Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File:                     fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier:          ZMK5hBFgIMYG1RzOc0+FVXwAl0TXatFK1l/bp6udeSo=
Subject key identifier:   CC:EC:50:5D:C6:DC:21:4C:99:B0:45:4E:93:8B:29:2D:0B:D8:84:43
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer:       /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial:       018F86A36F92452808743D7437063046B3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number:          089E
Signing time:             Fri 17 May 2024 13:00:08 +0000
Manifest this update:     Fri 17 May 2024 13:00:08 +0000
Manifest next update:     Sat 18 May 2024 13:00:08 +0000
Files and hashes:         1: 4mOigwBahraWZc6OMcTl7wKw_j8.roa (hash: kpURYKC/18zPhtxra/G0AD4/YoctxM9RhXGcuJa58zU=)
                          2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: uG0NTwgMqnCiw+1UxalUm98e4MnJf3vP71fSzK9fZyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:6f:92:45:28:08:74:3d:74:37:06:30:46:b3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
        Validity
            Not Before: May 17 13:00:08 2024 GMT
            Not After : May 18 13:00:08 2024 GMT
        Subject: CN=ccec505dc6dc214c99b0454e938b292d0bd88443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:6d:b6:db:39:a4:14:da:b2:9c:a5:3c:e5:
                    18:ee:4f:5f:48:50:7d:be:d4:c6:ed:c0:47:ad:51:
                    94:df:5a:f7:39:38:89:b6:04:39:9a:17:a7:5f:6b:
                    35:59:77:5b:aa:2e:9b:56:41:7f:a5:6c:23:53:6a:
                    d7:e8:e8:17:68:9e:27:1b:d5:77:3f:44:4f:e9:29:
                    87:bc:ad:57:d4:5d:83:e0:0a:cf:a7:34:11:4b:1f:
                    3c:cd:28:75:e2:df:ce:f6:36:fe:b2:29:9a:6f:d1:
                    70:65:20:bc:c7:e8:18:07:c1:80:f8:3c:9d:4b:1d:
                    aa:cc:b7:fd:21:ac:72:54:6d:50:7a:6e:0c:b4:9b:
                    91:cf:0f:52:50:02:54:ee:b3:c6:70:ba:5a:7b:dd:
                    65:36:4c:9b:9e:a3:cf:ab:f4:7f:66:ee:fb:86:6e:
                    43:e3:2c:4d:c1:5e:40:57:34:be:d9:21:7c:e8:8d:
                    76:cc:6d:55:32:51:32:23:ff:2b:29:ab:fb:07:75:
                    e1:0d:14:dd:75:6a:76:c6:ed:38:50:e1:8f:7d:71:
                    43:57:05:be:54:cf:46:51:4b:f6:71:e4:9a:66:ad:
                    7b:f5:dc:1f:d3:da:67:a8:e4:b0:e6:bc:71:98:23:
                    5e:e2:d2:e6:4a:14:63:38:16:ac:51:ab:5c:1e:f2:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EC:50:5D:C6:DC:21:4C:99:B0:45:4E:93:8B:29:2D:0B:D8:84:43
            X509v3 Authority Key Identifier:
                keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:89:d5:93:a2:7d:3d:11:50:a8:ac:9f:f2:34:a2:11:52:2d:
         25:34:5b:3f:53:d9:66:7a:aa:1d:98:ff:6b:69:3a:ed:6d:e5:
         bd:1f:28:e3:5d:34:87:31:3d:f9:df:50:ff:c7:f3:51:9c:40:
         eb:e6:75:45:71:9c:0f:ab:6c:6a:9c:03:b8:59:63:2a:48:78:
         63:86:ec:65:e4:c2:27:9a:0f:fa:3a:fa:f2:02:e7:b6:88:3b:
         dd:ab:11:66:42:d2:c5:7f:03:fa:60:ca:57:07:ce:d4:c9:7d:
         36:ef:11:3b:12:0b:e4:43:4b:c1:b5:51:d1:6c:ea:94:9a:08:
         11:47:9c:3d:cc:0b:b2:f5:aa:56:76:b2:80:91:92:6a:b1:cb:
         b8:cf:d9:6f:72:65:a3:87:79:98:9d:48:8a:8c:a2:a8:11:28:
         c6:6f:9b:a5:55:27:fb:08:1a:47:ed:4e:e2:3e:cd:f6:1b:29:
         6b:23:ef:15:b9:d9:6c:a9:b7:45:c2:95:98:32:a8:bc:4d:d7:
         76:2e:89:89:be:76:be:59:4e:5b:10:44:12:76:96:d9:f0:d7:
         bb:97:f3:b3:e2:cc:ce:69:b1:37:72:8a:25:73:10:29:af:1b:
         10:f8:9b:c9:c9:77:dd:bb:0c:5d:6b:a3:3a:03:18:81:17:11:
         df:1d:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:43:28 2024 by rpki-client on console-fra.rpki-client.org