Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File:                     F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier:          VHhc3X6rWI/1HJ+wzY4Cxvf+NOpvgUMCStfBIygMXCY=
Subject key identifier:   A6:D2:BE:33:EF:5D:ED:29:A2:9D:51:70:8F:2B:66:7D:45:F9:2E:1B
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer:       /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial:       018F4456D334196450E2218DF9B7DA3A565F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number:          1156
Signing time:             Sat 04 May 2024 16:01:31 +0000
Manifest this update:     Sat 04 May 2024 16:01:31 +0000
Manifest next update:     Sun 05 May 2024 16:01:31 +0000
Files and hashes:         1: EOR5wbdvffS0QDTrtKyyc_7L60U.roa (hash: yME4Yd4AiE3fq1mC2LXPhVm6lo3Leop8wlP1T2gU4oA=)
                          2: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: B4N3ycMpSwLKTLDSPoUOnervH72sNPDXbShKwCPdWCI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:56:d3:34:19:64:50:e2:21:8d:f9:b7:da:3a:56:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
        Validity
            Not Before: May  4 16:01:31 2024 GMT
            Not After : May  5 16:01:31 2024 GMT
        Subject: CN=a6d2be33ef5ded29a29d51708f2b667d45f92e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:c0:2f:39:3d:22:fa:22:15:29:b2:e8:fe:
                    b6:d8:76:4d:c2:51:6c:37:4e:1a:6a:e3:6b:99:f6:
                    60:64:f7:c1:3f:ce:af:d8:96:37:f8:ff:5a:53:69:
                    7f:78:5f:a5:7d:0d:f2:35:98:03:10:66:88:62:a1:
                    69:e3:86:4a:bf:f5:f7:62:25:6f:94:ad:db:fd:30:
                    25:87:4c:b6:15:32:26:8c:b8:db:86:74:ab:12:3c:
                    e2:a6:aa:26:1f:a4:00:05:9f:7e:b1:48:9f:65:44:
                    d2:d2:d4:ce:35:79:be:fd:a8:f1:46:1c:5b:cf:2c:
                    51:36:7e:56:d8:db:bf:71:ee:af:ad:7f:19:27:28:
                    6a:91:30:ba:50:3e:22:cc:fd:ee:84:65:00:74:b0:
                    2c:a0:02:ab:a9:3a:1f:e2:27:ee:96:29:3b:bd:b7:
                    19:f1:64:e7:aa:d0:41:bf:a2:05:8b:a3:2e:66:18:
                    31:6a:8f:51:88:80:b4:58:3b:d7:e1:52:db:e6:64:
                    84:fd:a6:83:09:34:ed:44:52:5e:f1:8b:5c:bc:e7:
                    e4:96:bc:dc:5e:75:4d:1b:06:18:46:83:1f:83:61:
                    e6:dd:ce:f7:f0:26:c0:39:e5:f1:d5:c9:68:86:59:
                    a5:4e:00:3a:87:e5:64:05:82:52:a7:0c:f6:56:c2:
                    aa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D2:BE:33:EF:5D:ED:29:A2:9D:51:70:8F:2B:66:7D:45:F9:2E:1B
            X509v3 Authority Key Identifier:
                keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d8:eb:91:02:42:af:fb:0a:05:dc:20:c1:3d:9d:10:01:f2:
         82:b5:82:ff:f6:68:0a:cf:4c:99:28:6b:12:6a:13:9c:df:9c:
         c9:49:68:8d:ad:53:1c:c7:a1:f6:2c:5d:cd:cb:da:9a:c6:f5:
         db:0a:0b:a6:ec:41:79:fe:d8:e2:85:66:4b:de:11:18:40:8c:
         24:c7:ae:d9:24:95:1f:0e:52:49:08:77:af:ae:86:23:dc:70:
         51:3e:82:0f:aa:af:6b:43:d4:96:d7:07:ee:df:15:40:93:2e:
         b4:b1:6e:e3:7b:f5:ba:cd:4f:63:51:8d:94:10:23:40:61:85:
         8e:4b:4a:6a:bd:ad:e5:a2:42:3b:1c:78:c1:59:04:6c:e5:38:
         c2:b1:b7:5b:cc:aa:38:7d:bf:e6:3b:bd:91:66:fa:08:f3:2c:
         58:c1:b3:09:e9:60:b9:5c:32:25:b9:b4:5a:dd:58:6a:e0:14:
         14:31:08:89:fa:75:c6:16:f6:76:69:10:6f:bc:0f:48:f2:6e:
         3c:6a:2a:c5:9d:8e:8f:e4:a9:84:b8:e7:33:73:7c:bc:fd:b3:
         18:2c:f8:b8:2f:52:a7:72:01:02:32:32:c1:12:b9:7f:a1:13:
         71:f1:9a:f3:10:26:d0:59:6e:69:39:71:a3:59:32:e9:8f:df:
         a8:d2:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:39:33 2024 by rpki-client on console-fra.rpki-client.org