Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
File:                     m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json)
Hash identifier:          pzu6vXeyiX8NuYnYs1KaQCix0XydgZpFeMafEiUURrY=
Subject key identifier:   CF:DB:F6:7B:6F:7F:3A:A2:65:8C:6A:EF:B1:F7:2D:97:79:96:1C:47
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Certificate issuer:       /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial:       018F87B6C23AEF5E5B09D1D12F7D770156DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
Manifest number:          04D8
Signing time:             Fri 17 May 2024 18:00:52 +0000
Manifest this update:     Fri 17 May 2024 18:00:52 +0000
Manifest next update:     Sat 18 May 2024 18:00:52 +0000
Files and hashes:         1: Nu_Jcb81Y6M4mcfLhD-8oBKIqsw.roa (hash: 12vWhQIrcWiEFTyNTZ+vZ7OR5a8WcB0u64ZNCPfG5qw=)
                          2: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: MQ9DDp8HCn/jlyRHHdcn1pOWpxoxNrnXDzHgp6nWTbo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c2:3a:ef:5e:5b:09:d1:d1:2f:7d:77:01:56:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
        Validity
            Not Before: May 17 18:00:52 2024 GMT
            Not After : May 18 18:00:52 2024 GMT
        Subject: CN=cfdbf67b6f7f3aa2658c6aefb1f72d9779961c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:61:81:c4:88:83:cb:24:d0:8b:46:4f:46:
                    e7:99:aa:26:0b:37:0a:7e:f5:a2:52:54:12:3c:86:
                    e4:fa:2a:eb:47:a9:05:a6:3f:ee:d4:81:c1:b9:ae:
                    46:05:ce:3e:0c:e8:bb:f7:d1:0f:3f:b1:b7:a6:98:
                    63:d0:4c:9f:18:36:1e:dd:f5:1c:76:8d:5e:58:be:
                    95:93:60:46:8f:6b:2c:4f:55:70:27:8b:66:6e:13:
                    44:db:60:a4:e1:53:58:ad:e6:ed:6e:d6:db:3f:f1:
                    ad:1e:f5:55:c8:2b:94:c2:94:ea:17:8d:28:c9:35:
                    67:f6:d6:f2:14:af:dc:59:79:63:d0:f2:70:03:4d:
                    13:96:b7:97:37:38:77:94:06:8a:e8:bd:28:91:20:
                    25:1e:27:2e:23:83:fd:82:61:7d:02:19:36:ce:c2:
                    e1:e8:fa:38:7b:3e:1f:4a:2e:2a:24:b6:35:17:1f:
                    8c:a6:27:7d:a4:bf:5e:56:f4:d3:af:05:0a:2e:9a:
                    89:ae:e7:a3:86:6f:f5:e6:eb:0e:8d:63:94:d8:0d:
                    6f:38:13:23:71:15:5f:e2:a3:d2:59:0a:a5:aa:49:
                    46:34:29:9a:b7:c7:41:78:71:51:45:d5:fa:86:25:
                    12:3b:90:9b:25:a7:62:74:3d:a9:7f:f9:9e:e8:92:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DB:F6:7B:6F:7F:3A:A2:65:8C:6A:EF:B1:F7:2D:97:79:96:1C:47
            X509v3 Authority Key Identifier:
                keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:8b:d2:fb:81:9c:65:1e:f5:d9:da:21:46:78:fd:9a:01:ae:
         09:75:4a:2d:c8:dd:0a:8d:19:3b:97:90:28:06:28:28:78:79:
         a6:6e:fc:c5:45:b5:38:6a:8d:5c:53:21:24:4c:de:2a:c3:32:
         ed:98:8e:02:3c:68:09:d9:5d:62:f7:b6:6d:c5:d6:25:80:b7:
         61:b5:b6:9f:28:4b:f3:cc:04:34:ea:b1:1a:6f:22:4c:75:6f:
         27:d1:81:ca:f8:fd:32:4d:9f:82:eb:82:08:7e:b7:b6:e0:63:
         e5:54:ca:7a:9a:38:78:f6:ca:8d:fb:d5:f7:a5:dc:da:98:0f:
         49:0e:bb:f3:46:ae:54:42:bf:23:60:f4:c8:d2:fd:2b:16:e6:
         be:d3:fd:ef:b6:98:d5:a2:19:f5:e3:72:a0:ee:d0:1a:e5:9d:
         a9:ff:40:68:c9:6f:21:80:d2:19:16:9f:73:51:99:3b:ed:00:
         bc:a1:f6:06:f8:32:bd:ad:4c:d4:bc:66:e7:ad:01:c4:d3:79:
         bf:82:a1:28:bd:b4:97:83:1a:2b:80:b6:31:75:87:c9:df:4b:
         ce:3f:2e:ce:aa:80:57:6a:22:79:d8:63:b1:20:b3:0b:59:70:
         96:62:32:00:09:d9:1c:10:6b:78:85:8f:89:cc:99:fe:e1:6e:
         ac:00:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:59 2024 by rpki-client on console-fra.rpki-client.org