Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
File:                     0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft (raw, json)
Hash identifier:          Btmz1gH1iriCGFZ32cY7cV5cMKhT9T978mtFv+I7Q2o=
Subject key identifier:   89:9A:52:C7:71:D7:BC:7F:CE:8A:B3:5C:44:20:99:22:57:82:A1:F0
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Certificate issuer:       /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial:       018F595E567592FEDAE11C4AF8BFBE95500C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
Manifest number:          1160
Signing time:             Wed 08 May 2024 18:01:45 +0000
Manifest this update:     Wed 08 May 2024 18:01:45 +0000
Manifest next update:     Thu 09 May 2024 18:01:45 +0000
Files and hashes:         1: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl (hash: R2pwpYG7CdWFDyZpRxEUUp+y5jRovhbolJG2Da+eb1w=)
                          2: 9YGtIz05m62kDXigdHalhEsScLs.roa (hash: 9DxKD6A36HwAz0T3AIYbizIt4Twbkzdyn2hjT+gOCkg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:5e:56:75:92:fe:da:e1:1c:4a:f8:bf:be:95:50:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
        Validity
            Not Before: May  8 18:01:45 2024 GMT
            Not After : May  9 18:01:45 2024 GMT
        Subject: CN=899a52c771d7bc7fce8ab35c442099225782a1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:02:1d:51:d8:9f:a6:0f:c2:f7:15:22:c3:
                    c0:5b:83:be:37:ae:8d:8d:66:76:8d:8e:29:36:1a:
                    6b:76:3e:eb:72:a3:8b:27:c3:c5:2b:10:ab:f8:30:
                    b7:b8:6d:ce:1f:e1:a4:7f:c5:77:06:50:7d:37:4b:
                    66:d3:55:5f:30:bd:c3:ec:03:33:f1:ea:5f:41:dd:
                    8a:2e:88:75:4e:97:5c:9c:cc:bc:93:9b:8a:98:ba:
                    57:1a:89:f9:2a:33:a8:3b:ed:65:74:f2:93:14:59:
                    44:43:40:ce:fa:a2:59:eb:dd:f3:44:09:65:0d:7a:
                    7a:57:6c:c9:11:b7:22:3d:82:3b:ba:33:61:bc:c3:
                    f4:2c:21:28:98:c2:e0:f8:26:70:33:49:25:ea:b4:
                    11:b0:1c:82:be:2b:03:b5:b7:fc:c8:d9:fa:e7:0d:
                    90:67:3b:a3:82:94:84:29:e3:ab:4e:68:62:b4:c2:
                    95:7b:87:22:a6:44:7c:fb:78:cd:86:d8:e6:2d:74:
                    4f:85:9d:b9:10:98:bb:89:4a:8f:d1:fd:02:fd:fb:
                    68:84:51:97:83:ce:6e:68:28:e3:8f:7b:2a:e7:22:
                    09:7b:9c:ee:1a:c4:30:aa:8f:c8:5b:f9:c7:ee:22:
                    26:fa:f7:e6:d0:4e:57:c3:97:20:49:6b:c7:26:f6:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9A:52:C7:71:D7:BC:7F:CE:8A:B3:5C:44:20:99:22:57:82:A1:F0
            X509v3 Authority Key Identifier:
                keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:26:5a:b1:62:c0:db:f4:38:8b:9a:09:89:86:b7:a4:d5:61:
         f8:8f:dc:7f:ee:2e:ac:6f:0e:1d:5b:b3:f5:e2:61:f4:70:4e:
         ac:c0:a7:4d:4e:e6:32:69:a0:9c:4b:84:cd:75:e2:47:f3:aa:
         46:f2:22:b8:82:1a:93:5b:83:f1:3a:06:ba:e8:c2:cd:6b:b8:
         4e:12:af:9e:c7:4f:c8:0b:1e:0a:d6:86:b1:da:8f:48:22:b3:
         bf:4e:f0:04:9f:68:19:aa:72:27:bf:60:9e:a3:cc:23:c6:c5:
         a5:6e:5d:7a:f6:11:ec:b2:8b:3e:79:bc:32:e5:17:45:29:d6:
         fc:11:05:38:a4:7a:79:5d:33:ec:7d:09:e7:7a:5f:91:69:54:
         f1:65:b0:82:c6:e8:d2:53:6b:47:89:e7:d4:10:8f:48:1d:f0:
         22:36:28:aa:a7:60:3d:b3:ec:1e:c5:fe:7a:86:11:9e:62:61:
         29:12:f7:15:54:58:53:fb:5f:fe:95:de:7f:57:f2:ce:0d:ed:
         4d:97:9d:03:9e:6f:ce:4c:0b:bc:2d:fe:27:d0:78:36:0d:73:
         ec:2a:07:be:35:0b:c8:2b:84:af:bb:3a:36:94:d3:30:a2:6d:
         ce:9f:5f:ba:b5:e4:56:3d:26:22:c8:56:31:b5:ab:7b:fc:fd:
         e9:5c:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:43:38 2024 by rpki-client on console-fra.rpki-client.org