Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File:                     rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier:          VEndNtRMvXa1egHPx99TLpUEadDzRnWYsk6/iIlKdYU=
Subject key identifier:   06:07:AB:B4:78:09:BE:0D:20:45:A7:85:98:4D:77:09:7B:DB:C3:32
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer:       /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial:       018F87B66525A631B93DC88B70B35E85A9E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number:          0794
Signing time:             Fri 17 May 2024 18:00:28 +0000
Manifest this update:     Fri 17 May 2024 18:00:28 +0000
Manifest next update:     Sat 18 May 2024 18:00:28 +0000
Files and hashes:         1: f_TXT3tCShUGGepzIdu1bfhIi9Y.roa (hash: ZGhJgkN7yZmdLm68RSIC7Ltljic/mujR+BEQTmHqgbA=)
                          2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: CtZX4wcQP33NiKG4AhsaA1GJqNijAB0XQlfLbF8uKbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:65:25:a6:31:b9:3d:c8:8b:70:b3:5e:85:a9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
        Validity
            Not Before: May 17 18:00:28 2024 GMT
            Not After : May 18 18:00:28 2024 GMT
        Subject: CN=0607abb47809be0d2045a785984d77097bdbc332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:fc:74:ba:fa:f1:0a:04:80:2b:cd:f3:ab:
                    77:d9:eb:c7:b3:5a:e0:b0:14:44:a0:17:1e:31:b3:
                    f7:cb:bd:f6:58:fc:2a:6f:06:db:fa:f1:ad:9c:79:
                    9d:bc:66:ee:49:83:72:e8:16:ff:85:5f:e1:8d:76:
                    82:0c:ae:72:52:c7:da:2c:5d:2d:69:9a:9b:69:ac:
                    13:95:9b:09:a2:27:3c:3b:23:4c:cb:55:10:a4:12:
                    d1:dd:82:65:d1:b3:c3:c4:48:f1:7d:b7:ad:06:a5:
                    9b:cc:09:9d:5d:0f:9c:50:c1:ef:eb:cd:61:cc:41:
                    fa:00:7c:8e:95:7b:67:12:77:ad:12:a0:62:15:0b:
                    f0:e3:51:00:69:cc:80:39:c1:18:a1:af:ca:3d:e4:
                    89:c3:93:d3:50:c0:00:c4:48:44:67:89:ab:d3:7f:
                    a6:dd:e8:7e:b9:7d:0f:c2:77:43:fa:2a:ea:99:fc:
                    e3:b5:00:da:aa:60:7a:77:bf:44:9c:de:7b:ad:61:
                    4d:74:36:16:13:ed:68:d1:97:f4:c1:05:e9:8b:92:
                    be:8b:2e:14:23:db:a6:e1:1c:3b:c7:66:e1:8b:bf:
                    02:54:cf:a9:83:ca:f9:fe:c5:58:30:85:0b:c0:bd:
                    ed:1a:c9:40:57:0b:c9:36:a2:dc:e9:e8:69:4e:ad:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:07:AB:B4:78:09:BE:0D:20:45:A7:85:98:4D:77:09:7B:DB:C3:32
            X509v3 Authority Key Identifier:
                keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4d:c8:3a:e5:e6:19:4b:3a:50:da:4f:78:d4:b3:53:b8:df:
         fb:9e:8e:7b:c0:b4:3b:e4:8a:6c:47:f1:d8:23:27:79:bc:3e:
         93:26:d5:e0:8a:4d:02:1b:92:f9:ae:ea:d7:b8:3c:42:99:9d:
         b2:9a:7d:2a:ae:ae:71:5f:3c:29:9b:76:da:af:9d:94:b6:ed:
         4c:55:e7:0d:b0:42:d1:a7:5e:6a:ba:35:be:b6:3d:b8:00:38:
         9b:8a:02:7f:44:e9:d9:25:75:ff:29:ec:ec:0f:c4:4a:62:66:
         99:e0:5e:6e:e5:a3:13:ba:56:8c:99:67:f6:f6:00:b9:77:0c:
         e7:75:3d:bf:f3:fe:7c:a7:61:2e:85:63:f5:9a:e2:a5:4e:82:
         f6:01:67:e0:ce:7e:15:46:23:fd:5b:04:98:99:3f:e9:2a:26:
         3d:a3:37:20:6d:ee:13:3e:f5:00:61:eb:48:f1:8a:30:fd:27:
         e5:2a:d7:61:8c:1d:ee:10:fe:9c:f2:8b:e1:c2:dc:23:44:73:
         93:2f:9b:ca:85:1a:4e:6d:60:63:47:b6:34:19:f5:19:86:13:
         ea:8b:c0:dd:2d:c6:56:9a:ec:4a:9e:23:f6:10:94:d2:90:09:
         97:04:6f:e4:6b:d7:b2:42:0f:14:56:d0:5e:9a:38:2b:e3:53:
         99:54:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:09:21 2024 by rpki-client on console-ams.rpki-client.org