Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File:                     8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier:          UIx3eoxK+wQDa7GcK2AvgPNbYNPCV0DUV7FTkuoiqRI=
Subject key identifier:   3F:04:91:A0:51:56:19:72:E3:80:2C:A9:9F:BB:F4:C2:D8:58:2C:95
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer:       /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial:       018F55815BDBC32C03CD6A37BA802B8D1D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number:          115F
Signing time:             Wed 08 May 2024 00:01:31 +0000
Manifest this update:     Wed 08 May 2024 00:01:31 +0000
Manifest next update:     Thu 09 May 2024 00:01:31 +0000
Files and hashes:         1: 6eMhANyFoW2Gzl9fhZNr-BC6-iw.roa (hash: TmeqqVwQnnK82M8xG3n1LEB3vbo2kHmD22vd/m3zukk=)
                          2: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: 4zUacLjAf5UJJig+Q3bIqJvgMQBpe0mlpDiSknBa5+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:81:5b:db:c3:2c:03:cd:6a:37:ba:80:2b:8d:1d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
        Validity
            Not Before: May  8 00:01:31 2024 GMT
            Not After : May  9 00:01:31 2024 GMT
        Subject: CN=3f0491a051561972e3802ca99fbbf4c2d8582c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:df:a4:5e:05:9c:2c:96:40:08:a2:24:c9:
                    f2:1c:ed:f9:45:45:f3:07:09:78:3b:23:d2:36:d9:
                    61:29:7c:f0:86:45:23:ac:8d:cc:97:97:36:38:4b:
                    64:1c:5f:5a:15:9c:b8:b3:2a:1c:d0:8f:28:65:a5:
                    7a:6a:d7:a4:98:b7:c0:bf:eb:ae:ef:31:d6:ac:75:
                    13:a1:10:a2:83:b9:b8:42:fa:64:3b:c2:8c:13:fb:
                    ae:7a:cf:1d:da:af:12:26:f4:b1:3a:db:f2:85:e5:
                    0b:31:da:11:ae:5d:5f:29:51:4e:a2:7b:69:f4:2e:
                    51:c4:54:25:55:b7:fb:da:ad:ec:b3:8c:95:52:3e:
                    d5:18:17:a4:80:28:a9:f2:e1:95:cb:d7:0a:ff:93:
                    a2:18:d5:1d:a2:8f:43:d6:c4:fc:8b:14:99:d3:f2:
                    6d:b3:28:70:3f:da:ec:52:c5:68:46:e4:f7:c8:a1:
                    ed:55:ba:da:30:60:4f:df:74:55:b7:04:a8:a7:a1:
                    26:5e:f9:e1:fb:8f:2c:93:53:53:9e:de:7c:55:3d:
                    29:6e:85:fd:56:f4:65:16:87:33:03:0b:34:98:c5:
                    9f:c6:38:af:b4:81:7b:d1:f9:66:e8:bb:ce:94:b3:
                    79:3a:24:2e:22:2b:4a:3e:81:3c:92:c7:22:90:f6:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:04:91:A0:51:56:19:72:E3:80:2C:A9:9F:BB:F4:C2:D8:58:2C:95
            X509v3 Authority Key Identifier:
                keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:4d:ac:90:94:d4:dc:41:e4:50:14:3b:3c:96:db:23:62:
         bb:d7:9b:32:46:72:66:b2:80:4b:8e:91:68:4e:ac:89:82:53:
         1d:38:44:0a:e6:5c:b7:a5:a5:41:b9:8e:fe:e9:f4:2b:d4:a3:
         1c:7d:60:74:a0:89:20:24:29:da:08:67:10:8d:a7:36:d9:11:
         a5:0c:b4:7a:bb:7c:a3:bf:b7:8d:ce:01:7a:89:89:f7:f2:4f:
         ce:a9:37:21:83:21:e9:e3:85:5a:a2:c9:db:39:dc:0f:56:5b:
         75:d8:95:98:00:6e:43:1e:48:7d:0b:5a:bd:e7:4f:06:bb:6c:
         53:c1:37:cb:42:13:4f:9d:ee:a6:fd:08:bc:3c:57:07:4d:2b:
         8b:8e:2b:87:93:f8:bb:3e:63:ae:46:6f:3f:6b:c3:2c:da:85:
         b9:14:89:27:3c:ff:59:aa:86:5d:46:38:73:f7:2c:e5:eb:8c:
         7f:54:a5:92:c4:9d:d5:a5:7f:84:53:81:e9:70:c2:d4:fa:4b:
         17:84:b5:ef:ff:64:9e:27:30:34:ae:c5:40:a4:c7:59:7e:c4:
         fd:5a:74:64:f7:9a:46:18:88:d8:2e:ef:c8:94:40:d0:98:fb:
         e9:6f:c9:6a:e3:0d:2d:a7:dc:d8:28:bc:19:91:1e:8a:09:84:
         80:d8:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:40:09 2024 by rpki-client on console-ams.rpki-client.org