Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File:                     scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier:          +UujjXe7J1AdWJDM+U+nngR3HtkWi2hpFDADYtZxSwM=
Subject key identifier:   C0:BE:56:79:04:AA:3E:4A:71:97:6D:CB:9B:2D:FE:B6:96:2E:BC:A5
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer:       /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial:       018F882474F14C68698511B859688350D6B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number:          05DB
Signing time:             Fri 17 May 2024 20:00:41 +0000
Manifest this update:     Fri 17 May 2024 20:00:41 +0000
Manifest next update:     Sat 18 May 2024 20:00:41 +0000
Files and hashes:         1: HXoM4xalBUt5bYjQ1IT6mEF_FuA.roa (hash: ZBxcK/NAH27/pFXs1PmAjs1auOUvM34WmlW092OvVwY=)
                          2: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: BmBi7oaz1KPtdPM9sGNdoYn2kNvJHqXlQQBh2HEAEiI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:74:f1:4c:68:69:85:11:b8:59:68:83:50:d6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
        Validity
            Not Before: May 17 20:00:41 2024 GMT
            Not After : May 18 20:00:41 2024 GMT
        Subject: CN=c0be567904aa3e4a71976dcb9b2dfeb6962ebca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:b7:cb:75:bb:24:b8:bf:c3:f0:f2:55:ec:
                    2c:68:87:8b:17:84:b5:b6:1c:d6:80:ca:01:51:73:
                    79:b0:15:44:16:64:6d:5e:f6:e3:f3:3d:74:b7:15:
                    a5:8a:71:f1:b5:b3:dc:f1:d0:ad:6f:ee:2b:a8:3b:
                    1b:6f:a4:04:ad:34:b7:ae:47:7d:9b:78:1f:76:b4:
                    69:df:6c:8f:4e:0c:97:b4:a4:4d:98:d1:ef:05:f5:
                    78:8c:5a:b7:bd:ce:e9:9d:d7:42:c7:ad:d9:c2:a5:
                    ed:01:3e:7e:74:d5:f9:52:5f:0d:a5:28:ce:57:c2:
                    4a:ab:91:ef:f1:af:11:8f:7d:15:7a:10:02:da:6d:
                    28:9b:d8:a3:0d:9f:4b:e8:f5:19:32:07:1c:a0:cd:
                    7e:d1:12:d9:f8:cd:fe:f3:64:51:07:4b:dd:5f:b1:
                    10:52:86:21:46:b9:01:8f:1e:e1:51:94:82:84:ff:
                    bd:c5:be:1f:db:0e:ca:53:99:eb:5b:08:b5:c9:20:
                    65:66:34:dc:2d:9a:3b:27:51:b7:d6:e9:15:65:30:
                    f1:4d:61:99:d0:dc:da:bf:a4:36:b8:45:00:68:b7:
                    f8:8c:19:a7:67:d9:fc:c1:9d:bf:b8:68:85:21:bd:
                    3f:6b:85:e5:32:b1:24:d6:fe:69:82:ab:f5:24:bf:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BE:56:79:04:AA:3E:4A:71:97:6D:CB:9B:2D:FE:B6:96:2E:BC:A5
            X509v3 Authority Key Identifier:
                keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d0:e3:7b:23:29:e8:c4:c8:93:de:1a:6d:a6:5f:d8:7c:d2:
         52:33:b0:cf:f0:fa:74:c3:fc:a7:bb:b3:a7:76:25:d1:59:45:
         7a:e3:32:43:90:af:8b:0e:c3:2a:ae:66:c9:06:80:53:a4:48:
         8a:55:74:94:55:11:5e:35:3b:a5:98:e9:6a:fe:bb:7b:d0:03:
         87:ca:06:90:62:49:66:96:4e:41:d9:dc:37:a7:41:03:e0:51:
         ae:f1:21:7e:39:f9:64:8f:e9:18:c8:26:46:ea:af:16:0e:96:
         2e:31:f0:97:20:87:6f:a2:a0:44:ec:1d:de:7f:66:83:53:c3:
         ee:de:29:55:36:60:01:98:85:36:8a:11:a6:69:45:01:7c:cf:
         56:06:ad:32:a5:d0:98:e4:dc:30:74:5d:ec:f3:81:9b:91:77:
         4e:29:84:28:83:4e:34:b1:b0:63:f0:1a:26:da:92:9d:91:b4:
         ed:db:60:e7:62:26:a8:b1:e4:0c:4e:a7:13:29:af:bc:c3:e3:
         ca:69:e7:75:59:b2:63:32:70:35:a4:5f:71:07:d4:f0:c8:7c:
         b1:2b:9e:8e:62:fb:29:f7:dc:19:9d:7f:cf:0f:00:bc:ac:60:
         3a:bf:05:33:ec:55:fc:42:8c:4f:c0:a0:66:bf:92:a7:33:53:
         e2:1c:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:02:16 2024 by rpki-client on console-fra.rpki-client.org