Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File:                     S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier:          1a/ASbYI/2u3/h3QSbPHqBmP0nFJWY4FKbrHsRAuVTU=
Subject key identifier:   7B:DE:EE:24:A6:76:22:59:FD:FC:B8:7D:94:D0:1B:2D:F6:A6:24:81
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer:       /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial:       018F893955DCF1524EB4FDEEEC23CCB8A39C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number:          0435
Signing time:             Sat 18 May 2024 01:03:06 +0000
Manifest this update:     Sat 18 May 2024 01:03:06 +0000
Manifest next update:     Sun 19 May 2024 01:03:06 +0000
Files and hashes:         1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: i2T9TEQSnrA/Rq/AJZkmijEe/BgJuTKSFkKdzDQSnqs=)
                          2: sH5bf7xRdvsa6ZuBpqEy31EH0Yw.roa (hash: S6xM2Y7AHmCfHO9b4C2Mtrk2TJGU2FOZTC+RSRt8YvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:39:55:dc:f1:52:4e:b4:fd:ee:ec:23:cc:b8:a3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
        Validity
            Not Before: May 18 01:03:06 2024 GMT
            Not After : May 19 01:03:06 2024 GMT
        Subject: CN=7bdeee24a6762259fdfcb87d94d01b2df6a62481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0a:12:ca:55:9d:17:9f:5d:27:af:ee:25:05:
                    6f:7a:0d:31:07:b3:e8:55:8e:fc:e8:8a:6d:33:40:
                    14:9d:bc:d4:26:91:98:09:e9:ab:3b:39:11:57:eb:
                    b5:87:cc:92:b9:35:26:f7:e3:cc:17:83:b2:7d:53:
                    2c:11:ec:56:5b:4f:0e:59:0d:17:e9:0b:9e:df:31:
                    9b:05:ed:e2:32:52:ba:e7:f3:aa:41:8e:0f:9d:b4:
                    0b:98:dc:c8:c9:c6:66:12:ca:cb:91:6a:3d:b5:2f:
                    c5:3b:aa:11:1c:be:6a:a3:fa:c9:6a:64:19:d4:bc:
                    be:88:5e:59:66:30:3e:ea:21:b6:9d:89:2a:0b:bc:
                    fd:aa:a3:15:1c:de:7d:83:37:b6:52:93:08:2e:05:
                    70:97:a9:99:fa:6a:7f:29:8d:33:0a:04:d0:49:d3:
                    4d:a4:52:21:84:e5:2b:cd:0a:0c:7d:a7:27:4c:99:
                    f6:83:0f:09:15:65:fc:60:86:25:5d:fc:e2:ea:99:
                    f1:76:e8:7a:e1:ab:ff:31:8e:c4:df:6a:1c:01:cc:
                    90:2e:98:7c:8d:ba:c3:82:44:10:6e:0e:12:4e:1b:
                    c5:71:0c:d4:33:3e:e1:e3:7d:a1:df:a5:25:78:32:
                    20:93:43:15:4e:1f:fb:ad:e6:73:c2:91:63:df:f9:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DE:EE:24:A6:76:22:59:FD:FC:B8:7D:94:D0:1B:2D:F6:A6:24:81
            X509v3 Authority Key Identifier:
                keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:fe:dd:92:2f:ac:a5:c7:5d:4b:13:e3:b3:cf:cc:d7:d3:
         9e:0f:ca:6a:5e:b0:8a:40:0a:c9:a1:a0:47:8b:84:98:89:79:
         b1:25:57:00:93:8e:83:31:0e:af:c6:e5:e1:25:07:7c:b7:95:
         9b:ee:da:43:68:31:40:5e:bf:84:22:35:a9:d1:be:de:25:fd:
         5b:cd:ea:02:85:b1:01:2f:2b:bf:c6:8d:9a:1e:03:d9:f0:b6:
         5d:d6:3a:39:4f:77:e9:a5:d9:72:3e:9f:6a:61:8d:24:53:12:
         6b:8f:6a:ce:a8:90:1f:d6:ed:0f:7a:b2:83:c8:9e:1a:48:21:
         04:59:26:66:da:9f:1c:81:c6:5f:24:23:d7:c7:20:50:1a:84:
         73:aa:a0:8a:04:77:86:c7:e7:66:2e:8f:a5:fa:6f:50:29:7f:
         ea:ed:a4:f2:85:29:63:06:d2:50:f1:9a:36:4f:4c:53:2a:46:
         f7:1c:64:e2:68:78:16:4f:b1:9a:a7:8a:9c:1c:a5:0e:ff:2d:
         40:b5:85:3a:b0:35:b3:cf:91:71:1d:76:05:ec:09:f1:5c:3a:
         87:0a:26:cf:03:7c:75:40:86:3d:35:21:46:cf:92:57:ed:d0:
         1c:0d:c8:a4:af:18:91:9a:82:78:fe:57:6d:9a:eb:14:bb:32:
         03:81:be:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:05:46 2024 by rpki-client on console-ams.rpki-client.org