Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File:                     89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier:          q/Wtp98/vsauBlHwbi6sLFaEwqVPqFl3Dt1uZHnM+R4=
Subject key identifier:   E0:D9:39:DD:3B:FC:35:71:44:90:8C:98:FF:0D:BA:44:B6:DE:F3:F1
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer:       /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial:       018F43B1F717666E58F3B385C84C930F5CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number:          06C1
Signing time:             Sat 04 May 2024 13:01:27 +0000
Manifest this update:     Sat 04 May 2024 13:01:27 +0000
Manifest next update:     Sun 05 May 2024 13:01:27 +0000
Files and hashes:         1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: zdQ//bNvi5fL/LXnc/3pEN84op1kIbs3hRwiKTH9MXY=)
                          2: CgXpJ3jzPCdeHoez0wbFMWohF0U.roa (hash: yKapqIKOCXo9TPMN+hsZsYMcdhNnI59VwS6e6xy111M=)
                          3: hWDuQEnGPTXjX7AnNjHujqGX7uE.roa (hash: isLAgVaRn0eW69FZ2pSXXKnX1975yZpzofaOqUddHc4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:b1:f7:17:66:6e:58:f3:b3:85:c8:4c:93:0f:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
        Validity
            Not Before: May  4 13:01:27 2024 GMT
            Not After : May  5 13:01:27 2024 GMT
        Subject: CN=e0d939dd3bfc357144908c98ff0dba44b6def3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1e:7e:e1:2d:2e:85:d6:40:3e:92:48:85:dd:
                    a3:4d:aa:d0:06:af:2c:14:6a:ad:e2:c8:0b:41:b8:
                    7c:2f:b1:8a:e1:af:f1:6f:e5:63:53:b0:43:1b:29:
                    29:41:a2:49:8c:66:77:71:56:07:73:bf:36:77:3c:
                    c3:2b:ba:32:c7:cd:29:65:b4:5e:91:e4:b6:32:06:
                    1f:ba:83:62:31:45:1a:7f:ea:48:3c:f5:a4:ce:44:
                    9a:fd:a3:23:da:07:99:95:71:53:ab:eb:f2:35:ba:
                    15:49:2d:99:ab:b9:58:28:1d:dd:3b:e6:ac:1a:f0:
                    e7:8f:1e:f4:ba:78:34:86:ce:a3:4e:d6:ef:ae:77:
                    63:5e:d0:38:8b:91:13:64:fe:a9:45:49:ef:99:f4:
                    79:32:3e:ad:23:83:50:81:40:96:30:35:3e:fc:bf:
                    54:58:e2:17:55:72:6e:0a:1e:c5:85:f7:51:23:93:
                    f6:3b:9d:91:ec:43:58:96:30:39:57:e7:07:41:a0:
                    1b:ef:c5:d2:aa:2b:3c:fc:4e:63:89:2e:24:64:fd:
                    c9:9c:ff:aa:ec:05:46:78:62:75:46:9f:31:af:8c:
                    95:c2:ee:d4:31:2c:88:67:d5:9f:21:98:10:4c:00:
                    84:c8:3e:2d:79:96:ab:0b:02:1b:f4:67:ef:c1:56:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D9:39:DD:3B:FC:35:71:44:90:8C:98:FF:0D:BA:44:B6:DE:F3:F1
            X509v3 Authority Key Identifier:
                keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:98:39:a9:b8:38:9b:5e:a6:e9:df:e3:ac:4a:b2:25:6c:bb:
         22:23:0e:07:7e:23:a7:89:28:ad:9a:ed:da:88:9a:81:46:ee:
         df:3b:ec:f3:4e:de:6d:ee:4c:05:7e:79:68:c4:5c:7c:97:d3:
         4f:8e:3a:e5:5a:3c:85:b5:97:af:f8:8b:54:da:eb:53:d3:02:
         44:60:66:09:35:78:3c:53:50:c4:77:98:f9:80:18:cb:5f:d8:
         14:a1:49:64:1c:5a:be:85:89:b3:c2:5b:78:2c:eb:d8:29:22:
         23:94:af:83:b4:2f:64:c2:cb:15:5d:7a:58:12:31:1b:fb:81:
         7d:11:6c:28:2c:d5:8c:4d:73:ed:f5:ab:c4:e3:d3:ce:82:a0:
         81:5c:57:cf:ee:17:b2:00:1a:49:28:a0:42:86:1a:7a:13:cd:
         dc:ec:d9:e1:4f:3c:84:57:53:75:af:3d:18:02:a1:40:7f:95:
         da:94:08:68:e7:10:dd:67:d2:06:90:a2:a9:e3:37:79:cb:eb:
         53:1d:f1:53:51:3b:05:b2:c7:a1:7f:a8:af:3d:78:7a:75:01:
         2b:08:0b:53:e1:28:5c:15:24:30:7b:1f:23:ad:6f:2f:eb:c1:
         01:f7:13:e7:26:cc:b1:b7:38:55:a5:df:40:97:06:26:52:15:
         36:4c:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:03:13 2024 by rpki-client on console-ams.rpki-client.org