Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File:                     cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier:          liJ4ourtI984ghDhRFF5o6Mo90T131T/sO4Q+1/xe7Y=
Subject key identifier:   BF:C5:AD:16:32:03:0C:F8:B9:2B:EE:6C:BC:CC:D3:10:E2:0C:C8:9A
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer:       /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial:       018F5ADEA526AEE4CE6E6ECE3EAFB9BE756F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number:          07C8
Signing time:             Thu 09 May 2024 01:01:31 +0000
Manifest this update:     Thu 09 May 2024 01:01:31 +0000
Manifest next update:     Fri 10 May 2024 01:01:31 +0000
Files and hashes:         1: EtuZOX-EpkLHjoPI-3SmDcCaLK0.roa (hash: jtTBzPpf0TRfM+aOhbbEhr901qlkUqDW3jXxC6FpJL4=)
                          2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: LquxKQwt94feK+DhIyAr+bmj+bNodn08Pb/iBbZw4Tg=)
                          3: drU5iAMUiEAlM9itISvWQzBvn8g.roa (hash: dhw56t3cAYbxwkuenzDS0Vv77jwgiIn38zdok8w2le4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 01:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:de:a5:26:ae:e4:ce:6e:6e:ce:3e:af:b9:be:75:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
        Validity
            Not Before: May  9 01:01:31 2024 GMT
            Not After : May 10 01:01:31 2024 GMT
        Subject: CN=bfc5ad1632030cf8b92bee6cbcccd310e20cc89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:bb:ef:5a:e2:c5:18:45:31:65:b5:73:e6:
                    69:ab:c7:36:79:f7:5b:9e:a0:d1:3a:16:73:19:45:
                    d3:34:39:44:6c:09:40:23:1f:de:63:1b:75:50:75:
                    0b:25:bc:4e:e3:33:be:55:20:52:08:2b:ef:7c:d2:
                    23:7f:c9:6b:4a:34:61:bc:b8:3f:db:1b:fd:38:47:
                    fa:6a:ea:b9:16:30:5c:9c:6f:d4:96:58:1e:b6:42:
                    4f:7c:40:10:b1:96:07:84:b5:e7:a3:3a:9f:19:1f:
                    da:22:b9:78:65:37:92:1e:93:cc:42:46:ee:0a:6c:
                    16:1a:f3:ec:f8:88:c1:ad:b0:6d:d4:96:16:10:84:
                    90:58:30:5f:d5:3c:03:09:88:c6:89:2d:b1:5e:8b:
                    54:1a:cd:a6:5c:2a:da:6d:e7:68:cd:27:c6:9f:91:
                    41:8c:50:07:67:db:de:8a:73:69:0d:23:9f:ac:9c:
                    ac:cd:41:f4:30:f2:82:80:4c:28:86:32:92:0a:f9:
                    a8:bf:00:70:b8:5f:14:44:82:35:a4:04:15:a5:3c:
                    e3:11:bd:65:e5:2c:6d:ab:e5:55:73:b8:4a:0c:6d:
                    c7:e5:63:2e:4c:40:48:7e:68:42:75:65:2b:33:72:
                    89:8d:d7:82:65:45:7c:42:e8:52:f3:a8:04:b5:f9:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:AD:16:32:03:0C:F8:B9:2B:EE:6C:BC:CC:D3:10:E2:0C:C8:9A
            X509v3 Authority Key Identifier:
                keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b2:a5:6e:fb:18:89:43:a9:49:e3:d0:75:5f:97:d5:d3:f5:
         bd:08:89:ea:43:fd:0b:b8:f4:c7:17:ab:55:a4:ad:35:a0:b9:
         78:f4:c6:50:29:3e:2a:ca:58:46:aa:cf:8b:c5:f1:c1:5e:2b:
         c0:11:9d:b3:d5:e8:d5:95:ea:9f:52:d0:ff:d6:51:3f:1f:35:
         cb:c4:a1:76:56:3d:12:96:75:56:36:53:eb:1d:67:25:33:0b:
         8e:98:1e:e7:9a:7f:eb:f3:fd:ee:d7:f2:0d:79:6d:8e:75:d6:
         79:1f:24:ad:bb:08:73:05:4a:75:49:e6:80:61:0b:ad:3e:46:
         0d:db:59:b8:7a:5b:30:82:74:ec:2c:45:42:e6:66:f2:88:a5:
         3f:f3:71:75:ff:14:19:e5:dc:f3:3d:5b:36:ad:ce:d7:10:25:
         57:8b:d5:58:15:f2:a7:52:b7:dc:27:cb:12:ae:d0:5a:31:e7:
         08:44:cf:a4:a5:94:de:f2:07:99:fe:92:89:9e:ce:46:14:3f:
         b3:a6:27:a4:0c:25:fb:62:e5:d2:03:01:92:d5:59:3f:3e:4b:
         89:d3:df:4e:26:a1:18:a1:d7:a2:cb:c6:74:ee:0c:b9:66:54:
         77:86:d7:42:14:31:92:c0:d7:10:5f:90:0d:29:71:c6:8c:5a:
         c5:5a:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:28:39 2024 by rpki-client on console-ams.rpki-client.org