Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          eZxpDdlr+gMGaYhxTAjUC/0KLizE5v4BcPL6x/vaFPQ=
Subject key identifier:   6F:20:C7:04:D0:6A:24:0A:29:2A:8E:50:DC:98:23:3F:7F:DF:EF:D9
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       018F21251F3DB2774B63F5DABF1440918340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          0D26
Signing time:             Sat 27 Apr 2024 20:00:31 +0000
Manifest this update:     Sat 27 Apr 2024 20:00:31 +0000
Manifest next update:     Sun 28 Apr 2024 20:00:31 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: TJirYvtMipVMFVN+AGu/qQ17vAFRp04NY4vdq9U3QdI=)
                          2: 7Rytr_jA6cU8NQ1dBRqi099mGgg.roa (hash: +i6RfAOwXJUCM1W2tdkE7Nw2r4b/ymgZfsAZ9ZTXHAE=)
                          3: AfU2uS3h9UDjkKbPpMX5hpbTJsA.roa (hash: CtyhCWMl97xuQy8OsFVLDw1KCa1dSsC9DBa6TwFuaJI=)
                          4: FqKnrHVeIXAnHsdFK9T_jMJxG8Y.roa (hash: K8v3MSIYzdf5oD4S09F3HS46mj19ycfDyFc1aXn0+oY=)
                          5: IsR6AxRNJVbai8dQvQEhi2WQgyk.roa (hash: i318CLfx+k865BL4D7cjGQFKhTmzqD1b6rRbxR48gK4=)
                          6: LmWWGay_oFl1nUPf8GOXCrqRgvU.roa (hash: fwak33amn6UD06wWzc0cTixzdeFZ4q95qNxUu21yOo4=)
                          7: RSiB_nvdKk87_Oz46IfDJnnZsqE.roa (hash: Uiesm9FZbLewlZ8TYeu2vSHMXAdS8DSnvAjB6dNvL8A=)
                          8: l3E7h3ugtYdRxl3WOTKcZcRlxlQ.roa (hash: ZLQ7w5dUnXkuoc7bFtZk0r6qyUA+k6k5qMKbOpF0gjo=)
                          9: ooyNYlIeZKLDOH5oNk2p6urqOmY.roa (hash: 0CtXoyqm/QaPXzgmtLEnRpLTixvVswu+/PWBznz8pNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 15:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:25:1f:3d:b2:77:4b:63:f5:da:bf:14:40:91:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Apr 27 20:00:31 2024 GMT
            Not After : Apr 28 20:00:31 2024 GMT
        Subject: CN=6f20c704d06a240a292a8e50dc98233f7fdfefd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:35:37:57:35:ac:f6:cb:ae:9d:51:34:56:
                    0a:b2:de:a4:08:2f:63:7d:aa:56:34:da:8e:13:d7:
                    c8:3f:6f:a0:8c:f7:dd:e5:0c:1d:d9:e9:9a:3a:73:
                    03:e9:7e:66:f8:de:58:4f:b1:2e:e4:55:46:3a:97:
                    22:30:a0:66:c5:00:62:2d:61:eb:ea:6e:ad:32:47:
                    8e:c7:1a:2b:1d:2f:b5:29:1b:8d:c5:0b:8c:7c:8d:
                    71:96:3e:7d:72:a1:4c:e9:d9:64:3b:f7:60:22:02:
                    d5:6e:fe:f1:d9:02:f2:2a:e7:fd:6a:00:74:0a:7f:
                    95:e6:11:75:db:14:98:3f:ea:3f:ef:a6:9c:82:a3:
                    c5:23:c5:08:f1:53:08:7c:cf:27:15:d8:20:8f:de:
                    d2:fb:64:1e:91:3a:6e:01:35:3e:73:b3:29:cf:73:
                    d2:b8:cf:a1:79:e5:37:d7:84:02:7a:7a:36:6a:89:
                    76:bf:fd:59:95:46:36:56:c1:f6:70:b0:92:00:80:
                    2b:b7:ab:9a:ce:20:1e:ab:54:9a:5d:e8:58:14:7a:
                    f7:1e:37:95:d7:f5:cc:a4:47:1d:fe:e3:83:d3:dd:
                    3c:00:7d:71:ce:3b:64:03:50:f9:5f:66:41:f0:95:
                    d3:d2:6d:28:74:a6:35:1d:24:0f:cc:bb:ba:d6:c3:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:20:C7:04:D0:6A:24:0A:29:2A:8E:50:DC:98:23:3F:7F:DF:EF:D9
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:7f:0f:16:06:d2:95:94:c9:3a:ce:0d:6e:1c:51:68:55:
         1a:d4:16:ac:e0:cf:40:f5:26:52:6b:bd:7e:bf:49:b4:ae:ce:
         84:7a:ac:33:fe:95:27:a4:4a:71:97:cf:18:ba:ce:20:96:67:
         df:8d:f2:72:ea:de:26:01:12:bf:f3:a9:e2:9d:a7:a4:77:b4:
         ab:9b:85:d6:9d:77:d4:25:4d:ec:6a:46:70:a6:a7:1c:6c:27:
         42:ff:b5:d2:22:7b:e6:59:e6:e2:82:71:fd:c1:b5:a6:ce:32:
         06:44:d0:4a:4d:14:fe:76:70:58:ec:74:6c:cd:54:3d:5e:3e:
         92:20:46:e1:ac:8d:37:62:a1:f5:33:fd:db:bb:90:08:b0:ce:
         84:dd:94:46:28:f9:c4:cc:0d:a2:1f:8d:ea:4a:8e:fe:0a:91:
         6c:32:97:b5:88:6f:d5:c9:9a:62:6a:7b:9d:b7:b0:3e:7d:91:
         37:e4:f7:fe:0b:54:72:fb:9c:c0:ef:1d:f3:bb:9e:8e:ad:51:
         67:7e:ba:09:ae:a5:d3:bc:4e:85:dc:ac:56:e5:8f:9b:86:f2:
         0f:2c:f9:1c:c9:ef:ed:7e:87:a9:97:13:42:b2:cd:e0:69:08:
         18:96:2f:d9:20:c1:d2:3c:46:57:10:28:f8:70:af:14:7c:b7:
         68:8a:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:48:25 2024 by rpki-client on console-ams.rpki-client.org