Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
File:                     x8_M1olXoPcEOajWD_PIuNkRowg.mft (raw, json)
Hash identifier:          iyzeMPR2SlNYUQCUNwaIlOqiKwhYRLBsieDsoeBKP0g=
Subject key identifier:   56:20:01:10:6F:19:67:26:FD:06:55:FC:B7:F4:54:DE:40:53:6B:18
Authority key identifier: C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
Certificate issuer:       /CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Certificate serial:       01901E8FFB7EC823577F82AD924D13AAF1CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
Manifest number:          0948
Signing time:             Sun 16 Jun 2024 01:01:10 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:10 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:10 +0000
Files and hashes:         1: Auz_YhnD-jko2BzJWfDsS5d1580.roa (hash: CJEKXWvNDahrWIQuEoQapdbVEv+D1nJghdompHDTyhQ=)
                          2: x8_M1olXoPcEOajWD_PIuNkRowg.crl (hash: BBhTYePriKD51+mhCcjpC1iG429GXMpcfuhKXbVrBYg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:fb:7e:c8:23:57:7f:82:ad:92:4d:13:aa:f1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
        Validity
            Not Before: Jun 16 01:01:10 2024 GMT
            Not After : Jun 17 01:01:10 2024 GMT
        Subject: CN=562001106f196726fd0655fcb7f454de40536b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:06:ab:5c:c0:a6:89:dd:b9:2c:87:59:e8:
                    4e:e1:e5:48:46:b1:30:cb:b0:8f:ce:21:d7:fb:2b:
                    cf:d4:e4:b4:7f:e2:2d:02:b8:df:6a:99:97:49:d5:
                    51:cb:c4:17:2d:4a:6b:9d:92:52:cd:d9:08:8d:7b:
                    42:70:bb:33:de:66:bd:00:77:3e:f2:0e:5e:5d:ba:
                    f1:40:51:53:3a:84:b7:43:87:27:82:e0:c1:06:a0:
                    f4:e4:30:37:22:c4:2e:ae:07:31:f2:03:9a:0b:43:
                    d8:d6:11:e7:4b:df:3c:c2:6e:0d:43:df:01:ca:f1:
                    d1:11:86:f4:2e:d4:46:70:7e:b7:cd:c1:4c:d0:65:
                    3d:67:0b:1e:0d:b3:c3:5f:15:d4:de:18:b4:36:81:
                    af:fc:c9:dd:fd:0f:48:1b:28:11:16:fd:df:59:3b:
                    19:2a:3c:df:17:60:2f:73:4a:b0:ba:bb:4c:77:7f:
                    20:76:a7:24:d6:22:4e:4e:26:55:31:ab:08:3d:7c:
                    54:01:f5:93:a3:c6:81:10:a5:75:bd:96:c0:31:b9:
                    e4:60:47:3d:27:8e:76:74:7e:b2:07:e1:a6:70:ac:
                    11:99:f6:18:d1:d5:38:f4:28:e7:fb:26:1f:d1:01:
                    f2:91:67:ac:bd:b7:d8:03:47:57:12:75:a9:89:db:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:20:01:10:6F:19:67:26:FD:06:55:FC:B7:F4:54:DE:40:53:6B:18
            X509v3 Authority Key Identifier:
                keyid:C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5d:42:9c:a7:ab:83:68:04:94:02:bc:98:ee:72:11:52:8a:
         fc:ef:20:db:44:7e:f6:75:7b:29:45:7b:96:78:ec:ac:ac:26:
         38:5b:09:49:e3:86:45:e9:fe:ad:0c:ea:35:ea:18:67:49:73:
         8f:21:2f:58:49:6d:35:fd:02:e7:22:cb:0a:28:6d:64:2e:1e:
         b5:50:3b:16:47:b3:de:0e:62:bf:1c:32:2e:17:61:22:fa:94:
         26:9a:a1:81:7a:c7:4b:ae:f1:ff:e0:33:f3:42:89:f3:39:a9:
         65:e7:51:78:f7:31:b2:c7:ed:51:38:79:df:6d:97:11:5d:2d:
         d6:4d:9b:09:45:41:fc:3f:d4:63:6c:61:85:7a:85:64:1c:4c:
         67:1a:74:78:dc:72:91:82:16:da:3d:3f:a3:14:07:da:bd:dd:
         5c:31:84:e8:ce:be:26:ce:d9:7b:04:1c:47:3f:1f:4d:46:c1:
         19:e5:30:16:0f:2f:16:ab:c9:c2:39:67:c0:31:83:8e:f5:53:
         b1:86:75:33:fa:c2:29:bd:97:00:94:7b:7a:ab:11:c0:9b:07:
         9f:d9:fc:7c:42:d2:a5:44:be:e8:72:5e:8c:91:3b:18:bb:e3:
         24:f2:e2:0b:8e:a6:fe:a5:10:4f:2f:05:06:f2:8a:60:34:89:
         0b:d9:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:49 2024 by rpki-client on console-ams.rpki-client.org