Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File:                     8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier:          NuvbGmXV1eM+SnLG4o4tVZh9XenaAnPo8qzPjEP5Sgs=
Subject key identifier:   C9:26:EE:B9:30:CF:8B:EE:1F:43:3F:D6:7D:D0:3B:3B:FD:61:BF:71
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer:       /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial:       018F8748730133005237937DD05A58ABD859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number:          01D9
Signing time:             Fri 17 May 2024 16:00:23 +0000
Manifest this update:     Fri 17 May 2024 16:00:23 +0000
Manifest next update:     Sat 18 May 2024 16:00:23 +0000
Files and hashes:         1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: B4PPZdT49k4QzAi6+FDAhXgxTWFCmVf+3/OhI1DQm+k=)
                          2: MNoAt3lDdvyGkuhbUGnCVm60_E4.roa (hash: q52r1qZEUT4xmjqiRqeA1MU0xguxc4a4xxELYW6SSNM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:73:01:33:00:52:37:93:7d:d0:5a:58:ab:d8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
        Validity
            Not Before: May 17 16:00:23 2024 GMT
            Not After : May 18 16:00:23 2024 GMT
        Subject: CN=c926eeb930cf8bee1f433fd67dd03b3bfd61bf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:19:b8:c3:46:28:78:3c:db:f5:73:f6:5a:
                    e9:18:f4:99:b7:12:52:64:f0:81:2d:c1:9a:d5:46:
                    04:30:ca:d9:60:ee:05:1d:7c:83:d1:5c:c3:e8:72:
                    f3:28:c5:b7:18:0a:38:f1:78:6d:90:ff:a0:7d:db:
                    71:09:01:cb:2e:3c:90:54:ea:58:81:69:51:7b:85:
                    57:cd:0b:ba:6b:0b:6e:b7:ce:4a:39:8c:d8:24:9f:
                    2b:ab:cf:54:da:c8:0e:fc:51:f0:de:ed:34:a3:68:
                    61:e4:4b:a5:49:81:82:c4:b4:9d:42:59:93:3e:b5:
                    0e:99:e6:8a:df:de:e5:2b:e6:9f:64:4c:e8:3e:89:
                    0f:c3:bc:05:8f:28:66:6d:5b:f3:a9:55:ee:f3:c6:
                    27:39:65:b8:10:56:19:91:3c:bb:7b:c9:aa:8b:c8:
                    04:fe:8d:1c:1b:bb:3a:bf:e8:ea:3f:4b:07:c9:ab:
                    f3:a2:d9:2d:f6:4b:62:c8:93:53:a7:0b:29:f8:95:
                    57:3c:fc:21:a0:14:7c:f7:df:56:e9:2a:a5:6c:60:
                    b1:62:60:96:aa:72:e8:24:fe:9f:87:ac:0c:95:1d:
                    82:d0:dc:5d:9c:81:df:ff:d1:05:92:26:f9:bc:14:
                    08:15:f6:91:27:5e:12:8a:cf:9e:46:ab:84:bb:50:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:26:EE:B9:30:CF:8B:EE:1F:43:3F:D6:7D:D0:3B:3B:FD:61:BF:71
            X509v3 Authority Key Identifier:
                keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:64:c1:52:b9:36:ed:49:b6:ec:cb:03:dc:06:a2:66:33:
         72:f8:0c:e8:c7:dd:00:15:61:75:f9:6f:6c:c2:02:49:31:37:
         1b:70:7c:60:12:17:5e:de:3a:46:b6:06:9f:4f:09:d0:8d:e7:
         3a:dd:f9:66:3e:db:23:62:fb:1f:d4:82:4d:97:2e:79:2d:d8:
         ad:15:6c:b7:1d:92:12:30:31:ca:c4:76:79:33:e3:b1:78:00:
         80:bb:06:a6:24:d0:17:86:3b:de:8d:e2:c5:c6:cc:1d:f7:3e:
         48:04:94:93:76:e6:fa:a0:a1:42:59:94:55:a5:2c:0a:3c:13:
         82:0d:d6:ba:20:b7:41:99:ba:66:99:a2:03:aa:2c:39:3d:24:
         c6:f8:f5:98:6f:1a:43:f0:a8:45:69:28:20:08:5f:ff:6f:90:
         90:05:0f:e2:ee:97:04:31:f4:8a:5e:af:78:96:6b:0a:7c:71:
         20:73:f7:89:a1:14:cf:c0:de:bb:37:d8:61:46:0f:3e:87:af:
         bd:ec:3c:f0:6d:bc:ba:7f:96:9b:bf:77:e0:f0:4d:02:8d:df:
         37:55:bf:05:6c:dd:c6:bf:c3:04:35:a6:d0:85:04:99:7c:1f:
         9a:5d:44:82:29:04:e1:7a:49:fb:6f:3a:93:a8:cc:bd:1a:db:
         2a:45:10:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:43 2024 by rpki-client on console-fra.rpki-client.org