Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File:                     g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier:          Ajh+AcDv0JTfMj7t+xIOnMX7xTIf3J+H56IZnKyY5RE=
Subject key identifier:   D2:1D:37:1F:4B:D9:4C:54:40:6D:CD:19:6F:D2:15:2A:CC:14:55:CF
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       018F877F33D0495828C9DBF42E82BBF3F9F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number:          0E80
Signing time:             Fri 17 May 2024 17:00:11 +0000
Manifest this update:     Fri 17 May 2024 17:00:11 +0000
Manifest next update:     Sat 18 May 2024 17:00:11 +0000
Files and hashes:         1: 6cr935C4-s2oXADfpBKkZxO0JCs.roa (hash: 0UfCwrXGdagy6R8gEQHnEWp8loO7ZUV2cK3ueMpYj1o=)
                          2: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: VsCrzAqw/PES5rxImYYsf3e7/mzc5pzpvumxR3BTo88=)
                          3: jwu-JYdsdfojrqgdEId3WBx_CnY.roa (hash: 8fjrmuimOrD+1FYrVEEifWxSP+T4UPZo9uqi1Pv2O/k=)
                          4: tPim4UxpY4Q8BNjVQNkSmBkw95w.roa (hash: q+jTqMT1EX4hA3VzC3Pp9JTx5FTeqN9y7YvlKoA8xzo=)
                          5: tdOT7A_SwtxkB9stl166CmBfa4I.roa (hash: R2eL71/7Kcr/9wKckF9nMOp/NEq7Xp1f8iUVcDLw9PM=)
                          6: wb_n18YmCekk96GP_TI-5jLjK_I.roa (hash: 9EQI4uQ8fxMuLjd388EOnkEu6mtJuPoPIxZ0C43t9h8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:33:d0:49:58:28:c9:db:f4:2e:82:bb:f3:f9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: May 17 17:00:11 2024 GMT
            Not After : May 18 17:00:11 2024 GMT
        Subject: CN=d21d371f4bd94c54406dcd196fd2152acc1455cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:56:45:90:1a:7b:80:02:40:8a:23:d2:52:
                    b4:f9:9d:57:56:67:aa:7d:74:5a:8e:5d:9b:03:18:
                    8a:28:ea:75:99:c4:01:03:d2:11:bd:f9:e5:b7:d0:
                    55:1d:c9:33:ab:82:d9:f8:c5:12:d8:3b:74:d3:32:
                    d6:34:dc:aa:0d:69:e1:58:f5:30:e4:d4:8f:57:6e:
                    97:37:3e:96:e3:3e:68:75:c6:48:33:b6:08:aa:1c:
                    56:a6:81:18:12:0d:f0:25:48:f9:d3:06:81:a7:71:
                    97:79:e5:02:f9:45:a3:83:89:48:0c:d8:eb:18:12:
                    0d:a4:39:56:a3:dd:57:02:27:6c:be:54:3c:80:9a:
                    89:54:8d:ea:92:e2:07:22:43:63:86:08:9e:78:93:
                    17:b5:92:58:6d:d4:e3:c6:73:55:6a:e9:39:d5:eb:
                    76:de:23:8e:4b:a8:96:85:9f:54:df:62:95:cf:00:
                    55:a9:e3:c0:ce:2d:ec:b8:7b:e2:e8:7e:e0:20:06:
                    8d:d3:1b:0f:f0:d5:3a:1b:aa:35:37:57:b4:17:1e:
                    72:3b:b1:b1:89:bc:ed:3b:e8:98:e5:c5:e3:f5:2f:
                    5f:8b:e7:a7:a6:b1:5b:ac:f7:9a:f0:5a:33:db:5a:
                    57:ce:3c:4f:6f:64:fd:dd:bd:5a:37:b3:f2:60:ef:
                    b4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1D:37:1F:4B:D9:4C:54:40:6D:CD:19:6F:D2:15:2A:CC:14:55:CF
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:28:ab:10:f4:4e:e4:f4:cf:58:67:1d:46:7c:aa:60:1a:
         12:f8:43:b4:31:d1:dc:51:df:26:30:ba:08:54:86:93:c8:5e:
         02:b2:f5:e1:ca:50:a2:98:fc:33:d4:17:c8:73:23:a4:29:36:
         42:74:59:bc:0e:5b:4d:80:49:a8:16:ec:60:1e:97:76:50:a7:
         93:bc:0b:e8:03:f1:4a:74:72:ce:f2:86:36:9c:f0:57:bd:7c:
         03:f3:fe:b2:ba:f7:31:c1:4b:9b:d8:06:e3:ad:a0:48:43:36:
         23:07:9e:a8:be:4a:6f:45:48:82:dd:d9:3f:52:2b:79:c9:8e:
         bf:30:42:ea:60:7b:c8:eb:80:32:5b:c3:a3:54:63:7c:17:ec:
         9b:6b:98:c0:3d:3c:12:0b:7d:3b:e5:22:83:c2:d7:f9:27:31:
         be:60:eb:a6:d7:5c:61:14:1d:67:76:65:ea:d9:8e:44:76:2f:
         61:45:ec:4a:af:aa:97:43:83:dd:40:7f:c5:41:35:de:48:e5:
         56:6e:43:5b:c8:80:18:b4:3a:3a:24:74:0d:25:bb:94:cd:5d:
         a4:f4:60:fd:ca:7a:bd:8b:d6:54:6b:8e:6f:de:9d:76:fa:66:
         9d:21:b9:7c:01:9d:1d:52:10:32:55:ea:9f:f1:d9:5a:e1:96:
         2b:64:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:10 2024 by rpki-client on console-ams.rpki-client.org