgxnU-4IyUnecveXZknjTgTU.roa (hash: IqYdZYmRhw/yCkrd+ojCB9/TQgs+XzEx/pCfqNXUT5M=)
                          2: QmYcIkRR06OWVP3_TV854H29jqg.roa (hash: 8qzLEzhAOZY3X4fhA12x37FurknmUnllq6QcnwfMgKY=)
                          3: bnKC8C0hOMbLCW1j7nakO4-dnN0.roa (hash: Tz69JCghhpMbKCvEzSfyoqPl3HACjAliwT3nsYvHG8U=)
                          4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: YPxI8AOFmbOmj6UFugebfsGJKNt6XrGyaJLsGlr0Wzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:61:57:a2:53:ee:27:4e:b3:9d:56:44:6b:5b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=dcac2630319e7ad2e0975cec5e087ba1d3388e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:d2:ae:94:9a:a0:13:8f:ba:22:66:fd:3f:
                    d3:41:2e:7f:04:64:c1:4e:47:23:24:26:95:e5:4c:
                    c2:98:99:31:66:3d:a0:92:97:2e:47:ab:31:15:d3:
                    5b:07:35:54:50:5d:96:ac:e0:b5:eb:22:5f:38:36:
                    2c:7d:11:1a:ed:e9:2f:75:7a:9d:82:d8:5c:4f:a4:
                    df:3f:34:e5:65:da:30:77:ea:e4:94:ef:52:2d:38:
                    ed:b8:56:61:21:29:41:e3:f6:b2:bf:de:db:1b:dc:
                    32:b0:db:6e:1c:21:a2:01:96:92:02:76:8e:81:40:
                    cc:21:2e:de:03:84:91:6f:b7:b3:4d:ed:26:d8:17:
                    89:ef:14:c9:9d:12:8c:1f:e2:5a:84:b6:14:cb:7e:
                    ea:5f:68:4f:ca:c7:08:68:f9:ef:f9:0e:eb:0a:25:
                    a2:e4:d6:7f:d1:f5:2b:2c:ee:12:48:94:39:92:fb:
                    73:d8:42:7b:63:b3:3f:3f:72:36:14:44:78:6b:ec:
                    f2:ac:1b:fa:ae:a8:a5:12:40:af:5d:83:dd:95:e3:
                    10:f6:03:79:4a:c1:e1:49:04:16:3e:e4:ca:90:9e:
                    79:55:9e:3f:e0:a7:92:69:8b:86:9a:e5:5d:c2:38:
                    c8:99:28:17:18:b7:a5:8b:c8:fb:ba:18:d0:10:07:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AC:26:30:31:9E:7A:D2:E0:97:5C:EC:5E:08:7B:A1:D3:38:8E:76
            X509v3 Authority Key Identifier:
                keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:94:6f:8f:16:6b:83:b4:da:ec:c9:28:85:6e:29:ea:d1:50:
         58:a8:79:5e:36:40:12:ab:d7:5e:06:d4:13:79:c1:60:a0:8e:
         ac:b2:d2:fc:e8:8c:44:cc:e4:95:7f:3e:ea:49:6a:22:55:2e:
         cc:3b:41:68:8a:f1:eb:a5:ad:c9:c5:44:cc:07:6a:f0:4e:60:
         2e:5f:70:9d:2c:fb:df:81:a0:8b:28:63:0b:3a:f5:a2:37:f2:
         d5:83:13:09:14:2c:84:56:12:58:82:5b:ce:29:45:7a:ca:e4:
         4d:43:cc:4c:5e:7c:13:a2:0c:c2:72:b7:fe:dd:40:21:b2:6d:
         da:70:28:ae:20:11:b7:3c:eb:ce:16:c7:26:f9:c5:21:a6:fd:
         cb:ff:2a:56:85:10:ea:80:c7:7d:e5:6f:b0:94:d4:ae:e3:0c:
         b0:3a:0b:5f:88:8a:d6:9d:31:18:91:73:ad:f8:14:82:a9:51:
         7b:26:ce:f1:01:d6:89:25:dd:4e:df:b6:96:66:15:d1:57:91:
         7e:c2:25:42:47:1c:af:13:5c:db:dc:04:a2:47:ae:df:7f:5d:
         73:c7:a5:69:f1:99:b2:25:5a:7f:0b:8a:11:79:d1:70:0e:3a:
         a5:dd:41:1a:f4:92:6a:51:f8:da:38:50:95:c8:31:69:68:a1:
         eb:1f:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:20:34 2024 by rpki-client on console-fra.rpki-client.org