Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File:                     _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier:          TY10mSKCd9w4Cz2viesEQHBMmuYPOG+MYZRsLgo0f8o=
Subject key identifier:   EA:23:09:8C:45:1C:8A:AD:8B:84:34:A6:F3:98:18:08:53:C4:56:F1
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer:       /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial:       018F8C01313CBA177E6F4C96FCEAFE7FF958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number:          0F1F
Signing time:             Sat 18 May 2024 14:00:39 +0000
Manifest this update:     Sat 18 May 2024 14:00:39 +0000
Manifest next update:     Sun 19 May 2024 14:00:39 +0000
Files and hashes:         1: Qo4XMJGymnYnxjJ_nPoBqA6kqaA.roa (hash: yqqTRUlVVhG+MMjWlcrbVnEwvBm34b51ba4xUrDQ4Vg=)
                          2: S8hTDaLNJfFKV_Q5kH4xG0zYGIQ.roa (hash: ng644q+iQ9iIjEgaMsCa3UlSI9OUSgDNntgRdP9zLzU=)
                          3: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: GqvarPiILuaYGhn7j/RC+SxLqQohPoN3/u2o5e71nHk=)
                          4: _uMgQ8D5hzUqKCzpBjTthAPxmJw.roa (hash: KEVInvt5VOxwAwL3B+FJduefk4DUdKT+8oQRIy/rVGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:01:31:3c:ba:17:7e:6f:4c:96:fc:ea:fe:7f:f9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
        Validity
            Not Before: May 18 14:00:39 2024 GMT
            Not After : May 19 14:00:39 2024 GMT
        Subject: CN=ea23098c451c8aad8b8434a6f398180853c456f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:2c:70:5d:ca:63:73:c8:75:c8:50:f8:ae:
                    93:af:a0:1d:20:73:24:bd:e9:32:f2:bf:b1:42:39:
                    10:7b:2f:ee:84:47:15:8b:31:1d:6e:2c:41:cd:e9:
                    35:bf:f9:79:ca:b7:fa:0e:6b:b8:ba:ea:f8:db:e4:
                    f9:43:9e:2f:c7:bd:d4:27:4e:78:44:c3:e8:6d:3d:
                    bb:57:d5:53:90:56:2b:c1:85:d3:3a:41:fd:94:0d:
                    bc:c7:1a:6b:e7:87:6a:9a:5a:9c:bd:16:35:c6:24:
                    cb:ca:21:9f:8c:36:f8:49:b0:ae:ba:ba:97:f5:79:
                    e0:dc:96:02:2e:dd:6d:6a:f5:73:db:72:95:a9:fb:
                    e6:68:74:d6:ff:d8:fe:1f:99:78:e0:89:bf:09:5f:
                    d6:bc:d3:2b:7f:1c:3c:10:f1:38:4b:de:c7:57:9a:
                    e7:86:18:49:f5:b1:13:87:c0:fa:06:9e:ca:e4:f3:
                    03:85:76:af:9a:17:99:8b:d3:29:36:3b:82:13:87:
                    a9:04:87:9a:04:23:a4:40:6c:65:36:e7:de:31:c3:
                    92:82:ff:f1:46:7f:fe:43:17:35:f7:2d:49:68:9c:
                    93:bd:c9:cc:ee:de:d5:cb:68:5f:1e:d4:69:1f:d9:
                    f9:1e:90:f3:ee:c5:15:9b:5a:d8:8d:de:48:46:b2:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:09:8C:45:1C:8A:AD:8B:84:34:A6:F3:98:18:08:53:C4:56:F1
            X509v3 Authority Key Identifier:
                keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5e:69:8e:14:c6:71:13:b9:84:a2:68:0d:2e:1a:6f:13:4a:
         02:f4:f1:14:8b:fe:cc:46:f6:78:74:5c:b4:85:9a:99:48:d1:
         9f:82:bb:94:ee:c5:b1:45:61:28:76:6e:c7:75:1b:8a:b5:a1:
         2e:19:59:26:f0:f9:49:fa:08:1c:b2:5b:f2:21:e7:2f:dd:35:
         8f:b9:39:85:a3:aa:52:a2:23:b3:33:47:88:a2:dc:41:3b:ec:
         47:b2:51:b2:19:f7:e3:c2:3a:9b:e2:f6:90:ca:45:e2:ef:d0:
         bd:62:a5:22:01:4f:d1:ed:88:24:f8:f8:ee:60:53:0e:ec:2a:
         8e:71:9c:8c:94:72:e4:1e:5c:bb:f8:1f:9d:ef:05:7c:4a:88:
         b0:cf:4f:96:13:fc:c5:72:70:1b:bc:0c:a4:42:cf:e7:cb:00:
         d0:c4:35:91:6f:b6:03:1d:e6:71:8d:79:6c:03:20:b4:92:04:
         37:68:f3:e8:46:40:bd:7a:1c:3e:c3:fb:bd:c1:59:24:47:30:
         e1:09:d2:27:38:4e:c3:eb:ad:85:75:f5:dc:ef:cc:e5:4d:c2:
         8c:22:5b:1a:e8:fd:7f:60:50:4b:24:c5:56:0d:c7:81:6c:6d:
         79:9f:10:e4:12:1a:2b:31:cc:2e:8f:25:56:36:03:0c:89:c7:
         0c:da:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:18:45 2024 by rpki-client on console-ams.rpki-client.org