Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
File:                     lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft (raw, json)
Hash identifier:          rKUwepHdHA1jbkDiLT0nCu6dZ1jgbxg+XHDSLZSuKas=
Subject key identifier:   F4:5F:26:D4:E0:9F:67:F2:F6:59:BE:8D:46:67:CB:1B:E2:96:A5:E6
Authority key identifier: 95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
Certificate issuer:       /CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Certificate serial:       018F866C8A6457A9C0EFA3AF40E3B02FB54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
Manifest number:          0260
Signing time:             Fri 17 May 2024 12:00:11 +0000
Manifest this update:     Fri 17 May 2024 12:00:11 +0000
Manifest next update:     Sat 18 May 2024 12:00:11 +0000
Files and hashes:         1: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl (hash: MQQxEmfxkNQfBJ2PebCyllwCgDqTH+ANDLzOvRXijy4=)
                          2: wZ0zl4Fp9rUD-Eb3vvzDWm2eUZc.roa (hash: 5eVVuVH2bgVoD564N6VmuTVieuhogrKC8IUJifJVC+M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:8a:64:57:a9:c0:ef:a3:af:40:e3:b0:2f:b5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
        Validity
            Not Before: May 17 12:00:11 2024 GMT
            Not After : May 18 12:00:11 2024 GMT
        Subject: CN=f45f26d4e09f67f2f659be8d4667cb1be296a5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:c8:a3:36:fa:ff:e6:58:39:1c:05:aa:1a:
                    c3:a2:6a:54:77:9a:ae:f2:56:eb:89:5c:e1:78:89:
                    77:b3:4c:df:ed:ee:9d:85:8d:bf:24:6b:00:d7:7f:
                    82:3d:d1:bd:1c:3c:11:8e:fc:f6:6e:21:49:bd:99:
                    35:cd:a1:c5:7a:26:25:0c:13:1a:6f:77:f8:cf:db:
                    c5:0b:80:3e:f8:cb:68:61:54:c1:58:59:c7:37:c2:
                    da:c4:dd:44:fd:df:3b:fd:7c:10:00:9c:95:93:ef:
                    81:cf:c8:eb:79:cc:6d:a1:da:1d:9a:fc:be:03:f3:
                    c4:bc:f3:79:fc:99:0b:1c:aa:9a:1a:8f:5d:ea:17:
                    62:41:30:c9:e8:fe:59:8b:5d:80:ec:e9:df:17:9a:
                    15:e5:8b:6a:9e:80:26:c0:55:98:0c:a0:e1:e6:8c:
                    06:27:2f:cf:a5:e6:15:c7:66:d4:ca:d6:e0:a7:a6:
                    10:88:5f:14:5c:96:eb:ae:f4:a6:ae:e3:85:ea:7e:
                    b7:81:c5:32:c3:ca:c6:93:f8:26:a2:16:49:00:7d:
                    1c:6b:50:71:6f:34:4c:b2:f0:16:d5:5a:8b:75:cf:
                    e2:87:61:9c:11:81:7d:78:09:b8:15:10:e7:b1:88:
                    49:c9:01:1f:3d:c6:78:9d:09:52:b8:fd:09:ca:7a:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5F:26:D4:E0:9F:67:F2:F6:59:BE:8D:46:67:CB:1B:E2:96:A5:E6
            X509v3 Authority Key Identifier:
                keyid:95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:eb:52:2d:4f:98:fa:2b:3d:0d:a1:21:03:a3:c6:9d:59:3d:
         66:1c:48:63:9c:c3:cf:7e:99:47:e2:06:17:e3:e5:bf:69:90:
         5c:d4:d9:51:fa:31:5e:7f:61:d9:3f:f3:14:a4:2d:53:c3:d8:
         67:de:5f:a8:0e:32:1c:92:97:3a:a6:2e:01:3c:3b:8f:02:80:
         88:f3:d4:99:f1:4c:da:b5:df:f0:ed:9e:f6:dc:14:67:21:a6:
         cd:c6:48:67:30:a1:6c:db:50:f8:29:20:51:66:74:8a:e7:1f:
         95:24:d8:ee:b3:5c:69:9c:c6:b0:9f:e3:31:b5:fa:db:25:c0:
         d2:7e:ff:e3:fc:90:95:d6:fc:58:9a:f1:3b:c1:ea:dd:cf:9d:
         c9:5f:19:91:79:63:17:03:c0:42:71:9d:6e:63:77:b1:99:91:
         db:13:66:dd:be:2c:54:4e:cc:b2:f2:aa:d1:41:87:27:a4:82:
         17:7d:d7:26:a9:4b:4a:42:64:cd:74:04:bd:5f:cb:62:62:2b:
         bd:81:14:11:7f:a4:05:ad:b7:b0:b7:d3:2d:77:8e:e4:30:e4:
         84:86:41:02:9d:58:8f:cb:7d:07:ed:53:fb:5c:16:a7:e9:56:
         cb:7c:a2:63:b5:d8:41:8b:ec:6c:d0:01:24:48:8f:23:41:e7:
         cd:fb:6f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:00 2024 by rpki-client on console-ams.rpki-client.org