Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File:                     rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier:          ROb8bC5lLscPYrIMjFhfFs4oNp0+ruViW7BTFEp7qKg=
Subject key identifier:   D2:18:5F:97:11:67:13:66:FE:BF:CB:42:BE:A9:13:94:9B:A4:66:E9
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer:       /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial:       018F8892733116D6FD01F36FFC4293A5BBF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number:          08AF
Signing time:             Fri 17 May 2024 22:00:50 +0000
Manifest this update:     Fri 17 May 2024 22:00:50 +0000
Manifest next update:     Sat 18 May 2024 22:00:50 +0000
Files and hashes:         1: fsrFatj_shkf7fWdiwIxkQCncrI.roa (hash: SzfThbZtnNpf4UDrjc0klqlhmt3ednwVUZ3XEt6kubQ=)
                          2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: xfQ7qA8pxsYFqjIaoNnd9SKpHT61z0/uAkZobbaBkfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:73:31:16:d6:fd:01:f3:6f:fc:42:93:a5:bb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
        Validity
            Not Before: May 17 22:00:50 2024 GMT
            Not After : May 18 22:00:50 2024 GMT
        Subject: CN=d2185f9711671366febfcb42bea913949ba466e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:df:27:50:27:dc:d6:d4:ac:65:b0:6b:a3:
                    23:cc:33:90:bc:4a:eb:ec:6a:b3:2d:16:4c:d7:ab:
                    53:80:bc:95:cc:ab:91:66:a2:d8:6a:b8:74:70:54:
                    b7:ef:57:d2:8b:8f:4d:1c:97:61:68:ee:9a:7c:23:
                    b3:51:90:9c:62:b9:70:29:51:84:62:3c:81:7d:dd:
                    d5:b0:e5:2d:4c:00:72:7d:8e:1c:a3:71:b9:9c:31:
                    49:ae:22:3e:23:1c:6a:f8:47:b1:85:83:4f:7c:89:
                    68:7c:65:54:f9:a5:6d:8c:07:a2:9e:3d:bf:67:e9:
                    31:2b:2c:c5:fa:e4:af:cc:76:20:73:42:cc:bd:c0:
                    bb:c9:38:e2:69:24:7b:30:19:0c:e5:8a:c6:48:20:
                    f2:26:ac:a2:a7:8a:96:3c:12:03:59:6a:5a:94:b5:
                    06:db:f5:97:92:4d:2d:43:e0:a6:ee:19:bc:6c:a5:
                    92:dc:cf:dd:16:68:88:9c:3e:ca:de:91:0e:a8:04:
                    b4:77:84:7e:0d:cb:43:8b:d1:56:f1:9a:8f:7f:fe:
                    2d:82:46:21:8e:c9:64:3f:89:7d:78:ce:c4:98:d6:
                    16:4f:71:a1:cc:b2:ab:65:3a:89:07:1d:a5:25:9f:
                    52:6f:ce:4b:a3:6d:be:f2:fa:56:99:22:a5:ba:df:
                    f4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:18:5F:97:11:67:13:66:FE:BF:CB:42:BE:A9:13:94:9B:A4:66:E9
            X509v3 Authority Key Identifier:
                keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f9:34:39:79:00:20:98:94:58:25:70:db:30:83:a5:bf:e4:
         fe:6d:01:b9:0d:c7:b3:a9:76:ab:0c:f5:cb:6f:cf:92:7e:b6:
         b6:89:54:e8:17:ec:52:db:80:bc:ca:3c:23:28:eb:dd:19:ee:
         81:6e:81:78:58:26:95:a4:6f:f5:f3:0a:aa:56:04:a5:bb:e3:
         49:e1:3c:2e:81:c8:ce:8e:ae:e3:8f:4e:f7:62:72:45:b9:f8:
         05:ad:e6:77:84:97:1d:75:d3:ab:d6:63:67:c7:4c:60:dd:1d:
         68:ee:4d:17:c4:1e:f1:29:64:00:70:a2:e1:76:9c:85:5b:49:
         c4:09:f4:47:24:0d:a7:2e:86:56:20:d0:8c:1b:f7:30:a8:21:
         8d:3e:04:98:6d:37:f6:92:a5:55:0f:0c:b2:22:27:0f:c4:36:
         03:4c:10:03:f8:65:5d:da:d1:89:99:b3:e8:ba:ee:2a:f8:6e:
         78:ea:ae:f9:51:94:d6:7a:51:bc:b8:bb:8b:14:55:0a:1d:d7:
         9b:23:48:3e:cd:54:d4:b1:c4:fb:c0:6e:3d:1a:e6:79:f7:c5:
         4e:2a:16:7a:19:e3:64:61:5e:d7:f6:ac:34:c5:cb:56:60:30:
         83:c5:da:d7:47:55:f0:bb:e2:bb:6d:54:3b:af:a5:00:e8:85:
         7e:76:51:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:49:43 2024 by rpki-client on console-ams.rpki-client.org