Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
File:                     hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft (raw, json)
Hash identifier:          9YD99s9I/hbxoF4vly/Gcdqlu1Nj1MG8xmTNh3DMU5E=
Subject key identifier:   1D:32:D8:27:B9:24:30:57:18:4A:5F:73:06:44:5A:EF:0D:6D:F4:7D
Authority key identifier: 84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96
Certificate issuer:       /CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
Certificate serial:       018F8823F5918253048B12110B969CFD0FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
Manifest number:          0FC8
Signing time:             Fri 17 May 2024 20:00:09 +0000
Manifest this update:     Fri 17 May 2024 20:00:09 +0000
Manifest next update:     Sat 18 May 2024 20:00:09 +0000
Files and hashes:         1: 9M1t6qmRsqrKOQeeT38dstFSOso.roa (hash: v63cSFLCFRKa/VMaA9iUje1l64xZCWEb7GYljNS2ulE=)
                          2: VfcSF9_VVkuurOwshPRUZkgqYuA.roa (hash: uyzyqCwA7gbxXV/bQBbYvVpDsSBNPASEWvvWx7wykyQ=)
                          3: fKVzQRt_5xZx3CmrO_f2gIStbTo.roa (hash: 60bDrRN1Bk1SskqcuD9E5MKNXpCL9mQAzUTa6IPmErU=)
                          4: hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl (hash: dCY0PMQ3Jadmyvvr4/M9CWCrFwb115KHr8UmKoszQFQ=)
                          5: rkFybeEb7gDFIFsUHadCGJXxy58.roa (hash: wLbCWa3sUq3hPIYRefenl5n/D4r7U11eyWJ370RuwS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:f5:91:82:53:04:8b:12:11:0b:96:9c:fd:0f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfc451fc4f2411addd00a9fbb17346ad6e8996
        Validity
            Not Before: May 17 20:00:09 2024 GMT
            Not After : May 18 20:00:09 2024 GMT
        Subject: CN=1d32d827b9243057184a5f7306445aef0d6df47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:c3:b6:2c:af:a6:69:cb:fd:93:d8:d8:d6:
                    ff:00:e2:bb:63:c2:3e:9e:58:53:80:92:e4:41:23:
                    ee:1e:70:c2:90:73:b2:47:28:c4:ab:bb:85:0a:18:
                    ef:03:12:09:8f:a1:6b:ae:f3:f1:e7:e0:82:b8:73:
                    b4:ff:70:dc:cc:1f:c6:00:2a:91:4a:11:81:22:13:
                    d2:c3:5b:52:9b:e6:25:68:67:d8:5a:53:4f:80:a8:
                    80:63:f2:45:b0:74:27:dd:a1:cb:2c:0b:a6:1e:0d:
                    3d:d6:99:18:f0:ba:62:a1:09:26:d9:a1:4d:ca:5b:
                    35:7a:a1:ac:69:7f:e0:2f:37:2e:cf:02:ea:88:0a:
                    07:b6:fe:ba:50:1f:ab:9f:08:1e:0c:6a:70:7a:44:
                    25:fb:ea:53:7d:d7:78:f1:fa:d4:a4:ec:af:7c:7e:
                    70:3c:1d:6d:43:ef:47:20:75:bc:b4:c0:aa:05:df:
                    ff:68:54:41:88:f1:f9:66:69:94:91:26:c9:2b:d7:
                    09:51:9b:1e:d8:91:9c:13:91:d0:71:15:72:3b:6a:
                    c0:70:17:57:03:8e:ab:f8:f5:02:a9:ac:45:e2:14:
                    dc:17:a3:90:0b:a0:7d:e1:e5:67:76:b7:cc:00:17:
                    0c:42:61:35:eb:81:70:f3:e2:78:10:aa:69:ba:32:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:D8:27:B9:24:30:57:18:4A:5F:73:06:44:5A:EF:0D:6D:F4:7D
            X509v3 Authority Key Identifier:
                keyid:84:BF:C4:51:FC:4F:24:11:AD:DD:00:A9:FB:B1:73:46:AD:6E:89:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hL_EUfxPJBGt3QCp-7FzRq1uiZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b7be64-86d4-443b-9686-f66317977968/1/hL_EUfxPJBGt3QCp-7FzRq1uiZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:6a:17:61:f4:1b:1b:37:4d:5f:7b:7d:54:6c:51:ef:b0:
         48:a0:5d:27:35:77:a6:36:39:9c:ba:93:c5:62:18:24:61:d6:
         62:c6:8d:7b:f7:7b:fa:1c:a7:11:c1:6c:a6:f5:67:61:da:f6:
         6c:a2:fa:fa:d9:4f:39:0e:b8:16:d4:42:09:fc:97:dd:c0:20:
         01:77:3d:c8:c2:18:ae:54:52:31:49:be:73:52:3a:b4:95:31:
         59:9c:b4:c7:d6:b4:6f:b0:c7:54:41:e3:c7:27:3c:03:0f:18:
         e1:6e:bd:61:fa:ae:9d:d7:c7:57:92:3f:32:e6:5f:9b:97:d6:
         82:e9:a8:f5:dc:d2:81:92:de:67:28:c9:dd:55:82:aa:80:26:
         77:83:f6:2f:3a:67:49:0c:ec:71:90:84:24:d2:41:c2:0b:35:
         d4:16:14:be:62:16:13:d0:5f:a6:e0:2a:20:bd:3b:fb:39:0b:
         42:33:64:e6:21:7a:ea:7b:3d:c7:14:85:63:ab:10:96:eb:3e:
         1f:cd:7b:b4:b7:b3:90:91:ee:41:16:c9:15:18:0a:cb:26:19:
         e4:e4:b4:83:b5:39:15:b7:79:d8:e1:62:54:d2:12:b5:62:9f:
         24:b7:15:51:78:80:b8:2d:e4:2c:38:de:56:91:71:f4:4e:42:
         ee:66:c1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:13:36 2024 by rpki-client on console-ams.rpki-client.org