Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File:                     f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier:          I2221uEpNtC50kHzd6dqGdpWHzNg2i6hxz8hw5G/d3g=
Subject key identifier:   F2:92:F5:FC:0C:F5:76:8D:B7:ED:AF:4F:79:BE:33:EC:8D:10:4B:5D
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer:       /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial:       018F87B689F52E558769F482F3D42E7EA399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number:          052B
Signing time:             Fri 17 May 2024 18:00:38 +0000
Manifest this update:     Fri 17 May 2024 18:00:38 +0000
Manifest next update:     Sat 18 May 2024 18:00:38 +0000
Files and hashes:         1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: t5S5PSj4umiNNIee/fDRynmA47SkVN0THmZtAyrXMj0=)
                          2: u9Y8DlzF-1eXoDqhm7yk23JMY80.roa (hash: lMCy5JxrxYvMWGK3TlzmNZPtgtpH2pejBh/cErJOQIM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:89:f5:2e:55:87:69:f4:82:f3:d4:2e:7e:a3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
        Validity
            Not Before: May 17 18:00:38 2024 GMT
            Not After : May 18 18:00:38 2024 GMT
        Subject: CN=f292f5fc0cf5768db7edaf4f79be33ec8d104b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:77:47:87:1e:69:0f:97:d0:02:3d:07:52:af:
                    93:d4:41:34:6f:64:f4:1e:00:d8:ee:d7:e6:f2:b7:
                    d8:8d:00:3a:9e:84:e4:86:69:ee:9c:fe:ce:b6:8e:
                    b2:36:c9:9f:9c:db:9c:a4:5a:63:5e:66:5d:0d:27:
                    32:33:a8:3f:8d:68:8d:89:14:09:4e:e4:d0:11:57:
                    e4:78:8e:b9:00:50:65:ad:83:57:bc:c3:f2:fc:e4:
                    75:a4:9d:36:56:03:8a:e7:d0:4e:3a:c0:e0:ca:3a:
                    ce:af:2b:da:f2:b6:93:8f:f2:c5:d9:bd:70:1e:64:
                    0d:f0:01:da:b2:90:6c:66:f9:bf:dc:ab:63:b7:b1:
                    4e:40:07:aa:85:1b:f8:56:9e:15:c9:29:11:14:d5:
                    74:9c:07:f4:ab:55:fb:c3:19:1d:5a:6d:d0:6e:2b:
                    eb:4a:7a:5c:c9:66:69:7e:3f:f9:c0:35:4b:cd:36:
                    fe:9d:d7:ff:3f:d7:21:fe:ed:0c:88:c2:59:a7:ca:
                    f6:c4:86:b2:82:b3:c1:47:ac:66:6e:4b:b0:1d:8c:
                    55:87:c5:a2:1c:10:29:bf:0d:ed:dd:d5:30:4e:65:
                    a7:c8:e5:98:3f:04:22:64:10:39:0a:6b:8c:43:92:
                    ff:a0:04:8e:d2:bd:fd:54:31:e6:38:3f:56:ea:03:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:92:F5:FC:0C:F5:76:8D:B7:ED:AF:4F:79:BE:33:EC:8D:10:4B:5D
            X509v3 Authority Key Identifier:
                keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:26:8d:cc:7b:38:5f:f0:ed:17:fd:6a:c1:65:ff:45:7a:
         92:7e:e5:78:31:4a:1a:32:81:e9:1c:6c:d7:c5:64:cc:64:aa:
         e1:60:e6:50:63:77:28:1d:c8:b1:86:86:3c:86:ea:8a:0f:15:
         af:84:bd:2d:c6:fe:64:96:80:e0:f6:8f:69:a5:71:d5:b2:05:
         68:db:63:74:ef:a1:95:ad:8c:5f:d6:08:74:ca:98:75:a7:51:
         60:72:ca:fb:20:22:77:fe:0d:a2:66:2b:05:65:de:60:5d:08:
         31:ec:98:e2:9c:4f:7e:5a:84:4a:19:ba:c5:18:2a:2e:d7:62:
         9d:22:d6:be:63:0d:6d:37:03:89:d2:63:21:27:03:f7:6d:f5:
         28:1e:f2:f2:02:cd:81:d6:71:2b:5c:fd:63:8e:12:a9:7d:b2:
         f7:c6:7d:ec:3e:85:58:99:23:74:c8:d4:e9:23:9d:fc:a5:7f:
         e9:e1:f6:80:02:ef:28:81:51:38:5b:ff:af:8e:f1:dd:6a:93:
         cf:e5:d0:b2:55:06:38:9a:e1:a2:be:41:4b:c7:7d:6d:0a:8a:
         21:d7:b4:ce:ad:06:c8:a5:e7:e7:7a:8b:66:7e:e8:12:b5:c2:
         77:05:62:44:b0:de:bd:4a:9a:84:ba:9b:29:6c:52:bd:d1:dc:
         3f:67:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:48 2024 by rpki-client on console-ams.rpki-client.org