Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File:                     I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier:          YH5UzjaaikyTvHIiPXCwaYbVUwAMsHdO1lUZwfx6I/k=
Subject key identifier:   A4:8E:59:82:CE:37:1C:FD:BD:70:6B:A9:E7:51:06:7C:1E:1A:75:D6
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer:       /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial:       018F8DB841066F423E9A5E2A0DEA32203DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number:          10B9
Signing time:             Sat 18 May 2024 22:00:13 +0000
Manifest this update:     Sat 18 May 2024 22:00:13 +0000
Manifest next update:     Sun 19 May 2024 22:00:13 +0000
Files and hashes:         1: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: FnwAFogm4iN0f4TTlO8iT7baXNbdewpet+PBLdpqrqg=)
                          2: _MprdVNKWFfnW-ZXJmln6iniHZg.roa (hash: eII6YNjnO7ORggnCJykRZXks0HvgPgpLKg8Zk4i1HIQ=)
                          3: kk8mwqkZ31qPDZZsGKV3zFk4WJ4.roa (hash: mhFWyYNpC8JKt41Lqy/l0GTxjYIr1g82MIUogpupavY=)
                          4: m5B_Lq6LH_1upE6MZYUUMkpaJi8.roa (hash: i5r2sY3kpVMzS/VJn/+OX3Nzs0/7wiuvSOcME+jf0B0=)
                          5: nVA1lpsZLzCTOSJu1yBy_OVPpp8.roa (hash: eERDmA1bibMch1tz983bjllVX9LnCw/9lxxwDDzWNSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:b8:41:06:6f:42:3e:9a:5e:2a:0d:ea:32:20:3d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
        Validity
            Not Before: May 18 22:00:13 2024 GMT
            Not After : May 19 22:00:13 2024 GMT
        Subject: CN=a48e5982ce371cfdbd706ba9e751067c1e1a75d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:19:1e:48:1e:ea:46:3f:7e:d4:41:78:22:a4:
                    ef:ba:15:6c:d3:90:72:9c:76:18:2a:46:c2:e9:a8:
                    bc:b0:b5:6a:f1:70:ea:f3:7a:8d:d6:dc:84:19:4c:
                    28:aa:c2:10:0a:97:75:31:5e:5d:21:e3:e1:62:a0:
                    e2:e5:0b:14:4b:e1:1f:90:e7:a4:0f:c1:14:a7:6b:
                    00:50:6d:c6:e0:ed:ad:9c:e0:c4:cc:bd:d6:2d:8b:
                    ec:68:c4:77:c7:0f:95:63:aa:63:3b:d4:6d:90:c1:
                    60:ad:e4:9a:ab:4f:6f:3c:32:68:5b:13:df:b1:bb:
                    03:2b:a1:64:4f:c5:cf:39:21:1f:d0:9b:b6:14:05:
                    35:ee:e7:ef:1b:ec:f4:be:94:24:48:da:7b:3c:a5:
                    e3:b3:98:da:e5:a5:43:eb:53:0c:d4:33:47:13:45:
                    e4:60:7b:ab:3d:9a:8f:64:c4:fa:6f:11:a4:78:7a:
                    7c:1e:57:02:64:b4:0b:9d:5b:2e:45:d2:1d:2e:61:
                    c8:51:9b:95:de:a4:2d:c6:5c:a7:4e:3e:69:83:10:
                    27:b5:59:f4:63:69:2c:f2:e4:43:44:80:84:39:ec:
                    41:35:96:a0:8d:58:1b:c4:3a:6d:57:66:27:bc:c7:
                    6e:ef:2b:c8:e8:b9:9c:5e:33:29:66:04:bd:87:41:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8E:59:82:CE:37:1C:FD:BD:70:6B:A9:E7:51:06:7C:1E:1A:75:D6
            X509v3 Authority Key Identifier:
                keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0c:ed:86:35:cb:1a:b7:a7:3d:7b:5a:a9:62:71:19:b3:ce:
         5b:88:58:54:67:19:b7:ca:e3:6c:2a:64:61:44:5b:63:33:d6:
         7f:36:24:ef:6c:b1:e0:5e:d5:44:c6:9b:f2:94:20:14:66:ae:
         4e:f2:47:a8:4f:47:10:f5:f6:3e:29:31:55:79:dd:20:9f:ef:
         6a:4a:e1:4e:b5:14:d9:a1:30:cf:f4:c3:0e:69:ee:45:39:b6:
         4d:c1:fe:6f:07:e9:eb:e5:5b:b5:bb:fc:10:3a:05:92:08:c1:
         91:a9:44:82:d9:eb:5d:14:62:bb:08:89:a4:57:a4:d2:a1:f0:
         fe:77:f3:4d:0f:fd:1c:32:a6:37:f5:65:5e:d8:54:d8:24:db:
         69:d5:de:63:e8:5d:35:e3:95:7e:a1:e0:a1:96:a9:05:95:89:
         13:2f:14:5e:3b:d8:9a:2b:f5:8b:22:2b:92:7c:e2:43:58:38:
         e1:c4:1f:13:7e:a6:b0:12:9a:49:9c:11:84:5c:41:df:e7:59:
         0f:3a:22:01:36:ff:f1:a3:d1:30:42:71:7e:87:35:b3:e8:94:
         50:e7:3d:14:c7:e9:3d:ba:03:60:31:28:65:a7:db:ae:1f:e4:
         79:95:63:a0:06:30:26:4f:7d:94:f9:df:51:e1:5d:8b:a0:32:
         45:68:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:43:34 2024 by rpki-client on console-ams.rpki-client.org