Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File:                     8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier:          isO0UgIoxdK5GEitC2WMKrdXFp1kNot0aJq8O7hICgs=
Subject key identifier:   59:01:1F:DA:D2:DA:41:8D:B6:19:28:69:4F:71:4A:31:09:65:EC:52
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer:       /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial:       018F4D59EFE25B5CC234A41C022183FA020B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number:          1159
Signing time:             Mon 06 May 2024 10:01:30 +0000
Manifest this update:     Mon 06 May 2024 10:01:30 +0000
Manifest next update:     Tue 07 May 2024 10:01:30 +0000
Files and hashes:         1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: 2YV5RM6IeSRlxAUb+rh16XXJtmUXVZ2PupX3YPImj8I=)
                          2: qIhc-z6vNQtyezIgFZyhwW-4NU8.roa (hash: Y0tGondhu4kaWV+JG7KoJAUPnfaJ7iBlkVKshOR+934=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:59:ef:e2:5b:5c:c2:34:a4:1c:02:21:83:fa:02:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
        Validity
            Not Before: May  6 10:01:30 2024 GMT
            Not After : May  7 10:01:30 2024 GMT
        Subject: CN=59011fdad2da418db61928694f714a310965ec52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:5c:7e:bf:27:49:cb:48:d4:d3:c5:5a:6f:
                    d9:ef:e1:22:1b:ec:7f:1a:c2:63:90:c6:f7:63:bc:
                    1a:13:fe:4e:92:df:35:8a:58:51:a5:90:13:74:66:
                    7c:9a:dc:15:fc:84:de:c3:95:f7:98:2a:e6:04:ca:
                    13:be:1c:b0:52:38:95:b9:f7:19:19:3b:b1:a4:65:
                    5a:de:90:ce:1e:13:1a:41:d3:d7:97:44:4a:26:5d:
                    5e:e2:68:53:fa:98:31:98:37:7a:a0:83:87:7f:8d:
                    33:e8:c5:d0:0b:5e:fc:9c:8d:7f:c2:27:c9:7e:0c:
                    0d:69:2d:2d:23:89:8a:22:2b:10:d5:b3:db:af:94:
                    e1:42:f1:0a:86:6c:39:d6:48:58:71:67:f1:f2:9a:
                    7a:09:32:10:28:bf:2e:95:f6:05:68:32:01:ef:60:
                    f6:46:26:7e:08:fb:7c:ed:59:bb:03:81:01:c6:08:
                    76:b1:ae:14:51:68:64:bd:ac:c3:1d:85:c7:14:f7:
                    a5:aa:b4:e2:fb:73:be:d5:37:79:a1:71:50:9b:e2:
                    e4:86:30:f4:09:ae:f4:63:57:d3:ac:d1:de:d1:97:
                    89:60:7e:5d:06:4c:90:94:cd:4f:c3:bf:0b:7b:8e:
                    fe:ed:6a:f8:32:93:78:6a:a7:d5:00:9b:16:77:94:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:01:1F:DA:D2:DA:41:8D:B6:19:28:69:4F:71:4A:31:09:65:EC:52
            X509v3 Authority Key Identifier:
                keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2d:e4:f7:47:28:49:04:9e:dc:1a:94:6f:14:ef:08:c0:8e:
         e0:1b:3f:27:6d:71:21:9a:89:45:bf:db:42:6f:98:e3:cb:f3:
         ec:90:88:bd:42:a5:95:c2:41:f6:cb:f2:1f:23:d3:7b:65:ac:
         00:80:14:14:08:9e:44:6d:1c:6c:06:fe:02:7a:d6:39:73:31:
         d7:06:15:2d:29:08:d1:a8:1e:d0:58:e4:71:56:0e:eb:ea:b9:
         74:e0:c9:9c:e7:f0:f0:54:68:12:56:bf:fc:b0:7b:49:cb:28:
         f6:41:27:ab:0f:d5:77:52:62:e5:49:de:bb:63:af:97:12:aa:
         00:20:b3:84:aa:61:03:5d:98:3a:89:8e:79:57:90:19:02:a9:
         7c:00:66:3e:19:06:12:7e:59:71:af:10:c4:68:a7:0f:4f:67:
         56:26:bf:19:05:fe:44:ca:ed:5e:a2:c1:57:5f:41:ee:8f:6a:
         dd:0e:2e:5d:b6:bd:fe:82:f2:c4:e5:1a:82:46:4e:78:2d:d1:
         db:ba:07:da:ee:3b:e0:ec:ed:e1:fa:89:e9:fa:f0:f3:57:b0:
         55:01:c3:b2:2f:f1:90:dd:21:9a:55:77:9a:94:c4:28:c0:6c:
         d0:88:6d:01:5c:02:1f:17:6a:72:bc:84:28:13:f2:12:32:e9:
         98:1d:e3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:27:38 2024 by rpki-client on console-fra.rpki-client.org