Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File:                     bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier:          43T4bzI1CXDy/cTJ8QfM2MKuudRv39bjkItwtCNUeL8=
Subject key identifier:   17:8F:53:C6:3C:39:94:D2:62:C9:D8:96:45:0B:97:AE:83:60:95:C3
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer:       /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial:       018F87B6887D2B8E4E6C9FAADFF6B5AB839E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number:          085B
Signing time:             Fri 17 May 2024 18:00:37 +0000
Manifest this update:     Fri 17 May 2024 18:00:37 +0000
Manifest next update:     Sat 18 May 2024 18:00:37 +0000
Files and hashes:         1: KWBpE_vq11TOYQtDQegGmCOxt3U.roa (hash: Axz5haOlAjNXcBpWePEphTyWnxv+RUAnuTUUa6E3SUc=)
                          2: MtNV3H76VBv8k53WlVvx0c0aOvo.roa (hash: sOOu6/a/RNv5da2LftcXJ/BJZSfwHHSJllefB0VVIIE=)
                          3: St_voBpyQJP7v5lDBk-3RLxs57s.roa (hash: vZigJbi1Z5+OdHBlDLa9jeKJT8tmsJxNYXnoU/b7d/k=)
                          4: TF_cfHDtSrX1ZYMKzl0nyQ4BkoA.roa (hash: 6dDIM+tSI8QK5e0nzvdCzB7FRO2DYS67qDgkfQMI8xM=)
                          5: VcJ2Kgn-JXs45Lai3k_Nn6BKelY.roa (hash: BimJ7H6En08y1r+L3jMzwsa8J0FtFJkF8igD2hfgaEc=)
                          6: _fI-7S9ZgiooZeexXWA41atmup8.roa (hash: T1iMhU4XK6ZiMWqF6/v1zioJ/PqjpqoZAKVM15IZG14=)
                          7: bRmDT7jaQGYBSNOHB3YIpHs7dsE.roa (hash: wdFo6x3SOD184srcDqMVF4l61ZB51uRrx4aKmJgoWUQ=)
                          8: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: marsd2NpRYR8zZhtTnFfF//2KGDeczTGT9L1vpwN1+o=)
                          9: n4VBQQv_gdS4dqFQ5X-txG6lUBI.roa (hash: UIGtIl4FIPZrFXAWgZHyN7SQhr0BJUp4kV9UC4avs7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:88:7d:2b:8e:4e:6c:9f:aa:df:f6:b5:ab:83:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
        Validity
            Not Before: May 17 18:00:37 2024 GMT
            Not After : May 18 18:00:37 2024 GMT
        Subject: CN=178f53c63c3994d262c9d896450b97ae836095c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:ad:2e:54:7f:c9:93:84:85:27:00:80:b5:
                    b8:b7:04:b6:1b:53:ee:b3:42:91:f4:33:10:b5:bf:
                    01:45:ea:bc:31:c5:a1:63:70:d1:19:dd:91:ab:9b:
                    1d:db:d3:64:69:3b:a8:4d:79:d9:54:ec:63:54:d5:
                    53:ab:2b:e5:f9:0b:6d:4e:87:b4:5b:f8:37:6e:6e:
                    85:ad:b6:94:22:3c:2b:fc:bd:a2:d1:1c:f0:c0:16:
                    3d:f5:26:c9:dc:7e:a7:75:69:e2:23:6e:1c:31:b7:
                    4c:a0:2e:81:5a:61:4d:2f:84:9d:16:12:f3:8f:62:
                    26:dd:d1:f5:79:fe:2e:4d:c3:b5:32:7e:43:06:8c:
                    5a:90:02:10:97:41:3b:8e:68:f5:ed:b4:b4:a0:23:
                    db:87:ca:9e:71:8c:3a:70:81:65:5b:87:df:07:61:
                    6f:55:62:b2:db:5a:bc:cb:76:40:32:95:a1:77:d8:
                    56:0c:41:cf:93:67:3b:d5:9d:39:13:d9:d9:d2:b7:
                    fe:36:78:1e:66:e2:cd:14:25:4a:84:07:0b:ba:ef:
                    e4:63:f0:0c:35:0a:1e:84:4d:4e:7f:75:2b:e0:bf:
                    1f:65:cb:39:38:59:e3:53:04:21:7d:8c:eb:fb:ed:
                    a8:1b:42:e0:ae:59:70:16:42:d8:97:f5:98:e3:50:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8F:53:C6:3C:39:94:D2:62:C9:D8:96:45:0B:97:AE:83:60:95:C3
            X509v3 Authority Key Identifier:
                keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:36:3f:16:26:fb:08:5e:5e:e3:d9:99:c4:99:0b:73:c3:1d:
         e2:74:54:c7:ba:ec:33:04:da:f6:bf:a0:65:3a:35:42:89:ec:
         ca:c7:89:d3:89:ab:8c:2c:06:63:df:f8:2e:89:bd:fc:4a:81:
         ff:2b:30:40:d7:7c:5c:80:22:3b:a9:dd:da:3c:01:cb:b7:6c:
         98:e2:69:00:ef:fd:ec:d3:8a:06:72:df:db:34:43:c2:34:72:
         e8:a1:8c:ce:79:18:16:b3:1f:ff:50:c4:72:00:bf:34:46:3c:
         38:00:ac:fb:aa:46:ab:01:5a:57:60:26:09:4e:29:ea:60:1e:
         9f:c0:0c:63:8a:84:1a:65:f6:cf:ff:6b:62:c1:db:bc:05:ab:
         e0:85:de:16:23:40:e2:f4:d9:9e:b8:f8:39:6a:e8:63:70:6a:
         8b:b5:d8:8d:b3:d8:ba:92:22:e0:53:e0:11:30:d5:26:b4:ed:
         08:36:12:43:71:a4:e1:5d:9c:e0:03:41:76:11:e4:88:7f:8c:
         4a:18:18:94:9f:fe:bf:b2:c4:bf:66:fb:f5:8f:66:f7:81:67:
         96:be:b0:e9:b2:dc:1c:b2:83:4a:1c:48:ce:2d:60:94:12:59:
         35:e7:20:e9:2f:62:87:c1:6a:c9:65:99:76:7c:77:05:14:c8:
         89:c9:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:04:52 2024 by rpki-client on console-ams.rpki-client.org