Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File:                     x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier:          l2g3+Rz5ClR8ypnLXMvS+4tlr1uo6wRRvqtIUuFJI0M=
Subject key identifier:   B0:9B:D7:0D:16:D5:14:37:10:92:47:28:36:99:13:86:7E:27:EE:D8
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer:       /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial:       018F874AFA96DC5697253B1037927EE86CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number:          1141
Signing time:             Fri 17 May 2024 16:03:09 +0000
Manifest this update:     Fri 17 May 2024 16:03:09 +0000
Manifest next update:     Sat 18 May 2024 16:03:09 +0000
Files and hashes:         1: 7RAczYHE_8x5Ta5_X3F43CPBAyk.roa (hash: HGCjkPuehfTv1FX0y0x1Y4EDiijD4RTP3U+UeNIU3D0=)
                          2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: gRfDNBdv0LRAw77Ku4WNo1wKpGLMCe+hPZSC2AMahwc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:fa:96:dc:56:97:25:3b:10:37:92:7e:e8:6c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
        Validity
            Not Before: May 17 16:03:09 2024 GMT
            Not After : May 18 16:03:09 2024 GMT
        Subject: CN=b09bd70d16d5143710924728369913867e27eed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:40:fa:c5:d0:bf:24:85:c2:eb:18:3f:06:
                    96:0c:1b:be:72:3a:07:e5:c1:2c:d6:76:10:b0:10:
                    34:9c:77:4f:94:a5:45:5d:40:df:21:ec:0a:db:ba:
                    12:b1:df:a0:95:67:a9:26:4f:b4:2b:2e:7d:5b:c4:
                    b5:ba:8c:6c:33:ad:d1:5b:57:29:51:b4:29:1d:c4:
                    40:be:39:07:5c:b1:cb:c3:2a:ee:7d:d3:6a:02:41:
                    36:1e:39:02:31:9e:f0:49:e7:a6:04:6d:63:d3:e8:
                    5d:5f:38:3c:cb:75:56:a1:0f:11:a0:e0:09:eb:f8:
                    a8:81:1d:4a:c5:d9:8e:59:2b:ab:ba:06:80:f5:c1:
                    9e:b0:7c:e2:a9:6a:98:b9:6a:25:86:82:bc:77:9f:
                    aa:f1:29:0c:5b:23:1e:f1:e9:35:3a:f7:5e:fd:b3:
                    49:d9:49:67:ed:61:19:ce:3a:a4:27:e7:66:2e:e8:
                    c8:9f:8d:84:26:72:51:c0:06:8c:bf:e7:75:8c:fd:
                    c4:21:c6:19:9a:07:09:35:6c:b9:19:3b:47:e0:23:
                    a7:b6:b2:48:36:f2:ef:92:4c:8f:6f:d1:fa:8d:07:
                    eb:62:d5:07:15:d0:d4:12:f3:67:d2:2e:89:7b:75:
                    f1:fe:03:24:6a:c3:c0:18:ec:bd:de:2e:c6:81:90:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9B:D7:0D:16:D5:14:37:10:92:47:28:36:99:13:86:7E:27:EE:D8
            X509v3 Authority Key Identifier:
                keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9a:ec:68:0c:22:6d:3c:a3:37:f3:82:04:cd:b6:ac:84:2e:
         ee:2d:75:58:26:dc:db:b9:da:ca:6c:14:95:5f:e8:dc:95:48:
         7b:31:42:38:d0:c8:a1:47:8e:e5:fa:18:71:4c:ee:07:c7:29:
         9a:ac:fd:d2:96:07:3e:46:a0:e8:c3:a1:82:b2:4b:74:dd:44:
         ed:0e:d6:1f:0f:1c:f2:01:7f:f5:7a:8e:b4:7e:33:0c:51:f9:
         9a:4f:21:57:12:76:76:9c:ce:e1:b0:d3:7b:ea:f4:76:94:71:
         86:1c:5c:e2:91:12:d4:85:1f:88:37:60:9a:6e:52:28:de:d1:
         0b:74:67:de:77:cc:a4:a3:4e:d0:6e:b3:68:3c:a6:aa:ba:9d:
         5b:9b:e1:3c:a3:8d:7e:af:c8:f3:fa:be:98:f9:aa:b8:df:92:
         4c:22:66:95:84:02:f3:fd:a8:7e:b0:8c:91:92:7e:91:f1:9d:
         11:19:d9:2a:7a:a4:c0:39:e2:fd:3d:6f:95:e1:dd:c8:28:71:
         eb:df:c7:ca:7c:2e:55:1a:ab:31:01:f8:9a:2c:1d:3d:95:a1:
         b3:e5:91:81:ff:71:92:be:5f:1a:99:26:95:86:e7:11:b9:e2:
         be:77:cd:58:99:5a:19:b3:8a:68:4a:1e:de:f7:a7:d7:77:53:
         38:39:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:42:00 2024 by rpki-client on console-fra.rpki-client.org