Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
File:                     oInHIR6wy6D9k84xaziVOM4aywA.mft (raw, json)
Hash identifier:          TezBQ8DFX8ys5HvPLkwxu1nIFF2THfPtc9iVJvCT+jc=
Subject key identifier:   40:23:74:A1:ED:5E:86:E4:C5:93:07:F5:45:D0:59:A7:0F:1D:21:4E
Authority key identifier: A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
Certificate issuer:       /CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Certificate serial:       018F89374C53D46AE8EBCA429EEA08D9DEDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
Manifest number:          09E8
Signing time:             Sat 18 May 2024 01:00:53 +0000
Manifest this update:     Sat 18 May 2024 01:00:53 +0000
Manifest next update:     Sun 19 May 2024 01:00:53 +0000
Files and hashes:         1: Ls7ao08Q1H0G804fwEiRXOIpDXI.roa (hash: nbA0FgF9/oeKHXyw4r5fHr3r8qPxf5Qh7Dn41/PjH3M=)
                          2: oInHIR6wy6D9k84xaziVOM4aywA.crl (hash: tCjArwJjfLerk3R9S1cBSDrQzaZpEQqn/zxSYWXgh8A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:4c:53:d4:6a:e8:eb:ca:42:9e:ea:08:d9:de:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
        Validity
            Not Before: May 18 01:00:53 2024 GMT
            Not After : May 19 01:00:53 2024 GMT
        Subject: CN=402374a1ed5e86e4c59307f545d059a70f1d214e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:1a:ed:8b:6f:24:1b:f6:eb:5b:4c:bd:b2:
                    f3:3c:19:f8:c4:ce:71:64:e5:5c:62:cb:03:bb:07:
                    08:4c:1d:2b:6f:a4:16:c1:ef:b6:49:1c:7e:03:66:
                    91:bf:63:3d:3a:3d:51:9f:d3:16:2f:50:75:75:29:
                    a2:25:2a:86:42:ae:68:01:c5:e9:df:be:4a:19:e0:
                    dc:bc:a2:88:75:c0:bd:42:f2:08:aa:9c:3c:4e:32:
                    4c:7c:ac:6f:c6:95:b8:89:73:53:74:7a:7e:64:0c:
                    16:87:0a:13:9c:21:ba:ef:1d:63:25:bf:16:47:64:
                    a5:6e:3a:0f:36:6e:c5:2e:14:c8:7e:64:59:89:cf:
                    4e:ac:78:e6:cf:0d:ef:ea:4e:d0:c9:ba:a4:a5:d2:
                    76:bb:b4:01:f2:20:ac:43:59:26:11:eb:89:b7:80:
                    4d:20:25:fb:0e:36:cb:2e:de:0c:a7:72:4c:c1:ec:
                    ae:24:55:95:30:a2:cc:17:6d:2a:97:94:a4:6f:0a:
                    09:35:77:58:bb:1b:e6:23:54:e3:40:ef:a3:19:49:
                    22:9f:0b:e5:71:d5:d8:ef:7c:b9:68:b8:14:a6:5f:
                    38:41:31:92:2a:a5:68:18:9e:63:bc:2c:a8:20:19:
                    05:79:e9:5b:a6:47:f4:72:d6:4a:bf:4f:d0:f3:9c:
                    8e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:23:74:A1:ED:5E:86:E4:C5:93:07:F5:45:D0:59:A7:0F:1D:21:4E
            X509v3 Authority Key Identifier:
                keyid:A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:76:d8:46:c5:11:01:e6:94:5f:4a:7d:bb:e4:d3:d5:11:f8:
         8f:e2:9f:13:9c:0d:41:5e:d0:ac:01:0c:ce:12:74:e1:ba:8a:
         f5:80:fe:3d:af:1a:84:aa:19:20:fa:66:29:35:1d:22:48:69:
         4c:5b:a1:1a:74:eb:fd:bb:ad:50:66:0d:2a:85:8e:fd:7e:5b:
         19:95:9e:29:1d:83:4b:7f:7c:ec:1a:0a:cf:43:ca:2e:34:96:
         51:3b:e5:f9:4c:13:39:13:49:54:64:d4:a0:6a:c4:8a:0b:96:
         a0:1a:69:5a:58:57:ce:ca:4c:04:34:c9:dd:f1:8c:13:86:9d:
         45:c8:41:55:a7:f7:9b:c9:36:e3:1a:ab:29:ec:33:cd:70:d6:
         46:82:03:59:85:b3:ba:0e:93:aa:5d:81:c3:62:bd:9c:51:8e:
         23:b2:72:82:29:c0:78:9e:51:7b:83:64:16:51:c4:ad:5b:66:
         dd:d5:d5:9a:6f:eb:10:fd:05:cc:c9:c7:17:1b:26:ca:7f:ff:
         2b:32:f1:9d:29:c9:69:10:d2:09:85:e0:c2:8c:e3:40:ed:fd:
         60:2a:e4:1f:1b:1a:25:d7:db:9a:d4:94:16:0a:50:b9:e4:8c:
         55:9c:cd:0d:21:a5:2f:90:34:d0:ac:32:a9:02:78:57:8f:9f:
         0e:05:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:52:01 2024 by rpki-client on console-fra.rpki-client.org