Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File:                     1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier:          UryYQyTdVXY6JVYTiZUNKj3ZjKBBjdknQUm52qR9ZIc=
Subject key identifier:   CF:A8:A4:A1:98:AA:2A:0A:A8:15:78:BC:3C:37:92:EF:48:E7:66:58
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       018F48A0FEF70D688B88967EA7C734A018D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number:          0BE7
Signing time:             Sun 05 May 2024 12:01:01 +0000
Manifest this update:     Sun 05 May 2024 12:01:01 +0000
Manifest next update:     Mon 06 May 2024 12:01:01 +0000
Files and hashes:         1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: mrGgJRgdA7fMAfe4iLr86DSzHoEaMFrzPK6S/MV5fFY=)
                          2: O9z59kqaxoeNEuG-ii8R6h4FRnY.roa (hash: 1Xmf6rOdq4atnRQwEt1Axk/QormEa2i5I6TDkuA7Mqs=)
                          3: hb6csWBkoEK5ynNhDHknUkSIjHA.roa (hash: AwL5FjGj/Od9OZpUWqWHO2PsGTbYf+X9ZYFg4SmLt28=)
                          4: nHMFhhn9YLwm3fxLLnKwnS54Stw.roa (hash: sZYXKGj51e7V0q4Rh1JbDrxNRGAHm0NfDEpWqnddoA8=)
                          5: up2OhYVMkK27HzylZe3Qmqi5mzY.roa (hash: TOd7Tr8KR0QIENiqPuogGWWcRUeotTQeqiXgragXyKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:a0:fe:f7:0d:68:8b:88:96:7e:a7:c7:34:a0:18:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: May  5 12:01:01 2024 GMT
            Not After : May  6 12:01:01 2024 GMT
        Subject: CN=cfa8a4a198aa2a0aa81578bc3c3792ef48e76658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:28:a0:dc:fb:8a:54:59:67:45:81:62:8c:
                    ff:37:35:09:70:cb:2d:f7:c3:e8:f2:b6:22:75:1d:
                    c2:39:0d:7a:82:1c:d4:78:5b:14:aa:83:cf:d9:80:
                    99:86:a4:ef:3f:8b:87:45:49:fd:ed:f3:d6:5d:9e:
                    09:20:8a:01:5b:cf:a9:42:f7:df:92:4a:f8:64:7b:
                    c5:3f:00:56:9f:fc:88:72:6d:70:08:a5:7d:ce:33:
                    ea:0f:be:67:e3:cb:e5:a6:a5:9e:7c:1f:67:e6:13:
                    23:d5:42:f9:43:eb:45:b9:c7:7a:9e:7b:d1:a3:c5:
                    9e:2f:2b:79:70:55:f8:a6:a3:e3:f4:f2:12:d2:20:
                    06:24:d3:6b:98:97:65:d7:c0:44:b3:12:d8:15:2f:
                    a2:d3:23:2c:09:b0:c7:09:7c:64:f6:c0:8c:4c:d8:
                    d9:2a:86:d7:4f:66:40:32:c3:87:25:06:d0:ad:d7:
                    60:db:aa:fd:3f:89:3a:b8:94:9c:15:68:82:3c:a6:
                    5b:f0:ff:16:8d:9e:09:21:2a:e4:31:30:ef:07:57:
                    be:e2:d8:a3:85:62:bf:64:8c:0c:b1:73:b0:b1:c3:
                    93:7e:a6:04:f2:13:0d:49:de:7b:f7:99:d7:91:2a:
                    80:0a:30:55:35:a1:bf:87:83:67:2e:3b:0a:17:3f:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:A4:A1:98:AA:2A:0A:A8:15:78:BC:3C:37:92:EF:48:E7:66:58
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e5:7c:7c:82:d9:da:c0:ce:a4:92:92:38:22:8a:ad:2c:9e:
         2c:b1:37:fc:25:1e:bd:68:f1:0e:bb:38:db:46:09:e4:4e:7a:
         47:ce:fd:c4:d8:cb:2b:93:95:c6:b8:5b:61:76:e8:4e:ca:37:
         eb:e7:75:97:e0:03:dc:f9:5a:93:39:c1:dd:a0:d5:00:a2:c2:
         cd:d2:c7:ac:e9:4e:b4:10:2a:d7:02:45:2a:e9:b7:3e:b7:35:
         aa:8b:84:3b:1a:66:f2:76:23:9b:85:6b:99:3c:f4:a7:e6:09:
         ca:60:27:93:f1:d8:04:06:a2:34:9d:5f:9e:b2:54:bf:e1:cb:
         06:84:9e:f0:42:3a:6f:b5:e7:1c:59:61:19:de:01:41:ca:6e:
         94:bd:00:a9:72:47:b2:c5:ad:2b:79:8b:79:96:74:ae:70:eb:
         2c:2a:8a:29:0a:a6:7a:68:91:42:36:6d:7b:8b:d1:c5:6e:d6:
         7a:98:9a:8a:52:04:69:91:e7:02:85:9f:bd:86:ee:f9:25:93:
         f4:27:27:15:fb:52:2c:e1:01:59:25:04:2e:04:9a:ee:49:ae:
         ba:e5:4b:89:81:f5:d6:e0:91:38:a1:d6:3b:01:8b:ca:65:d9:
         86:f5:95:64:0c:60:79:71:a9:f7:f5:c4:37:46:32:16:f0:8b:
         d0:3c:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:37:27 2024 by rpki-client on console-ams.rpki-client.org