Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File:                     8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier:          dWvjFY41bfysElnbvkbjB/tWeWKPmDbA3uAnnyHntJ8=
Subject key identifier:   90:40:9D:BE:EC:69:8F:F1:B4:E0:0E:E1:0F:0C:EE:F6:0E:1D:90:C0
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer:       /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial:       018FB4FDADD6F1E31FA46BAEB7EB8C472A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number:          1191
Signing time:             Sun 26 May 2024 13:01:14 +0000
Manifest this update:     Sun 26 May 2024 13:01:14 +0000
Manifest next update:     Mon 27 May 2024 13:01:14 +0000
Files and hashes:         1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: yf7jnDesynxGVKl6/9udEsLjCJUoVaFyuE6PAXLIqaw=)
                          2: DUQSx04274WpRndnyarrff3nGEQ.roa (hash: 9s8U7DT0n9exf09vHF90VqhCURYAzKitXIwJmWcORM0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:fd:ad:d6:f1:e3:1f:a4:6b:ae:b7:eb:8c:47:2a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
        Validity
            Not Before: May 26 13:01:14 2024 GMT
            Not After : May 27 13:01:14 2024 GMT
        Subject: CN=90409dbeec698ff1b4e00ee10f0ceef60e1d90c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:e8:d9:7d:8c:90:3f:ae:f5:97:59:96:44:
                    20:e2:f1:3c:02:c3:bc:50:ad:ff:d0:ed:3b:79:87:
                    cc:65:c1:3e:b3:ce:0f:12:26:1f:67:8f:e0:1b:09:
                    e8:b9:5d:a2:25:a0:34:d4:0f:5a:6c:5e:4b:63:c8:
                    93:8c:c9:31:92:d4:42:6d:31:b0:04:c2:8c:a5:b1:
                    a2:c5:78:21:ce:bc:15:de:23:be:25:6a:af:3f:d2:
                    71:a5:28:1a:26:84:68:42:d1:4f:b2:43:ae:8a:2d:
                    70:3f:fd:ca:90:d6:62:1c:37:29:db:76:14:82:b3:
                    00:ed:57:32:48:dc:90:84:d5:df:c6:28:54:98:bd:
                    6c:e5:bc:5d:49:34:53:48:73:5a:25:10:10:aa:98:
                    f6:fc:d3:63:e8:a8:b5:16:c4:61:04:0c:c7:50:8f:
                    2c:c5:f2:ab:05:ac:2a:6e:80:cb:f0:41:ec:f3:d1:
                    7a:05:3f:08:36:dd:3c:d2:be:6a:92:d2:7b:b5:c1:
                    f5:0a:9d:12:bf:f7:97:26:f9:5e:03:7d:19:b2:3c:
                    35:56:91:eb:5b:e3:ad:d1:3b:0a:f4:83:ca:43:e5:
                    6d:40:e3:5d:12:e4:62:2a:37:e1:b9:25:bf:7a:99:
                    b5:72:72:52:bd:5a:a3:3e:42:84:7c:e5:21:d6:6d:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:40:9D:BE:EC:69:8F:F1:B4:E0:0E:E1:0F:0C:EE:F6:0E:1D:90:C0
            X509v3 Authority Key Identifier:
                keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:0b:06:3c:b3:4d:48:51:ef:97:1b:8f:25:a0:d8:5b:76:
         9b:0c:29:48:86:a7:47:25:85:8f:cf:de:0f:f4:58:d6:de:3f:
         12:9e:4e:9f:7a:27:35:61:9e:cb:82:04:56:05:3c:90:08:9d:
         47:86:86:59:3b:ec:1f:6d:01:6c:e6:9d:1b:19:e6:47:f2:19:
         42:86:1f:75:ac:31:1c:08:73:76:91:19:72:7d:c2:71:2b:f5:
         cd:4b:db:d7:0d:b2:b9:2b:42:23:2d:ab:25:fb:04:af:bd:21:
         23:02:ee:ce:b9:90:85:87:35:b1:fc:f3:a6:5c:3c:5c:93:f1:
         14:93:0b:16:7a:64:9e:67:09:a5:4e:2d:c6:89:79:46:0b:25:
         76:aa:fb:43:f1:d6:e9:ff:4d:4a:11:9c:74:7c:5e:94:f7:bf:
         ad:f7:f0:71:3f:94:04:47:ac:15:90:75:d2:80:47:82:43:27:
         1c:24:54:54:c3:2f:1f:e1:02:26:1c:17:de:ce:a7:51:9f:bb:
         47:8c:ff:bc:be:67:4b:5e:3a:ec:a4:3f:ae:4c:cf:9c:51:64:
         c3:ad:33:d9:34:80:b2:9f:a0:48:79:70:5b:3f:e5:53:08:4b:
         f8:24:b6:01:ae:e0:8d:31:c4:f3:80:b0:48:e7:bb:d1:16:92:
         78:14:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 16:52:50 2024 by rpki-client on console-ams.rpki-client.org