Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File:                     iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier:          U7COyikeGU1OI5oReIohLrmEzwfFD92qjh1gzDskYuE=
Subject key identifier:   22:9F:90:45:DE:F7:2B:50:E6:6D:86:F1:24:E7:72:01:A9:3A:C4:8F
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer:       /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial:       018F87ED3D535073520E3F8267C0C8131F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number:          082F
Signing time:             Fri 17 May 2024 19:00:22 +0000
Manifest this update:     Fri 17 May 2024 19:00:22 +0000
Manifest next update:     Sat 18 May 2024 19:00:22 +0000
Files and hashes:         1: RItRRXvLE8yRNRYUJjMGpPEHYYY.roa (hash: XvLqHBGfcVW1///wWrMpaNMU/tjYhgt5iDEpPXaRkc8=)
                          2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: pjsDjqMLXjbMVmW0Pod7u1hDREXKf4MeHcs7FEadIeQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3d:53:50:73:52:0e:3f:82:67:c0:c8:13:1f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
        Validity
            Not Before: May 17 19:00:22 2024 GMT
            Not After : May 18 19:00:22 2024 GMT
        Subject: CN=229f9045def72b50e66d86f124e77201a93ac48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:f3:23:05:e7:f7:5e:d2:ef:da:4e:26:a3:
                    fc:68:3c:18:9a:9f:d0:c8:e6:bd:48:37:ed:1e:bd:
                    a1:87:96:ab:dd:71:72:a5:94:da:b5:f9:44:97:91:
                    9a:72:39:a5:d6:7f:9b:40:c9:10:27:b0:e8:b6:81:
                    f1:b5:44:ab:7d:0a:88:9c:33:8f:e9:68:9b:b2:94:
                    28:ea:ba:bc:f3:82:c9:cc:05:5a:38:4b:4b:01:dc:
                    c4:f6:92:d2:9d:bd:ec:39:55:ee:b7:5f:cd:36:05:
                    df:24:58:d6:d6:fb:17:a9:7e:8a:09:a7:7c:a3:ff:
                    67:32:ef:76:6b:d9:13:30:9f:fa:18:d7:4c:48:1c:
                    27:50:df:b0:01:12:07:80:85:6d:8c:90:be:ff:95:
                    b6:65:7d:ff:19:e8:f7:0d:ee:58:94:a8:07:bd:be:
                    89:81:3c:25:c2:cb:f8:fc:dc:99:ca:ee:f3:91:6b:
                    ea:a6:eb:82:d8:03:1e:54:df:57:b3:af:a0:f5:73:
                    21:4a:b3:e5:bc:3a:83:7e:eb:bd:42:e9:93:ae:32:
                    6e:79:44:9f:a1:45:4a:05:7c:04:2e:45:52:20:02:
                    4d:e2:7f:93:db:75:e1:64:54:1a:30:95:03:57:cd:
                    4b:f6:92:d0:7b:43:47:6b:f4:c7:ff:2d:4d:93:e7:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9F:90:45:DE:F7:2B:50:E6:6D:86:F1:24:E7:72:01:A9:3A:C4:8F
            X509v3 Authority Key Identifier:
                keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:46:ae:ef:a8:99:f7:7a:60:02:05:5a:15:f9:91:fd:f6:5f:
         57:5d:69:0b:2f:05:dd:9e:aa:a8:08:53:cf:22:a8:10:55:11:
         b7:e0:66:7b:67:0e:65:36:91:61:20:a5:34:91:b9:f5:63:35:
         08:d5:6a:2a:1c:97:ec:f0:77:06:73:e9:d4:db:e7:de:af:ba:
         fa:4f:07:aa:c5:16:4d:79:32:59:09:b7:77:56:53:d7:3c:f3:
         4c:f2:2f:d8:7a:bd:c1:80:07:93:c2:61:ff:ad:44:d7:38:5f:
         f6:31:da:4b:a8:ab:de:14:5a:a3:e9:40:56:cd:95:3b:b0:2b:
         6e:8c:ee:3c:bd:b8:c7:22:00:e3:9c:32:82:2b:c6:14:34:ad:
         3b:45:e3:5f:13:92:e7:60:00:06:20:1f:82:e9:e8:d0:de:f2:
         c7:10:3e:38:a4:23:df:e7:cc:b0:4a:a0:4a:f2:2d:40:ad:ff:
         6d:01:bf:5d:99:2d:00:69:99:09:cc:58:6e:f6:34:42:dc:f6:
         0a:79:23:ed:52:b5:14:87:64:99:f5:fe:6c:5f:61:44:8e:10:
         c4:b8:dd:2a:e1:69:01:f5:f0:9b:16:57:22:07:26:43:44:54:
         29:d4:33:f8:4d:7b:33:8a:f5:03:b5:01:79:d6:f9:75:ef:46:
         cc:0f:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:17 2024 by rpki-client on console-fra.rpki-client.org