Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
File:                     il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json)
Hash identifier:          sqrLDtAhYSnZmnKI3QpMSy4WY6/G/PH8Jj0zEXjaNrA=
Subject key identifier:   FB:FA:E3:D1:18:B3:99:A4:75:6A:5B:F3:67:DA:3D:4E:CA:02:49:E5
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Certificate issuer:       /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial:       018F98AA4A76C7A17AEFC4A200DD6BD05D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
Manifest number:          1182
Signing time:             Tue 21 May 2024 01:00:47 +0000
Manifest this update:     Tue 21 May 2024 01:00:47 +0000
Manifest next update:     Wed 22 May 2024 01:00:47 +0000
Files and hashes:         1: HqojYHtJxU1G6ms08qYh97DrqEI.roa (hash: BKQU3azfNKH3cgjZkiVSKAffl6Du6x6irSj5kKutUJY=)
                          2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: jeVSiwbdRsnXTAfipaU5nptKFCLSdrIXBewZsjxLbdo=)
                          3: kg5DzowdBRghas0rvr18IN-HqsE.roa (hash: fdC/Ma7e1scZ1g6mOiGy/w7Ian+cJI4pbHgZTMAF+u4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:aa:4a:76:c7:a1:7a:ef:c4:a2:00:dd:6b:d0:5d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
        Validity
            Not Before: May 21 01:00:47 2024 GMT
            Not After : May 22 01:00:47 2024 GMT
        Subject: CN=fbfae3d118b399a4756a5bf367da3d4eca0249e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:1f:00:4d:b9:9c:0d:72:71:b2:d6:28:d3:
                    70:fc:f3:42:ec:fd:e7:d7:7a:ae:82:b6:a7:d9:3f:
                    b4:b8:21:8c:a9:9e:9c:cc:95:a4:61:c6:8c:b3:95:
                    dc:af:54:fb:e0:eb:50:31:78:ff:f4:1d:fe:36:a6:
                    ef:8e:78:9f:72:d5:97:c6:f6:84:74:ba:ce:33:cc:
                    c5:6e:e4:ac:17:b8:a8:ff:8b:48:16:b4:52:cb:69:
                    6b:81:f9:d4:7c:60:28:c2:95:7c:1a:08:3a:75:8a:
                    cf:95:35:27:20:2a:23:68:a7:79:f9:73:ff:e5:be:
                    82:19:90:ae:33:b0:3f:20:4f:12:9b:f4:24:2e:42:
                    66:35:f4:e0:d6:f2:6d:74:ea:8b:95:6e:31:ff:7d:
                    1f:29:a0:7c:ab:c5:24:2b:86:82:cf:2e:5f:b3:73:
                    99:c1:7a:18:4b:5c:5e:79:83:fe:58:41:1b:87:11:
                    06:61:f9:e3:d9:ff:ce:14:5f:76:87:34:32:41:e1:
                    19:11:4c:f9:0c:80:12:a0:e0:d7:51:c6:2a:94:92:
                    bf:05:38:09:13:2b:a0:8b:7b:69:27:0a:68:96:4e:
                    76:23:fe:ba:29:bb:ed:bf:6a:e4:c2:3f:5c:be:30:
                    a9:a2:28:dc:22:34:b7:af:97:96:48:22:60:6d:90:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FA:E3:D1:18:B3:99:A4:75:6A:5B:F3:67:DA:3D:4E:CA:02:49:E5
            X509v3 Authority Key Identifier:
                keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:9b:85:2f:18:0f:76:cd:8f:1e:6e:05:fd:19:9c:47:58:
         ea:17:63:7b:55:2e:eb:21:4c:8f:7a:75:5b:85:37:89:cc:4f:
         ae:be:f1:b6:f1:a4:6d:cc:12:22:fe:eb:24:f2:3a:ad:dd:da:
         9f:d5:e3:38:28:4d:d7:af:8c:49:39:94:63:e6:9f:b2:85:6b:
         89:fb:82:59:0b:77:39:bf:22:2b:f3:42:b0:fe:2f:1d:80:f3:
         8d:62:cc:6b:24:a8:2c:cf:5b:7d:5b:09:32:c8:b8:18:c9:52:
         55:03:ee:de:ca:06:08:75:76:03:36:ec:48:ed:88:17:9f:a9:
         a7:cc:13:05:f6:13:ca:0d:98:36:36:e1:1a:fd:de:1f:71:06:
         62:28:a4:3b:b8:42:81:33:de:7b:e0:be:d8:b5:fc:70:05:f5:
         8b:85:e9:a0:0a:bd:37:6b:a2:3b:01:69:88:98:2c:08:cc:a2:
         b3:54:17:f8:1c:62:bb:d5:d7:01:7c:08:e9:6a:8f:d2:92:55:
         b1:da:a0:bd:4a:df:cb:bb:c2:fc:56:e4:bd:28:bd:15:f1:f6:
         e1:09:bc:de:8b:fd:33:a0:2a:a9:51:71:42:99:bb:0b:e9:b5:
         0b:3a:1f:c4:0e:a1:21:3c:06:07:29:fc:d8:86:8a:73:d9:bc:
         a2:e0:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:08:03 2024 by rpki-client on console-fra.rpki-client.org