Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File:                     hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier:          gr01qaB9J3V7KG9aIR7C7TqEyNcbbfFFjdpHwrJJcMw=
Subject key identifier:   5E:7F:8A:C1:73:FC:68:B1:5C:E1:E5:FA:59:57:78:BD:F8:C3:0A:FA
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer:       /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial:       018F87B6A4789007E8C8ADBFDCB87E3C2A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number:          0B07
Signing time:             Fri 17 May 2024 18:00:44 +0000
Manifest this update:     Fri 17 May 2024 18:00:44 +0000
Manifest next update:     Sat 18 May 2024 18:00:44 +0000
Files and hashes:         1: Gxzk52QpRdmHdyvIJkJlC2oVPmg.roa (hash: pE0S3nu3CVAb5nAO8LOnIRj/WxUUHFEa3AuabTFvZ1s=)
                          2: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: pva+flEgu5OJAK2h4nAeewAUKdbm1CM5D9nmetiWgDg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a4:78:90:07:e8:c8:ad:bf:dc:b8:7e:3c:2a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
        Validity
            Not Before: May 17 18:00:44 2024 GMT
            Not After : May 18 18:00:44 2024 GMT
        Subject: CN=5e7f8ac173fc68b15ce1e5fa595778bdf8c30afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:b5:53:98:f3:08:18:36:d5:0e:26:10:b6:
                    be:73:ce:b3:df:f3:f6:76:4c:19:18:e2:e4:5a:99:
                    18:43:3b:76:8e:19:4e:a9:64:e0:ba:87:51:d5:05:
                    08:16:c1:a5:23:69:c8:7c:48:f9:ff:b8:75:fe:08:
                    7e:07:f0:53:da:7a:78:20:6a:b3:be:59:ad:11:fd:
                    68:4a:0e:5c:bf:a6:ae:7a:74:45:2a:17:c4:5e:b4:
                    bb:a1:9a:89:4e:9b:12:fe:fe:0c:21:aa:53:b3:2c:
                    70:8b:9d:99:10:f4:4a:ef:f5:07:5d:9d:eb:d6:62:
                    47:dc:a6:9d:35:30:e0:e8:1e:92:dd:51:65:73:20:
                    a7:7a:c0:ed:1c:03:74:75:52:5a:0b:e5:b1:c1:3a:
                    32:87:2a:18:0f:41:ff:37:64:24:56:9b:e8:5f:94:
                    eb:4b:c6:5a:b2:2c:51:f1:7c:8c:74:8c:63:af:c4:
                    ea:1c:b4:29:1d:ca:d5:a2:51:f1:ea:93:4c:24:6b:
                    17:29:cf:7e:8d:25:b4:2f:7d:e2:28:b1:18:78:30:
                    91:68:08:3a:af:c6:f9:d3:e0:8e:31:0a:1f:3e:d5:
                    d5:d3:a6:0a:f8:f7:fa:d4:48:a7:07:19:60:61:b3:
                    6b:c7:32:4d:3b:cb:48:a1:86:f4:31:dd:1c:02:da:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:8A:C1:73:FC:68:B1:5C:E1:E5:FA:59:57:78:BD:F8:C3:0A:FA
            X509v3 Authority Key Identifier:
                keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:79:ef:a6:cf:ea:52:c0:78:f7:71:99:44:35:08:fb:ba:72:
         11:9a:f8:e4:f9:f1:ea:59:dd:a4:2f:6b:20:8a:23:42:8f:af:
         76:9d:31:2f:73:69:e4:e8:41:c7:a6:ed:4d:a3:50:9d:fa:ec:
         66:9c:e6:a2:3c:ee:79:09:3e:ed:c5:ca:fe:b8:9d:49:f6:aa:
         58:23:db:36:c4:99:b6:b5:82:70:23:b1:7d:ce:c8:30:8a:ff:
         e1:ae:c9:3d:42:a5:91:19:8a:cd:fd:ed:40:f6:b3:fb:fc:e2:
         96:97:e9:a3:b3:10:e0:19:41:3e:74:3b:3f:6a:a0:d3:50:29:
         a0:63:ad:78:24:de:78:12:6f:e5:39:d3:af:1c:06:bd:2f:61:
         54:66:6b:9b:7f:2e:aa:07:47:c5:70:33:58:1c:2a:40:69:ae:
         60:34:27:4a:b1:7b:01:99:ef:06:e8:15:08:59:f9:89:dc:9b:
         55:81:80:13:e4:d0:2d:6b:c2:f1:76:fa:ad:41:75:2d:d4:22:
         9b:a0:51:b0:32:e8:66:38:97:a9:55:1c:a6:cb:99:49:19:b0:
         43:8c:ab:44:6d:d5:d3:85:4e:0b:68:f8:48:e3:af:b4:70:dc:
         36:a0:bc:ed:ec:60:c0:ee:2b:09:62:26:d9:f4:97:88:0a:83:
         f1:ea:f2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:25 2024 by rpki-client on console-ams.rpki-client.org