Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File:                     t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier:          maw+I9UoJxJWfzANjCrazxP+MweBm4rUjeXWkF/KCoA=
Subject key identifier:   F8:67:5B:9D:72:32:A1:FE:7B:3D:78:46:4D:58:8A:95:48:C4:0E:B0
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer:       /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial:       018F89375BBF1785469C565790CFAE017451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number:          0C36
Signing time:             Sat 18 May 2024 01:00:57 +0000
Manifest this update:     Sat 18 May 2024 01:00:57 +0000
Manifest next update:     Sun 19 May 2024 01:00:57 +0000
Files and hashes:         1: ARsT5HTuBvslVOTCf9gi2Qu7OlE.roa (hash: mTL5NmAFWFIgi7MBRasqPBVvX+1n/6cmmYd1YgU1Q+o=)
                          2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: pk7VKNS8Ihe+GHD4wYLFREwgG/uokOd7tGCdnnRiom0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:5b:bf:17:85:46:9c:56:57:90:cf:ae:01:74:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
        Validity
            Not Before: May 18 01:00:57 2024 GMT
            Not After : May 19 01:00:57 2024 GMT
        Subject: CN=f8675b9d7232a1fe7b3d78464d588a9548c40eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:65:92:1f:2c:e6:64:bb:86:e6:7f:a3:6e:
                    6a:92:b4:15:33:ca:29:a2:9d:d9:a1:13:f2:31:88:
                    5e:28:c0:e4:7d:e7:69:6f:5c:a9:5c:09:f4:b0:51:
                    cf:19:58:84:9f:42:92:90:a9:22:aa:16:9e:c7:26:
                    23:42:fa:45:02:fc:16:8f:5e:89:60:cf:d7:6d:d9:
                    0f:a2:49:06:26:8a:51:65:bf:b4:a5:6c:71:87:be:
                    ea:b1:fd:cb:f1:c1:35:f2:0d:66:dc:9e:fe:26:b3:
                    8e:96:2d:98:5e:d5:2c:61:a0:bd:61:58:aa:f1:5b:
                    18:4a:45:32:de:43:e6:36:18:00:3b:88:c7:b5:ce:
                    8a:0f:5e:92:ba:17:cd:88:2d:1f:2f:5f:aa:c7:2a:
                    4a:b4:a4:9c:17:bd:d6:c0:d6:3b:e2:2f:4c:c3:c4:
                    3d:34:87:b2:da:7c:e6:9e:1d:00:15:e4:16:98:ec:
                    e1:e3:e6:0f:a4:fc:cb:2b:5d:a5:19:17:6a:f2:24:
                    e6:f8:bf:a8:75:79:15:1c:e2:52:d2:22:89:3b:37:
                    4f:6d:a4:d2:b7:ee:fb:33:2f:79:fc:48:c3:bb:1c:
                    b0:99:7d:53:f6:44:ae:0a:29:80:0f:f2:db:41:d2:
                    ba:b1:64:91:24:25:ce:e6:f4:41:21:6b:7e:96:fc:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:67:5B:9D:72:32:A1:FE:7B:3D:78:46:4D:58:8A:95:48:C4:0E:B0
            X509v3 Authority Key Identifier:
                keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d0:5c:fb:43:32:a7:74:10:29:74:96:fd:4f:50:42:50:fc:
         f0:00:10:f0:ea:3e:f5:99:6d:1b:8a:92:c6:ec:45:35:25:95:
         11:a7:9b:4c:ee:8e:93:c4:0b:d6:34:16:05:40:99:5b:e4:1c:
         df:04:e3:ee:1d:95:03:df:ad:7b:4a:e5:06:b4:1a:1e:3a:5e:
         cf:52:35:f1:cf:6a:34:ab:cd:e5:95:50:98:b9:53:bd:45:81:
         e0:78:d7:09:45:04:e6:85:89:94:c3:a6:eb:28:a1:44:3f:8f:
         81:6a:d2:c4:71:55:b7:d4:08:34:80:78:c5:eb:37:98:e0:c5:
         23:b7:6e:79:8e:e8:99:b7:be:c1:62:1d:84:54:98:56:31:83:
         66:0c:9c:d9:a3:37:7f:a6:96:1c:2f:38:e6:41:5d:8d:8b:8f:
         b9:e9:19:9d:ca:8d:f1:b8:92:f0:12:f1:18:f7:c9:a8:7a:41:
         45:88:a2:04:3e:f6:f4:50:06:38:a9:ba:26:19:15:b6:67:79:
         87:a8:37:72:93:27:38:ec:48:54:61:f1:da:87:6c:e0:cf:6f:
         dd:08:36:03:1d:b8:5f:b7:6d:b9:9d:c4:9d:f7:fb:ca:c3:6d:
         87:17:20:25:49:1d:99:9c:81:7f:ec:58:57:29:96:94:46:5e:
         49:f1:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:03:18 2024 by rpki-client on console-ams.rpki-client.org