Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File:                     hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier:          b4AWe5r3EZSCInmDr3covMAPGWMISfvaqTIFPscdhIU=
Subject key identifier:   0B:4B:1D:BD:D2:6E:98:8C:2E:74:A6:2E:65:45:CD:F6:E6:65:00:3B
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer:       /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial:       018F8749A9FCD68F2CFA8F9A4B1E9B9819AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number:          0220
Signing time:             Fri 17 May 2024 16:01:42 +0000
Manifest this update:     Fri 17 May 2024 16:01:42 +0000
Manifest next update:     Sat 18 May 2024 16:01:42 +0000
Files and hashes:         1: 7IRBLSfQw70E4LzZcjXY-D8C8fA.roa (hash: 79Al4HItKjf6ExxdXz6inRflLr9e/PUFqqQFaJ8eNK8=)
                          2: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: Sa17u/Ioqrk48ioGl0QVDdgtVe5yRkgRU2W6TBm6R1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a9:fc:d6:8f:2c:fa:8f:9a:4b:1e:9b:98:19:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
        Validity
            Not Before: May 17 16:01:42 2024 GMT
            Not After : May 18 16:01:42 2024 GMT
        Subject: CN=0b4b1dbdd26e988c2e74a62e6545cdf6e665003b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:7a:31:84:c4:1f:92:1e:f3:27:2b:f6:f9:
                    3a:b1:6c:fd:26:8c:d1:aa:ad:f9:98:eb:c4:52:74:
                    52:c6:d3:22:0e:74:55:0b:7a:62:1b:f5:fd:67:a9:
                    82:8a:01:79:b1:5e:17:63:cc:92:1d:15:5a:c7:1f:
                    59:8d:06:b8:13:46:82:e8:14:82:1a:39:e7:58:5f:
                    7d:18:41:9e:25:53:71:3c:9f:9d:b8:3d:8c:6d:4a:
                    de:6d:d2:05:4b:e4:e7:1b:80:a8:30:2f:bc:3f:ab:
                    9a:83:d4:ef:a1:b7:bd:fe:98:66:ae:f2:83:46:09:
                    a9:42:6b:b6:af:9b:34:fc:b9:58:34:57:72:5a:d7:
                    ba:60:bf:16:c7:d7:c2:44:41:01:7c:97:66:a8:44:
                    12:68:4b:ba:a1:eb:ee:b1:9f:34:68:a1:55:a3:32:
                    48:a4:c7:5a:00:4d:ce:95:c7:58:1c:20:5d:f4:8d:
                    1f:0c:8b:1c:94:48:1e:25:00:74:af:5c:f0:dc:9e:
                    f6:c2:4a:11:be:81:b7:31:aa:88:81:74:25:79:7a:
                    2c:3c:2c:c3:e3:d3:32:a2:70:a2:d9:4d:9e:7b:3a:
                    05:18:00:c3:aa:0e:92:c5:c4:9c:cc:1b:42:48:87:
                    2e:f7:ab:48:f9:df:88:28:73:d2:a3:c3:0f:7b:6a:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:1D:BD:D2:6E:98:8C:2E:74:A6:2E:65:45:CD:F6:E6:65:00:3B
            X509v3 Authority Key Identifier:
                keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ef:c2:29:07:50:ad:7f:26:2b:ac:0b:22:1e:a9:1b:ee:73:
         d9:b0:a4:fe:57:3b:84:82:27:92:49:17:8b:ba:89:bf:a1:74:
         41:de:62:c3:0f:30:04:91:a1:ae:91:14:cc:97:42:6e:46:9d:
         60:d8:28:f1:fa:4e:41:db:d9:87:67:3e:28:4d:3e:aa:1d:6b:
         d0:06:2b:28:4f:ac:f7:2d:ab:e3:07:e6:33:9c:06:19:69:86:
         83:9f:df:86:82:8d:f1:97:58:da:41:5d:e9:c6:5d:04:5a:69:
         0f:52:7c:e6:27:ce:fb:64:95:11:6d:c8:ec:b4:ff:ea:0a:8a:
         e8:23:71:55:4e:6c:28:bd:0d:43:6b:45:ce:f9:39:f2:91:92:
         dc:1e:02:2a:b5:14:b7:21:ef:9c:f6:32:1b:55:0d:b6:6f:f1:
         8c:3e:72:ad:ff:88:a7:dc:ab:59:02:7d:df:78:14:67:53:44:
         52:01:72:ed:3c:53:b9:10:7a:7b:bc:97:5a:c8:08:07:04:56:
         1f:99:a4:da:ef:c8:bf:76:d5:42:6e:11:4a:51:e7:1d:08:9f:
         46:d7:83:4f:6b:bd:25:fe:b7:e4:46:e3:87:f5:7d:e3:81:c9:
         1b:b1:84:25:75:90:80:bb:a1:2e:bc:fa:31:82:17:03:6d:95:
         5d:7b:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:00 2024 by rpki-client on console-ams.rpki-client.org