Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
File:                     m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json)
Hash identifier:          VZCFItbb63l8BwtDeQtkauEVTWoc1+WG34SpqaI7ga4=
Subject key identifier:   42:78:63:ED:E9:E5:21:0C:8D:D6:BE:B8:88:A3:C1:5E:51:05:BC:CB
Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF
Certificate issuer:       /CN=9b5841b07ccf6399799b3586a1b22885923df8bf
Certificate serial:       018F874A1BAD6922A6552D2EB5418CB2BEAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
Manifest number:          0DF3
Signing time:             Fri 17 May 2024 16:02:11 +0000
Manifest this update:     Fri 17 May 2024 16:02:11 +0000
Manifest next update:     Sat 18 May 2024 16:02:11 +0000
Files and hashes:         1: DlNth4WDDnp_cYUUCN_K7LkBW9E.roa (hash: OGpkpSV6rU+yQpISzF8Kg33mzYERO6m8OhJ2g7bFAMo=)
                          2: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: s66TgVHzivi5gOseZOFQzungXuwLxC6EVWT7bzcKt9M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:1b:ad:69:22:a6:55:2d:2e:b5:41:8c:b2:be:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf
        Validity
            Not Before: May 17 16:02:11 2024 GMT
            Not After : May 18 16:02:11 2024 GMT
        Subject: CN=427863ede9e5210c8dd6beb888a3c15e5105bccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:78:14:8f:d8:af:ba:aa:d6:8e:8d:04:c1:a0:
                    47:1b:82:bd:24:54:ce:2a:15:ad:36:a1:95:a4:eb:
                    58:e0:a2:01:9a:14:77:83:81:9a:f5:ba:32:2d:90:
                    0b:d0:6f:c2:ad:57:52:3f:60:e7:2a:c8:e2:89:75:
                    4a:87:4a:68:7f:ab:84:3a:c7:82:de:34:58:f3:36:
                    a2:47:91:30:82:9d:7b:64:46:c4:3e:47:dc:8c:73:
                    bd:ac:3f:72:34:28:45:27:01:f3:14:28:8e:b1:81:
                    05:f4:d5:6a:63:31:9d:79:2c:9e:7c:a1:88:e2:e5:
                    1f:4b:bf:96:7f:2d:d0:f7:2e:36:11:0e:b4:39:d6:
                    22:1e:d8:32:8f:c9:35:7d:90:88:ce:b5:b0:69:af:
                    de:fb:ec:a6:96:93:b3:0e:09:c7:8b:d0:ab:dc:3c:
                    ac:ce:eb:54:1c:fc:6e:81:0e:bc:12:a9:f0:c4:23:
                    66:f3:a2:6c:74:11:aa:33:f2:20:bd:aa:1f:79:98:
                    a6:7d:ea:ad:05:56:7e:10:1e:db:16:f6:67:70:49:
                    6e:47:68:29:2e:b2:ea:8f:02:cf:e6:14:e0:be:57:
                    ff:e9:22:48:ac:21:c0:f6:b8:cd:a3:19:4b:62:fb:
                    57:b5:16:b6:75:7a:c1:99:e7:14:56:fd:28:2d:44:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:78:63:ED:E9:E5:21:0C:8D:D6:BE:B8:88:A3:C1:5E:51:05:BC:CB
            X509v3 Authority Key Identifier:
                keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e8:2e:fc:89:fc:c2:42:a4:1f:d4:4f:6f:e1:bc:ac:52:22:
         24:d4:73:dd:f0:df:39:d5:db:83:fb:64:bb:3c:94:b6:1a:af:
         50:4b:61:09:9e:63:e1:e2:a3:a7:56:aa:23:32:fc:fb:5a:9b:
         f7:85:7c:58:8b:63:14:78:12:13:ba:1d:b1:64:02:99:24:d0:
         31:0e:11:78:5c:36:6d:b3:de:5c:12:ed:88:85:14:8f:9d:76:
         3e:cc:17:69:5d:25:99:0b:1c:16:c2:01:6d:27:2b:ed:2e:6d:
         e2:a1:45:f6:dc:a5:fb:83:c4:26:ce:9d:91:d9:53:1d:51:0f:
         23:13:58:4c:21:77:cc:1b:1e:2d:87:b9:ce:d3:f6:f7:56:4c:
         d9:e4:dd:83:f8:ab:6a:24:ac:51:a2:d0:fc:44:7f:10:09:29:
         ea:05:53:ee:31:e9:f8:8c:01:ff:72:21:7b:01:9b:90:c1:c6:
         de:82:90:1a:5d:b3:78:37:cf:73:ba:8f:c6:19:cb:1c:f0:2c:
         de:44:aa:61:8e:9b:b0:9c:7a:04:8f:5f:22:17:6e:29:b9:e1:
         5c:dd:d2:d6:d2:e5:d5:3f:54:9b:ae:d0:b7:42:d5:00:d3:43:
         1d:e5:13:d4:25:4f:9a:55:68:26:7e:df:68:22:9e:9f:8f:3e:
         3b:2a:41:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:14 2024 by rpki-client on console-ams.rpki-client.org