Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File:                     89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier:          puCxrZ/BeUT2CKAfivkCFVz0qq7p2iTndymLdUIMbks=
Subject key identifier:   D0:18:3F:1F:3C:9A:E6:BB:A6:05:74:5A:1B:9F:29:C5:56:5F:A7:07
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer:       /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial:       018F53C9D718F7BBF341870B489BED71D895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number:          1160
Signing time:             Tue 07 May 2024 16:01:27 +0000
Manifest this update:     Tue 07 May 2024 16:01:27 +0000
Manifest next update:     Wed 08 May 2024 16:01:27 +0000
Files and hashes:         1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: I3ykM9T93lpSa9fJb1/+QDgLdsZpfgRbRhcx9aPPftI=)
                          2: ER70bOsq28_IkLLwUAcVYXN-050.roa (hash: yjBrrt3OA0XReVFmCtvhCix2bkA6pyNnAsLyo/F8WIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:c9:d7:18:f7:bb:f3:41:87:0b:48:9b:ed:71:d8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
        Validity
            Not Before: May  7 16:01:27 2024 GMT
            Not After : May  8 16:01:27 2024 GMT
        Subject: CN=d0183f1f3c9ae6bba605745a1b9f29c5565fa707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:eb:bb:c6:0c:ca:21:a2:5f:a5:ea:88:bf:
                    c8:6f:3f:7e:b2:20:b2:08:a1:cd:e0:ba:b8:d4:92:
                    b7:c8:1e:26:7e:99:a5:b3:3b:94:b5:e7:0f:53:94:
                    5e:b1:02:76:71:45:3a:d0:14:b1:5b:90:bf:73:41:
                    c2:73:69:48:09:38:93:d1:c8:5f:70:c1:1c:95:22:
                    83:5b:5f:a2:b7:61:18:b4:5f:34:75:5e:a3:c9:77:
                    b9:1a:f6:8a:1b:71:02:b1:a3:cb:f3:c2:17:f8:dd:
                    95:6b:4d:68:fb:a5:85:50:ec:2f:18:88:f6:c3:b6:
                    5d:aa:64:26:4a:d7:c4:44:e7:dd:cb:2d:f5:96:fb:
                    17:a3:58:e7:c9:f7:7d:43:03:74:dd:f5:4f:5f:13:
                    32:2e:f0:76:49:bc:4b:92:08:06:d2:37:5b:57:67:
                    d7:3e:1e:fc:ef:63:c0:57:9f:21:d1:77:06:3d:4e:
                    f1:65:ed:fd:52:57:3e:4d:8f:05:6d:3a:e8:f7:eb:
                    33:1d:91:27:27:9e:7b:af:00:6b:bd:40:bd:67:80:
                    e0:45:fe:34:0f:11:a4:92:f7:8c:cd:b2:e8:38:a9:
                    b3:6e:f6:f0:d3:a6:aa:17:3d:25:d1:ce:56:2f:52:
                    86:6e:2d:69:cb:95:11:18:f8:3d:b6:b2:29:78:c5:
                    e5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:18:3F:1F:3C:9A:E6:BB:A6:05:74:5A:1B:9F:29:C5:56:5F:A7:07
            X509v3 Authority Key Identifier:
                keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e8:6b:e8:74:d3:80:75:a0:cb:fc:4a:16:06:b3:24:84:7e:
         65:5e:6f:4c:b6:2a:a0:44:70:5d:34:a4:2d:05:05:f6:df:6a:
         35:99:45:ae:f3:17:cc:ce:b5:fb:3a:cd:26:95:c3:a6:c4:c1:
         82:4d:67:c9:db:2c:55:35:1c:2f:00:bf:2b:d7:ea:17:f1:32:
         54:27:fd:5e:70:c1:37:92:36:cd:86:53:5c:f8:ad:fc:ec:91:
         07:a5:99:32:50:90:0c:0b:51:ac:ca:f0:0b:36:d4:1b:38:89:
         86:3b:98:fe:91:68:ca:47:03:d1:87:cd:ea:6f:1d:77:7f:4c:
         ce:84:c4:e9:ba:ca:db:6d:20:02:da:74:40:8f:2b:63:c3:ca:
         12:c2:2f:b9:d4:c2:c4:41:df:1f:16:01:a0:df:7a:bd:3b:9f:
         87:c1:86:26:06:d8:b2:63:da:2c:bd:1c:b9:65:0c:d8:7b:ab:
         61:46:c4:27:e0:7b:19:4f:08:39:36:f5:25:c9:ac:90:b0:1f:
         c3:4f:5a:d3:78:3d:47:df:b4:6b:5d:d2:62:55:77:81:e7:bb:
         be:c0:10:b6:2e:26:05:03:ae:bb:69:a5:81:d6:90:1d:fb:fb:
         c8:f0:1f:37:2b:d5:bc:c3:b3:b8:05:84:d3:a6:f5:2f:0d:b7:
         80:ab:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:37:37 2024 by rpki-client on console-fra.rpki-client.org