Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File:                     RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier:          OjSOk86q5CYVk6/EvnhZ8wz97SFJse3kABwxZ/7OpmQ=
Subject key identifier:   52:90:40:84:F4:58:89:A5:28:2A:8A:26:BF:FF:E8:46:53:B0:C0:8C
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer:       /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial:       018F88922D9D6AB41A7BE4968454BC7E3307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number:          0E87
Signing time:             Fri 17 May 2024 22:00:32 +0000
Manifest this update:     Fri 17 May 2024 22:00:32 +0000
Manifest next update:     Sat 18 May 2024 22:00:32 +0000
Files and hashes:         1: 56eaR_0rXdf4g32HIUg1gpDbVuw.roa (hash: 2+63CODMKPLpoZyqko23C230bV9xv787U3dtKx0QEvc=)
                          2: CmtM17aiKLdlqTgDS5td3FO2Zqw.roa (hash: kzjU5N0XazjMxOjzYN0RESS2BbhBgF34yXUAj9xkvd0=)
                          3: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: Ugz7fQbpTCpopweocLcjcoZYbDaFIjYo+6argClWcKY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:2d:9d:6a:b4:1a:7b:e4:96:84:54:bc:7e:33:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
        Validity
            Not Before: May 17 22:00:32 2024 GMT
            Not After : May 18 22:00:32 2024 GMT
        Subject: CN=52904084f45889a5282a8a26bfffe84653b0c08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:98:df:99:c6:40:65:b5:2f:0c:9c:a6:51:
                    4b:30:38:17:d4:f3:70:05:35:9f:e7:d3:f7:d9:56:
                    e0:09:05:bd:74:67:93:dc:df:3b:04:01:ca:a5:b9:
                    84:29:eb:24:9a:ca:e5:a5:29:70:af:7f:bc:58:01:
                    18:11:9f:3d:2c:e8:4b:a6:5c:01:8b:11:57:46:c2:
                    32:ea:68:83:d1:ef:bb:6a:72:2a:5a:17:a8:3f:18:
                    3e:b6:fd:c0:96:ff:d5:51:bc:3e:27:db:bb:a4:a8:
                    46:cf:59:45:24:02:57:99:c0:6a:ad:d9:c5:95:e1:
                    41:46:54:c2:bb:c7:c1:db:80:50:1e:f2:e0:a9:eb:
                    87:ba:ce:63:2a:0e:9d:e1:d1:f3:ab:76:29:47:ab:
                    8e:b7:5b:79:dc:c5:96:1d:ae:da:03:f2:19:59:23:
                    5f:22:9c:d8:bf:a0:42:ae:f0:cc:3c:64:0f:f1:5e:
                    47:66:e5:c0:21:2f:da:e1:5f:aa:69:11:bb:bc:16:
                    8e:dc:6d:19:19:e9:9a:42:31:60:fa:91:4a:c9:a7:
                    94:43:52:03:3f:88:92:b1:a4:b0:14:44:5a:89:c3:
                    5f:ea:c4:23:fa:1a:e3:68:9a:4f:1c:ac:9c:70:13:
                    0a:7f:46:7e:bd:71:5c:4a:fb:59:8f:d0:27:d4:ce:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:90:40:84:F4:58:89:A5:28:2A:8A:26:BF:FF:E8:46:53:B0:C0:8C
            X509v3 Authority Key Identifier:
                keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f4:d2:41:ae:73:07:c7:eb:e4:4c:e4:67:35:34:f8:2a:ff:
         a6:f7:4e:51:0a:a0:0d:0f:e2:e8:1c:3b:6e:61:4a:a0:9a:31:
         66:26:16:68:d3:ef:15:72:aa:2a:89:b2:ad:8b:5f:5a:ef:cd:
         f7:e6:8f:60:ed:5b:fb:7f:bd:d3:73:4f:7c:96:b6:71:4d:9e:
         42:94:2f:b8:df:da:f3:11:c8:a0:4a:2f:ba:6e:5c:bf:c3:9b:
         11:b7:1c:19:a8:01:34:ee:67:79:dd:87:87:54:d0:cc:4b:a0:
         94:6b:e7:af:9f:e7:7e:83:f1:71:3f:63:c2:be:c1:f5:c0:d8:
         5c:1b:44:78:0f:d7:b7:b2:88:9c:ad:39:cf:e3:5c:5f:5a:93:
         72:4e:4a:f8:4e:35:39:ae:bf:d0:4f:86:4f:d1:9d:73:95:39:
         c1:4e:3a:56:f5:4e:6b:96:eb:b9:51:1a:b1:27:8b:91:0c:9b:
         7f:f9:91:25:5e:7f:c4:08:2d:a9:1a:2e:44:ab:96:79:48:88:
         c3:8c:e0:d5:f5:46:00:b6:6c:ec:e9:21:f8:b9:31:e0:e4:bd:
         f1:64:5a:ae:97:47:bf:4b:69:29:d8:55:00:4d:31:fa:aa:5b:
         48:96:88:c9:ad:10:c8:3a:cf:3c:b4:8c:f5:16:ff:3e:99:56:
         b9:b0:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:15 2024 by rpki-client on console-fra.rpki-client.org