Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File:                     T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier:          5HMOpgfTmin2kaFZ5xRPquXkiovo0P7I9Gk2MZ0jacc=
Subject key identifier:   4F:12:C2:C7:1C:66:2A:6B:21:5D:82:1A:8D:7F:C7:03:9C:6E:BD:AC
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer:       /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial:       018F874A2F32D2F99F6B4BEC5AFCF40AC618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number:          089E
Signing time:             Fri 17 May 2024 16:02:16 +0000
Manifest this update:     Fri 17 May 2024 16:02:16 +0000
Manifest next update:     Sat 18 May 2024 16:02:16 +0000
Files and hashes:         1: FxV3Y_5foeiBO07lxzXTkTIRT8A.roa (hash: TObIQhIrd+jkMqh5NNeTCeki27I7eYxZwT0C7CWK8Yk=)
                          2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: 0EUgd7hGi3wYvxnmhSXMCGbBSnyyXgaXLQE8FdyBv/E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:2f:32:d2:f9:9f:6b:4b:ec:5a:fc:f4:0a:c6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
        Validity
            Not Before: May 17 16:02:16 2024 GMT
            Not After : May 18 16:02:16 2024 GMT
        Subject: CN=4f12c2c71c662a6b215d821a8d7fc7039c6ebdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:3c:07:5a:0a:fa:ca:54:0f:47:d4:a2:b9:
                    22:00:ae:9b:20:01:f9:2b:fa:e7:29:b4:72:aa:48:
                    1e:28:73:90:48:05:95:17:19:a8:45:24:bd:04:9d:
                    1b:e8:47:8c:c0:e2:df:f7:6c:2f:6e:aa:ce:cd:cc:
                    e6:94:35:70:cd:ee:28:aa:ca:0e:a6:10:e7:94:6d:
                    13:ab:34:fd:2d:3e:53:2c:80:ed:7a:3b:38:38:9d:
                    11:ce:b2:b9:1d:47:a7:8a:7a:95:2d:bf:5d:27:c5:
                    45:87:3b:66:14:a5:bd:1d:3c:53:73:16:0b:9f:6c:
                    7e:c4:1b:6f:18:fa:82:0b:9f:fe:aa:95:99:59:74:
                    18:23:bf:e4:4d:2b:a1:37:24:53:86:53:32:f2:3a:
                    13:7d:77:cf:6f:61:02:4a:b6:a4:d8:36:7f:f6:ea:
                    66:ff:53:3d:10:00:19:d8:4f:91:af:06:aa:75:c7:
                    49:64:7b:c1:50:c2:9f:7f:23:ea:33:aa:02:93:9b:
                    5e:db:17:f8:c4:33:76:ed:e7:50:71:ab:3e:9f:7a:
                    bf:84:a1:69:88:e2:0d:06:e6:4d:6d:06:d4:c3:0d:
                    ae:78:33:42:f8:a6:65:0f:18:ae:7c:a7:eb:23:8e:
                    9e:da:4b:de:67:09:f8:e5:08:21:57:8f:26:a3:75:
                    b3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:12:C2:C7:1C:66:2A:6B:21:5D:82:1A:8D:7F:C7:03:9C:6E:BD:AC
            X509v3 Authority Key Identifier:
                keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:7a:ae:67:4f:21:8d:b3:f4:09:06:82:4f:a6:2e:30:df:55:
         9b:57:a1:ed:04:7a:73:62:0e:3d:86:a2:bb:0f:b9:62:a7:e5:
         29:e7:ed:b0:6e:a5:fc:fb:c9:a2:23:96:ba:36:4e:38:52:2c:
         8b:25:ff:16:ac:34:b5:f3:91:d9:cb:4a:59:41:23:17:a7:01:
         1e:b9:4f:b7:e8:cd:91:c2:de:2e:37:93:3c:93:ee:f4:8c:39:
         2c:8e:9d:45:5a:1c:47:23:af:fd:98:2c:61:b0:a4:52:76:14:
         ea:e9:42:60:78:d4:60:c4:9e:d5:5b:17:da:5e:e5:da:5e:aa:
         a0:2f:89:89:2b:28:21:35:1c:79:05:0f:6f:b2:d1:e3:79:68:
         4b:5b:df:84:af:81:e6:a0:83:dc:56:36:58:92:53:20:3d:55:
         40:1a:41:14:e8:cf:db:75:d3:ba:bf:14:21:6b:9c:f0:91:bb:
         c3:42:1e:19:4b:47:d8:9d:07:7a:1e:fb:9d:f2:05:aa:f0:61:
         0e:cd:57:31:15:ce:13:fa:bd:53:70:40:98:0a:1f:c8:1a:9d:
         4e:a1:a2:e5:9b:ad:5c:9f:13:33:57:48:20:eb:ce:76:79:24:
         21:5e:bf:09:ee:61:8d:80:c4:8d:99:a0:f5:47:55:dd:91:ef:
         7c:c4:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:56:09 2024 by rpki-client on console-ams.rpki-client.org