Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
File:                     Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft (raw, json)
Hash identifier:          y+XXeOyOuszgL2zbzKOH7ulvZtl77eybeYt9drXwQWQ=
Subject key identifier:   09:87:95:8A:58:A4:C5:F4:51:FC:34:BF:AB:D0:9F:21:E1:36:5D:5E
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Certificate issuer:       /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial:       018F87ED29DC48C13DC541440B3E0B2ECDE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
Manifest number:          1088
Signing time:             Fri 17 May 2024 19:00:17 +0000
Manifest this update:     Fri 17 May 2024 19:00:17 +0000
Manifest next update:     Sat 18 May 2024 19:00:17 +0000
Files and hashes:         1: FpRGKRR2p-fa90OrKJFuHY5unhI.roa (hash: Qbnr2/e2vYQeQVMFrITbHj+s662018RGd3dbKFl3uFk=)
                          2: Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl (hash: DN0j/q5fr3X71uOciK1Fg3GkT9yhc+hisWV7+D0uQqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:29:dc:48:c1:3d:c5:41:44:0b:3e:0b:2e:cd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
        Validity
            Not Before: May 17 19:00:17 2024 GMT
            Not After : May 18 19:00:17 2024 GMT
        Subject: CN=0987958a58a4c5f451fc34bfabd09f21e1365d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:8f:fa:a9:db:50:1a:62:86:d0:03:ac:58:
                    ae:aa:75:41:52:3e:5b:10:53:18:bb:eb:23:c7:21:
                    f2:ca:5f:8e:0b:49:ba:b6:ca:ad:6d:0b:92:2a:1b:
                    ef:54:f1:ec:4f:78:70:c0:0f:b7:c4:d7:16:e3:08:
                    23:60:98:7e:5d:47:4f:5f:73:3c:df:a3:e8:29:2b:
                    fd:0d:40:89:d8:86:c1:6d:67:44:bb:f2:5b:1b:06:
                    48:94:d2:47:95:4e:4a:9a:f3:a2:6a:8d:81:cc:46:
                    ec:f2:47:ae:4b:c3:05:6e:fe:59:82:d2:ef:6e:30:
                    f0:81:34:ab:0d:ae:11:05:5d:d7:4f:36:3c:df:f2:
                    f9:5a:47:91:8e:69:be:c0:8d:7b:fd:f2:4a:0d:7d:
                    af:36:2f:ff:f1:fd:16:83:d1:2e:8f:ac:2d:16:7c:
                    79:16:68:d2:21:a5:83:3d:1b:3f:0c:b6:2b:29:4e:
                    94:5b:ec:bc:bb:6a:10:e0:ed:59:45:7a:33:93:80:
                    d1:8b:e0:d5:c7:b8:ca:0c:05:a0:13:e6:52:f7:5c:
                    cf:e7:3d:31:9d:8a:b6:53:3d:dd:bf:f8:59:b0:8b:
                    af:77:fe:45:fe:31:9d:6e:6f:bb:85:e8:1c:eb:43:
                    9d:21:ed:cd:05:f1:76:1c:03:6e:58:e0:5b:80:0d:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:87:95:8A:58:A4:C5:F4:51:FC:34:BF:AB:D0:9F:21:E1:36:5D:5E
            X509v3 Authority Key Identifier:
                keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:d1:5d:ef:3b:6f:94:1f:dd:36:a7:a0:1f:4b:f7:50:d9:27:
         90:a0:1a:89:a8:6c:24:d4:4d:ec:01:f7:26:55:68:9a:df:0c:
         28:96:3c:c3:af:0a:bb:18:f8:e3:47:39:9a:a8:e6:53:a7:e8:
         39:c8:dc:18:fa:87:f9:64:a2:83:36:62:aa:bf:0e:ae:74:bc:
         96:0b:1f:26:0a:c6:fb:53:b4:d5:e4:58:a6:2b:a4:4f:a9:d1:
         7c:f6:5c:b6:fe:3b:b9:a5:49:f2:60:2e:59:b0:75:6a:c6:d9:
         bc:d0:c6:8a:4f:8f:92:bd:b5:14:15:18:ba:ea:1b:5b:26:6d:
         95:e6:b4:dc:1a:fa:6c:35:aa:0b:b2:b4:5d:8c:51:4d:41:b0:
         a4:5c:11:13:26:0c:99:fb:98:e9:90:51:c9:8d:0e:ef:05:28:
         34:39:ff:c1:89:f6:28:19:15:83:57:39:b1:ae:4d:60:13:18:
         f3:93:01:77:0e:ae:21:c9:3f:0c:08:3d:28:a0:80:72:2d:40:
         49:46:b6:54:98:1d:5c:62:dd:cf:2d:21:d6:60:af:47:77:97:
         cd:b9:fb:e7:2f:09:9e:08:2a:70:65:20:18:67:4a:60:2d:c2:
         32:64:a9:03:47:f9:7b:25:2e:1c:95:bc:e1:24:3b:1d:0e:3a:
         cd:ae:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:42:59 2024 by rpki-client on console-ams.rpki-client.org