Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File:                     v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier:          0i1cVgEIzW5WfDBVmq62cMgtDmNshdPUBSm5ETC0cg4=
Subject key identifier:   D7:D2:E4:D6:9B:CB:C3:EB:56:04:2E:A7:4C:CF:59:88:86:C4:A9:86
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer:       /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial:       01901E58D7BC3A798B09238445A1723FC2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number:          1158
Signing time:             Sun 16 Jun 2024 00:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:56 +0000
Files and hashes:         1: 3IO0DjWIjN2_fM8CJP-ojUVynfQ.roa (hash: Kd2BvN9smka8KBqmwAAS/5i1BthruxBYKf/X6z3Om14=)
                          2: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: 3s5mANPvmI2yCLIXyyrd/709fjLSiiWQuLeeRYQ0Km4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:d7:bc:3a:79:8b:09:23:84:45:a1:72:3f:c2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
        Validity
            Not Before: Jun 16 00:00:56 2024 GMT
            Not After : Jun 17 00:00:56 2024 GMT
        Subject: CN=d7d2e4d69bcbc3eb56042ea74ccf598886c4a986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:d8:5e:24:bf:43:5c:5f:70:8c:02:15:5e:
                    05:e4:a8:4c:11:91:67:a8:54:61:0e:6d:c9:d0:9b:
                    67:78:db:60:e1:de:83:5e:3b:b0:32:54:32:2a:0d:
                    b7:3d:cb:10:d0:07:7d:db:23:8b:da:78:76:96:65:
                    b7:e3:0d:49:ca:e6:b3:ac:a5:c8:65:1a:f2:ba:af:
                    1b:9b:35:42:2f:ea:02:86:05:45:47:bc:46:47:7d:
                    53:e9:37:af:df:57:42:f7:63:c9:a5:f4:1c:9c:f8:
                    e1:f5:bb:22:9d:5b:16:55:65:83:4a:45:72:51:00:
                    8a:46:c1:08:34:7e:85:e4:9b:4d:3a:c8:d9:4b:b9:
                    a4:24:31:0b:4a:d5:67:27:31:fc:bf:5e:06:73:a0:
                    cb:f7:c6:43:89:60:09:57:ec:26:7c:a3:4a:87:5f:
                    eb:ca:09:f7:01:4c:3f:ea:13:e4:cd:1a:28:9b:56:
                    ce:15:ea:5f:52:5c:e8:75:d8:a0:64:b4:e1:82:b5:
                    3f:40:63:28:b7:b6:72:03:67:0c:0e:05:59:7a:34:
                    04:37:dd:8f:70:2c:a5:81:25:51:13:62:83:84:ee:
                    79:98:1b:1d:6d:bd:2c:f7:79:27:3b:3e:e8:5b:b8:
                    55:bf:e4:d8:2d:4e:7f:5c:be:5f:31:ec:6d:2f:ea:
                    d6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D2:E4:D6:9B:CB:C3:EB:56:04:2E:A7:4C:CF:59:88:86:C4:A9:86
            X509v3 Authority Key Identifier:
                keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:66:e4:44:4f:1f:41:f4:50:63:b8:7c:a2:7a:4b:46:7a:19:
         f2:f1:f4:8e:ad:db:dd:32:40:8c:21:31:64:82:ed:8f:c3:c3:
         ef:18:0c:8f:11:fb:26:06:df:a4:8e:4e:f5:a2:67:26:fb:98:
         c3:c6:f7:05:0f:9a:3a:f7:4d:ed:c2:0e:1c:28:2f:33:a3:19:
         ca:19:f4:38:04:35:5c:90:5c:05:5f:aa:75:2d:3e:aa:5c:48:
         f7:a7:c2:d3:ce:1e:bc:c9:45:08:ba:2d:eb:59:1f:fd:5e:c4:
         b1:69:05:b8:a7:fd:63:8f:6e:cf:fd:7f:b5:7a:dd:4e:25:88:
         4d:79:ce:a0:8a:92:42:69:90:52:fb:b5:95:89:92:35:94:04:
         fd:99:34:cd:bb:da:de:5b:e2:78:78:c1:c2:28:5d:8b:98:57:
         60:9e:f2:51:98:25:cc:c5:4d:cc:2b:a9:1b:32:5b:13:e9:39:
         96:02:b7:d5:48:95:5a:12:cb:ff:80:87:0c:87:a2:71:e5:9f:
         ae:36:cb:b4:09:15:7b:50:b9:4f:53:16:ed:5c:9c:43:ef:0b:
         ed:7a:57:3b:b0:b3:0c:53:8e:1e:c6:58:27:c4:ed:78:b7:f4:
         aa:fe:b1:54:d5:a6:18:7a:e5:ed:96:d2:db:8b:27:c6:e0:c5:
         4c:06:73:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:02:32 2024 by rpki-client on console-ams.rpki-client.org