Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          BNKkbVxUniM40xXrAEzx3HJ0Oz5Aru2dwGJovPsx4dk=
Subject key identifier:   BB:52:90:FA:33:87:9B:00:42:1E:DB:84:AE:A3:69:81:55:7B:AB:A1
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       018F9270A8827039C43E1D087AAB00C09BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1205
Signing time:             Sun 19 May 2024 20:00:07 +0000
Manifest this update:     Sun 19 May 2024 20:00:07 +0000
Manifest next update:     Mon 20 May 2024 20:00:07 +0000
Files and hashes:         1: 6adnApTkS6VzqCwvSR2Lh4fK5Ls.roa (hash: HYRI34lLbGwoMdHvr3yqDKEFXqaMChbrQxPNAIkruXI=)
                          2: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: 0PW5PNh5Y9+zpni/pTRi7ZKTaE5hXXxWMpxYglcM6Pk=)
                          3: AhaXJypEb-pjgQz3GQsng1FRN-c.roa (hash: 1O1sJCirN0hFBVjIFkUulV/0StGyich/MyCxH2Vjfo4=)
                          4: hsrQr_d_tk0oLIpPAPMuFwnYU-k.roa (hash: BIt3XBxnsHk5DTr3aBBWB7t6v7a/WhSZ0Tes6W/Wl8U=)
                          5: qrh5Z0Md6SibVWO3Fml81CPeOIk.roa (hash: BHPAQoQ5JlbrS3sEPdd2IfQdHgooflBpAqksyykFA7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:70:a8:82:70:39:c4:3e:1d:08:7a:ab:00:c0:9b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: May 19 20:00:07 2024 GMT
            Not After : May 20 20:00:07 2024 GMT
        Subject: CN=bb5290fa33879b00421edb84aea36981557baba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:b9:9b:de:1c:76:72:e1:a8:4b:33:50:5f:
                    67:6c:c4:3b:40:9e:b5:03:49:2f:14:0a:e0:e9:2a:
                    40:5e:76:a9:96:fe:e0:e9:b9:34:e7:da:8c:ba:94:
                    2c:2d:68:2e:61:8d:58:5b:48:95:c9:c5:f1:c1:d2:
                    a1:34:35:70:b1:73:99:0a:1d:74:77:1e:d3:06:9e:
                    f2:45:22:9f:57:59:b6:fd:52:68:f0:c5:55:62:a3:
                    a5:8b:85:e9:76:4c:4e:b4:aa:88:dd:7a:83:3b:5b:
                    93:8b:7d:8c:91:89:d5:59:36:fc:e1:0e:c6:1d:a1:
                    12:5c:aa:a4:3f:6d:01:6a:99:a3:ac:72:4c:7c:97:
                    09:6d:a1:86:2b:28:c4:14:43:06:b6:25:ea:dd:fb:
                    fd:7b:2a:2d:ee:67:72:eb:b9:fb:39:cb:49:5e:38:
                    c6:47:b1:4e:e2:0a:ab:89:64:10:df:66:a2:c7:62:
                    20:13:4d:6e:fa:2b:8c:f3:b9:e7:ad:b5:27:8a:d7:
                    79:4c:cb:92:36:39:8e:f5:63:a4:78:c3:d3:2f:be:
                    d0:4e:08:44:1e:a0:67:7d:f6:01:b1:8c:6c:91:86:
                    f4:9a:20:19:09:7c:dc:b8:be:da:e4:9c:dc:1b:46:
                    86:16:9a:9f:70:8a:88:74:1d:b6:9b:69:21:f7:c9:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:52:90:FA:33:87:9B:00:42:1E:DB:84:AE:A3:69:81:55:7B:AB:A1
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:eb:38:b6:6c:b2:4a:44:b6:7f:52:34:5d:47:20:96:4d:5a:
         0c:26:75:fb:03:9c:84:54:6d:c8:2a:ca:c8:e3:b2:fb:c9:41:
         6f:62:e6:ba:b4:7f:46:8d:99:ae:12:e0:af:45:6e:95:b8:65:
         98:a0:04:f6:cb:19:8d:a3:c2:1f:3a:14:28:34:8d:6d:78:5d:
         12:b6:81:bf:f1:0c:25:c7:45:21:39:90:ab:f6:30:7c:4b:dc:
         b7:f9:9e:9a:cb:19:90:26:81:87:1c:c4:e5:4b:5a:bc:74:8d:
         56:b4:10:7c:f1:60:2b:36:77:2c:64:e3:2a:bd:28:e1:fc:d0:
         ae:75:7b:17:1c:64:ea:59:3b:12:ff:07:56:1f:7b:a1:55:18:
         92:9d:89:6c:65:30:5d:a1:9e:83:a5:a5:1f:b2:81:0d:69:97:
         bb:c6:4c:be:1e:ed:07:eb:4b:81:50:86:de:30:09:7a:ac:b5:
         a5:89:eb:0c:5b:2f:f2:4b:00:de:4b:19:d4:f3:c8:c4:0f:34:
         95:88:f6:87:c2:60:a5:03:98:71:08:14:23:78:67:90:56:1e:
         13:c4:04:90:78:2a:08:36:27:5e:27:58:3f:be:05:6e:c4:3b:
         69:68:79:60:1e:22:7e:e9:96:af:c9:16:60:55:f1:54:f2:2c:
         4e:90:95:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:01:41 2024 by rpki-client on console-ams.rpki-client.org