Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File:                     SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier:          exhC6bn0up6w0AfVOFgMFg9pKA905luyT8f5v204AVA=
Subject key identifier:   89:76:C8:94:D2:30:50:24:6C:4A:E8:C0:26:84:83:2C:38:DA:11:60
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer:       /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial:       018F874A37BB631A60837D7AA88253BA3FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number:          0C2F
Signing time:             Fri 17 May 2024 16:02:19 +0000
Manifest this update:     Fri 17 May 2024 16:02:19 +0000
Manifest next update:     Sat 18 May 2024 16:02:19 +0000
Files and hashes:         1: NAcaDz0vy4rMXI8YltGH341f-i8.roa (hash: vOzF8ku+YoJQtEa9SmG9PyQHs6Mv9Qh+WVqwM3VjhSg=)
                          2: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: ITrHsalIJDuVcH1HawrFRcJLIeQQIe631NMK3b5My8U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:37:bb:63:1a:60:83:7d:7a:a8:82:53:ba:3f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
        Validity
            Not Before: May 17 16:02:19 2024 GMT
            Not After : May 18 16:02:19 2024 GMT
        Subject: CN=8976c894d23050246c4ae8c02684832c38da1160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:f2:d1:7d:dc:43:bf:85:80:f9:be:18:fa:
                    63:90:07:27:c8:88:5e:79:13:9b:4b:a9:ec:2a:87:
                    a1:dd:4a:e9:5e:12:98:71:26:f7:95:e9:03:fd:c6:
                    55:94:38:06:b8:5c:46:30:9d:7e:41:71:a7:18:11:
                    2b:b6:68:20:4b:e5:29:cf:43:7a:7a:4b:5e:22:3b:
                    bb:75:25:aa:a6:e7:50:9b:4c:9d:ef:70:50:87:76:
                    25:67:4c:66:fa:87:cf:16:69:9e:26:50:d6:37:61:
                    12:ac:57:4d:18:b9:5f:ba:f1:2f:92:27:ea:ef:6b:
                    48:64:0d:e1:d1:ac:9f:a7:30:d9:56:0c:4c:9f:12:
                    51:04:68:aa:c6:0e:2f:ef:c9:bc:80:c3:8b:98:26:
                    85:9a:64:23:b2:ec:ad:b6:0d:99:46:a0:3f:f6:95:
                    fc:5e:59:6f:8a:9a:32:00:66:64:ef:47:1f:b3:fb:
                    43:3b:7f:1d:5b:21:0c:9d:43:b5:14:24:79:ac:4e:
                    d5:31:d6:07:1d:45:3f:e2:52:f7:8c:a1:6e:04:7f:
                    64:26:53:41:2b:56:99:98:cc:28:96:05:23:c3:dc:
                    20:e1:82:ab:7a:b6:65:d8:8c:5e:49:4b:41:9b:5a:
                    d8:e4:0f:71:c4:d3:05:3d:21:dc:5d:cb:c5:47:13:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:C8:94:D2:30:50:24:6C:4A:E8:C0:26:84:83:2C:38:DA:11:60
            X509v3 Authority Key Identifier:
                keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ec:b3:8d:cc:1f:d5:e7:b9:9b:e8:00:bd:14:48:75:1a:11:
         ee:b8:07:e9:89:c7:7a:41:9d:36:e6:37:bc:0a:e3:2b:10:7b:
         6d:d3:8a:d1:89:27:bd:99:c6:59:81:90:76:0f:c2:f6:c2:a4:
         2f:1c:b5:3a:6c:e9:15:c4:23:95:63:d1:15:45:d6:1d:bf:64:
         16:16:9e:97:af:3f:dd:78:b9:98:7b:98:1a:6a:58:1e:ce:59:
         ab:a2:11:85:31:00:ba:cf:7e:77:dc:33:60:58:93:1c:75:de:
         f8:12:ac:37:21:89:75:00:72:d1:6e:fe:8d:78:21:a3:34:45:
         6a:f4:4e:00:ec:08:a3:41:15:2a:9e:57:18:9b:26:88:90:06:
         74:ba:5a:98:22:a4:90:f9:e3:a3:af:5b:0c:0c:71:39:12:d5:
         e7:05:e8:c9:0f:64:11:f0:82:98:32:09:53:15:ba:f4:cf:a5:
         a9:f0:70:c2:5c:0b:2d:3e:71:b9:ed:37:42:bf:0c:68:fe:01:
         6d:5a:59:5f:ee:96:b1:1c:e1:52:ce:f6:77:cb:41:62:e1:69:
         57:50:9d:ca:d2:3a:16:c9:10:39:ac:c5:07:e1:bf:1d:5e:f7:
         2f:aa:75:d0:f4:b4:ad:ac:0d:e2:8e:77:37:18:05:a9:7a:98:
         98:ad:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:56:00 2024 by rpki-client on console-ams.rpki-client.org