Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File:                     gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier:          RPgOfqV6dgZJB0ovmWDjY2keyu7dwt0NP0YogW9mVwk=
Subject key identifier:   A8:60:4C:9F:8D:37:C0:EC:FE:EE:8E:23:76:A6:67:BA:89:CC:14:A8
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer:       /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial:       018F8D15D519C782431148DCBF5E78CC53D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number:          0AF3
Signing time:             Sat 18 May 2024 19:02:49 +0000
Manifest this update:     Sat 18 May 2024 19:02:49 +0000
Manifest next update:     Sun 19 May 2024 19:02:49 +0000
Files and hashes:         1: MHu15CBAmlq2UbdphixxQpK20ZY.roa (hash: HvrpWyRkKzvjVxox4K3C9x7nhLcvPVG4LO5DPjsTfsg=)
                          2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: 6LPg8Aiw8cSjrBaCJ0r+OZj7CRloi588/7ztnv5EErQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:15:d5:19:c7:82:43:11:48:dc:bf:5e:78:cc:53:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
        Validity
            Not Before: May 18 19:02:49 2024 GMT
            Not After : May 19 19:02:49 2024 GMT
        Subject: CN=a8604c9f8d37c0ecfeee8e2376a667ba89cc14a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:47:73:67:74:89:82:07:d7:87:84:ea:e5:
                    b7:1b:21:d5:d5:10:5b:a6:8a:07:46:10:90:51:36:
                    f8:8a:9d:e3:fb:10:98:6a:fe:77:8b:94:b2:ca:ea:
                    f4:28:ee:da:3a:65:c6:71:3d:3e:d1:cd:20:d8:1b:
                    15:72:86:b6:29:0d:32:1e:1e:d3:08:8c:bc:b3:cf:
                    c6:6f:09:2e:8e:62:86:8c:2b:f6:4c:6c:2e:74:f2:
                    1e:d0:43:d8:ef:aa:0e:92:54:b2:e9:c3:5d:a2:da:
                    d2:64:d8:0a:27:56:37:e3:9d:9f:b7:55:14:d3:ec:
                    4d:db:44:e6:b3:af:1e:aa:d2:9c:59:0f:73:f1:6d:
                    f5:14:5b:32:24:fd:db:6f:bd:45:47:93:31:48:93:
                    c9:06:be:55:e4:8c:a6:a7:6c:17:73:00:a7:e7:5f:
                    d3:9b:b0:1c:a3:ba:33:78:7d:47:e6:0c:85:bb:0c:
                    08:af:7c:c4:72:3e:32:a2:0c:cb:2b:43:98:03:47:
                    84:90:16:39:90:39:cd:4f:67:f8:fc:d0:04:03:db:
                    c4:b0:05:b1:5d:54:10:3c:7e:1e:3e:94:b4:c9:5c:
                    19:e6:78:cd:82:27:e2:24:73:65:1c:b3:8a:5a:27:
                    75:ef:75:c6:98:21:3e:7c:4c:28:3d:82:2e:1c:f5:
                    5b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:60:4C:9F:8D:37:C0:EC:FE:EE:8E:23:76:A6:67:BA:89:CC:14:A8
            X509v3 Authority Key Identifier:
                keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:45:7a:e1:ab:ad:51:2c:ce:bd:90:d7:2c:1d:34:4a:4b:e8:
         6a:dd:f6:d7:0f:9f:0e:7a:ed:4c:5f:11:73:48:da:46:94:a7:
         9e:26:d9:65:7e:5c:18:5f:b0:d3:e3:55:98:85:d7:eb:4e:7b:
         a4:71:c1:61:0a:ef:91:29:b3:64:90:5b:7c:43:c3:6c:37:0f:
         f0:af:b5:75:0d:83:92:d8:c2:7b:69:0b:e5:e9:dc:e1:7f:e7:
         a3:f8:3b:8a:d4:42:81:f8:ff:73:45:dd:57:41:fe:bc:f6:3e:
         71:66:46:44:76:19:30:2a:83:d7:9e:f1:0a:2d:ab:28:25:23:
         a9:33:28:f5:93:3e:e0:79:a2:1f:73:9e:b4:27:57:a0:a3:9a:
         05:74:18:5d:a5:fa:b8:9b:9f:d9:08:c4:0f:d4:f1:6d:e8:b8:
         bc:7d:ea:10:96:85:62:96:9f:5c:06:54:6f:54:14:d1:00:9b:
         be:e8:64:bf:25:8b:8d:11:64:b5:4e:56:74:be:c3:f4:54:b9:
         5a:b7:57:67:a3:4d:ac:f4:d0:6e:a4:15:04:6c:2b:c7:a0:6a:
         bf:44:1f:8c:ba:4a:ea:ad:c7:05:1b:56:39:53:6c:f7:2f:42:
         c0:97:72:13:d6:2a:c1:6c:87:92:bb:11:7b:2e:fb:ff:c7:e5:
         51:d2:01:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:32:58 2024 by rpki-client on console-ams.rpki-client.org