Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
File:                     MfimDHg4bJIR08qSHxQ30dHsHQw.mft (raw, json)
Hash identifier:          Xov4vv6x+Ehrq5uGU6NxD3Of6l2091aKyyDx5vdpDVU=
Subject key identifier:   0F:63:D7:5A:1C:1B:C0:F6:61:8B:35:E8:03:2A:E5:6D:7D:F9:4D:75
Authority key identifier: 31:F8:A6:0C:78:38:6C:92:11:D3:CA:92:1F:14:37:D1:D1:EC:1D:0C
Certificate issuer:       /CN=31f8a60c78386c9211d3ca921f1437d1d1ec1d0c
Certificate serial:       018F87ED94C50F75C4A497B6540F63E2D051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
Manifest number:          0246
Signing time:             Fri 17 May 2024 19:00:45 +0000
Manifest this update:     Fri 17 May 2024 19:00:45 +0000
Manifest next update:     Sat 18 May 2024 19:00:45 +0000
Files and hashes:         1: 6kYrYhsmqyi2Y4JwN1kKiGaJNnM.roa (hash: 46GeQ5l112efEHx9ACC5+ENh6u3+ctgdsNxS21arnT8=)
                          2: MfimDHg4bJIR08qSHxQ30dHsHQw.crl (hash: AssqqxrqgNR6doObF8r7BqRDgZ26v7r1p//oZ6ZIY4s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:94:c5:0f:75:c4:a4:97:b6:54:0f:63:e2:d0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f8a60c78386c9211d3ca921f1437d1d1ec1d0c
        Validity
            Not Before: May 17 19:00:45 2024 GMT
            Not After : May 18 19:00:45 2024 GMT
        Subject: CN=0f63d75a1c1bc0f6618b35e8032ae56d7df94d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:de:dd:8a:f6:56:e4:8a:77:95:26:ec:ec:
                    c5:24:77:e1:3d:f8:5a:52:b6:52:35:3e:00:09:21:
                    f7:a6:b5:57:a3:f7:1f:5c:d6:b7:13:35:db:91:f9:
                    37:06:f6:1d:e0:8b:93:11:47:54:01:01:4e:89:f7:
                    33:a3:ad:0a:90:73:07:0a:e9:54:ef:da:3b:9c:96:
                    9c:3f:cc:e8:7e:0d:93:b8:20:c2:d2:8e:71:21:0f:
                    85:9f:7c:48:0b:4b:69:ee:4d:5a:7b:b5:f1:2a:b6:
                    99:dc:d2:4f:da:77:3b:6c:e0:02:23:0d:89:ab:44:
                    5a:ce:55:ef:90:73:6b:72:51:fc:f5:fd:4a:77:98:
                    73:fd:70:dd:aa:f1:27:d2:18:22:56:34:d5:25:d7:
                    e2:80:e3:cc:11:17:8f:ff:c6:ff:9b:52:36:9d:37:
                    1c:8c:5a:45:3a:a1:ff:9b:5e:e5:47:2a:7a:c6:e0:
                    44:c6:ed:68:fe:70:f4:ef:48:e3:64:65:7c:ea:8d:
                    74:30:2a:08:bb:37:6b:9c:6a:50:ab:86:8a:78:bf:
                    55:2b:58:ec:cb:73:78:af:fc:9a:71:94:07:70:57:
                    63:b6:ec:21:3f:26:75:1e:d6:86:f7:a3:28:ea:6d:
                    f2:3c:10:72:e8:bb:30:3b:3b:11:34:78:d3:7b:16:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:63:D7:5A:1C:1B:C0:F6:61:8B:35:E8:03:2A:E5:6D:7D:F9:4D:75
            X509v3 Authority Key Identifier:
                keyid:31:F8:A6:0C:78:38:6C:92:11:D3:CA:92:1F:14:37:D1:D1:EC:1D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:27:fe:00:95:01:33:95:89:02:1a:26:1f:63:bb:9c:48:
         78:8b:50:00:ce:b7:5f:0d:a4:18:16:97:02:3f:cd:18:12:9d:
         df:af:ae:0d:09:05:e4:a2:77:7f:46:d2:5b:e3:d9:0c:82:85:
         0b:f5:0f:9a:e6:98:9d:f5:ad:29:64:e8:ba:ff:81:dc:0a:fd:
         0c:41:54:2b:5c:20:47:f2:b6:7d:c6:8a:9b:ba:41:e3:dd:e1:
         fa:84:46:03:54:d5:58:d0:28:8d:77:0b:de:b9:35:24:fd:8e:
         6b:ee:be:69:a7:83:d9:70:dc:e8:b8:91:89:ed:c1:eb:5d:8a:
         c4:70:ba:07:f3:45:00:ed:96:98:f8:1d:c5:86:8e:cc:a2:93:
         64:9d:f7:b9:7a:60:c0:62:2b:bf:df:01:63:15:b9:c7:36:4e:
         a3:b6:66:89:7a:01:48:3d:63:00:54:13:b2:a5:f5:ad:9d:f5:
         9e:b1:78:45:fc:20:e8:cc:da:3f:96:e3:bd:ab:cd:12:00:45:
         91:25:eb:4c:1a:21:c8:28:0f:6f:8e:ec:76:fa:a2:0e:99:ce:
         7f:49:f6:ca:8a:a2:0b:7c:00:cf:6c:8d:35:39:31:34:ce:3e:
         db:32:b2:e5:9d:02:dd:97:e3:eb:45:7d:15:1f:5c:3b:fb:47:
         04:77:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:56 2024 by rpki-client on console-ams.rpki-client.org