Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File:                     _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier:          5X82aVWfZwUn6BehZ3pNo4/5qKRhzWpxQf3h0IAWGWc=
Subject key identifier:   80:D7:ED:0D:8C:0F:5A:D9:C1:75:A4:51:34:26:23:91:81:FC:5F:3E
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer:       /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial:       018F8748E8D09F96FEF35480669EE3DCDF87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:53 +0000
Manifest this update:     Fri 17 May 2024 16:00:53 +0000
Manifest next update:     Sat 18 May 2024 16:00:53 +0000
Files and hashes:         1: Ff1G9MilPj8ozY9WJHDbOtrVVI4.roa (hash: w1ZP2h7qMTEGF7kMnSSpSQKltF7Ag0yH3ScrJID/PoE=)
                          2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: C9lKNBYDErCEcj5HBjr6tOQTYz6gLhW+thVPxa2O+6U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:e8:d0:9f:96:fe:f3:54:80:66:9e:e3:dc:df:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
        Validity
            Not Before: May 17 16:00:53 2024 GMT
            Not After : May 18 16:00:53 2024 GMT
        Subject: CN=80d7ed0d8c0f5ad9c175a4513426239181fc5f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:ed:db:28:fa:1d:cc:93:c3:5d:8d:db:23:
                    8e:d1:15:cf:63:cd:a8:4c:6c:14:b2:22:fe:a6:48:
                    d2:4d:23:f8:34:cc:a7:b3:5f:c1:98:05:4e:f4:b9:
                    9d:e6:20:d8:85:10:ca:4c:39:76:fa:01:d6:62:e3:
                    ad:e0:e1:da:2c:b8:69:92:10:5c:62:1e:54:ad:82:
                    9b:7b:9d:d6:b0:c0:4f:07:e5:2a:00:a2:31:8b:80:
                    e2:14:71:c0:a1:ac:24:28:1d:41:3a:78:4a:dc:56:
                    d4:0b:12:af:7d:8f:1a:19:21:c1:20:fb:4b:c5:15:
                    70:24:22:55:03:0b:f4:a2:30:98:ae:db:45:8e:c9:
                    74:dd:ba:49:67:e9:47:1d:9a:c7:54:8b:81:7e:d6:
                    4d:dd:38:fe:2a:35:8f:1a:64:06:41:ad:07:91:65:
                    a5:d7:c9:c3:8d:a7:df:5d:b6:73:0d:12:fd:a8:01:
                    68:b7:e4:2c:b1:36:20:ad:6c:4e:45:8a:94:cd:3b:
                    e1:5f:83:cf:71:ac:eb:55:6e:d1:00:c3:03:91:55:
                    3b:d5:d7:0c:71:2c:46:6e:77:23:57:df:90:58:f2:
                    34:93:09:fa:78:5a:79:c6:f5:84:d1:e7:59:b0:04:
                    5e:46:77:9b:79:56:82:df:3c:e2:b4:f7:1b:a9:0f:
                    ce:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D7:ED:0D:8C:0F:5A:D9:C1:75:A4:51:34:26:23:91:81:FC:5F:3E
            X509v3 Authority Key Identifier:
                keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:88:ec:b3:db:38:f5:33:e9:f2:bd:f7:19:7f:52:da:91:
         90:4e:19:92:f7:61:e3:6a:fa:60:1d:cf:24:ea:49:34:1e:90:
         36:c4:0b:d3:eb:8c:95:a3:54:1d:8d:bc:19:04:d4:b9:3a:dc:
         9e:ae:ae:f7:e7:13:e7:dc:1c:52:6f:e5:8e:f6:73:f7:e2:a6:
         9f:68:2d:d9:6e:79:f7:4b:8d:0e:8e:5b:40:0c:fb:10:89:96:
         d6:d8:77:7e:71:69:a8:2e:d6:9d:72:b4:5b:e7:ab:fe:62:c8:
         55:1f:98:69:c7:37:2f:7c:0e:fb:eb:56:93:f6:a8:72:60:95:
         8d:27:68:a4:6c:f0:d1:33:91:ef:10:14:ca:a9:62:40:e3:2b:
         23:23:8c:e0:fe:8e:23:e2:d2:dc:43:05:ae:0e:f3:c5:59:4a:
         81:f9:1d:17:06:6f:e6:ae:11:7c:28:f7:5b:98:18:a7:07:ff:
         46:f0:5d:27:a3:5f:04:4d:47:23:9b:a9:90:15:8e:72:18:ca:
         68:c3:29:0b:de:88:f5:ec:94:6e:1a:ab:f8:cb:e1:c1:02:b8:
         01:c3:80:86:a7:74:42:bf:24:28:be:3e:c8:30:e6:07:70:d3:
         8e:81:4e:ec:76:ca:5d:09:b7:2a:d4:0a:71:5c:94:fe:1c:b5:
         da:83:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:10:50 2024 by rpki-client on console-ams.rpki-client.org