Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File:                     k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier:          b654P1VVPzjtvmLrTi5hSEbQ06tyhyiviWhU0r+1r3k=
Subject key identifier:   F4:DB:D7:C9:4E:87:1B:4D:0B:29:48:53:32:A1:67:7A:4C:4E:BD:5C
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer:       /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial:       018FA2527FC5EC02A025A687977E0DDD7516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number:          086A
Signing time:             Wed 22 May 2024 22:01:06 +0000
Manifest this update:     Wed 22 May 2024 22:01:06 +0000
Manifest next update:     Thu 23 May 2024 22:01:06 +0000
Files and hashes:         1: JSJN0kKRblKnS5jupttN-rwvw1U.roa (hash: 8mpNxHZBwFm36huQe82GiWVn/Ilx4AMxYZbNlFRrA7I=)
                          2: dGYPKrauH7Fsl2KUZz7xK7-C6vc.roa (hash: Tx6HPfXHmRDnkKx6nvkHZiImGFV5jnm8aIDGUzqqzxY=)
                          3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: +ajtMWhYsld1HUBTqQGYwoFfe+9ikoG+srj2o5UAWvY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:52:7f:c5:ec:02:a0:25:a6:87:97:7e:0d:dd:75:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
        Validity
            Not Before: May 22 22:01:06 2024 GMT
            Not After : May 23 22:01:06 2024 GMT
        Subject: CN=f4dbd7c94e871b4d0b29485332a1677a4c4ebd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:23:8d:04:e9:6c:c9:6b:a8:ce:ca:08:20:
                    e6:a2:20:27:99:1e:c9:fc:91:31:8c:88:91:da:77:
                    27:a3:bb:ce:9d:3a:3f:a6:34:0c:be:fd:ff:63:16:
                    6e:a6:fe:b8:1f:e2:41:f4:ce:33:8c:81:7c:c8:f7:
                    06:cb:ac:57:79:08:05:79:c0:07:f8:e7:42:81:4b:
                    b5:fa:49:61:87:7a:ef:2b:02:28:2d:77:2b:c5:de:
                    73:48:5c:b4:d2:66:21:d0:03:02:24:c4:48:4d:59:
                    66:b3:10:5b:1b:2c:f3:a3:0b:21:fe:57:86:d1:af:
                    6d:dd:ae:6f:9f:77:11:fe:9e:cf:1c:c7:43:ab:5b:
                    81:07:6d:82:17:14:7a:9c:ff:5c:3e:ec:f1:6d:01:
                    ba:dc:a7:6c:50:80:1b:93:07:dc:59:98:67:a3:db:
                    b5:33:03:9b:7a:3a:3f:32:45:3c:e0:75:e3:0b:6a:
                    84:df:d0:4b:72:88:b7:ca:f2:3e:b0:8d:96:0c:44:
                    18:cf:80:ab:7e:a7:16:c7:93:3f:d9:9a:38:c3:02:
                    ff:1f:bb:52:17:db:0f:87:2e:5e:44:16:e0:99:53:
                    ca:fe:b8:67:75:1e:cb:65:ad:93:77:0c:54:57:a8:
                    42:d4:6d:57:c8:dc:ce:cb:a7:37:bc:4b:ee:0e:a7:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DB:D7:C9:4E:87:1B:4D:0B:29:48:53:32:A1:67:7A:4C:4E:BD:5C
            X509v3 Authority Key Identifier:
                keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:bb:d4:ef:b5:a3:91:09:66:af:cb:ae:dd:4b:a9:d7:91:62:
         ea:22:a7:18:76:54:cb:cc:89:6b:a8:dc:24:c2:32:20:bd:88:
         9b:5c:fe:40:9c:6d:49:22:f7:19:c3:25:18:9a:52:b3:56:44:
         71:c6:21:56:7b:7f:f1:b4:b9:13:eb:2e:09:6f:bb:6d:2a:b0:
         b8:ff:32:94:d0:7c:6e:c6:15:3b:9f:94:44:f6:a8:07:cc:4b:
         c2:79:ca:12:dc:06:8f:1e:1c:55:61:42:86:a7:7b:ce:c0:9e:
         72:f4:8d:8b:fe:13:5a:2d:71:cf:0c:8f:e2:46:26:1c:45:33:
         9b:3d:dd:01:b8:75:34:0f:66:59:74:42:8c:bd:00:e3:e9:21:
         a9:f4:0d:02:92:a0:9b:dc:e7:12:73:7c:67:bb:e2:4f:8e:33:
         9f:d0:e9:94:79:64:62:df:bd:d5:24:12:6a:f4:0d:75:76:bd:
         a4:8a:8d:e7:31:fe:52:21:63:e6:c6:9f:d6:39:8f:d8:b8:2c:
         0b:6d:2b:41:4a:2f:78:06:3d:7d:c1:c0:e3:6f:a5:a5:9a:1c:
         d5:54:8f:98:1d:ae:0f:b5:50:a8:f6:d6:2a:46:f2:3d:71:0f:
         1e:e5:0f:8b:86:07:2b:1d:7d:a1:c3:07:8f:d9:f7:0f:0a:de:
         1a:8b:1e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:45:49 2024 by rpki-client on console-ams.rpki-client.org