Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4cd064-5e46-4a3f-83c5-86bcb7f59d98/1/i8thVPnIk-CkC4evoKL6J_zPMes.mft
File:                     i8thVPnIk-CkC4evoKL6J_zPMes.mft (raw, json)
Hash identifier:          C0kb23hkSG0pq9vufGLsIoUJSAm4Nq2HVG1wB7vNeWU=
Subject key identifier:   A4:FB:E2:33:02:5E:D6:7C:81:9A:61:E2:B9:75:CA:F7:A3:DB:E4:23
Authority key identifier: 8B:CB:61:54:F9:C8:93:E0:A4:0B:87:AF:A0:A2:FA:27:FC:CF:31:EB
Certificate issuer:       /CN=8bcb6154f9c893e0a40b87afa0a2fa27fccf31eb
Certificate serial:       018F6B64098F887B81F74F19BCAA6B9DE765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8thVPnIk-CkC4evoKL6J_zPMes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4cd064-5e46-4a3f-83c5-86bcb7f59d98/1/i8thVPnIk-CkC4evoKL6J_zPMes.mft
Manifest number:          0992
Signing time:             Sun 12 May 2024 06:01:09 +0000
Manifest this update:     Sun 12 May 2024 06:01:09 +0000
Manifest next update:     Mon 13 May 2024 06:01:09 +0000
Files and hashes:         1: PnTtMzNTA_oD_5Uhii64r00AXZI.roa (hash: IlsNGCt+dGi/40W2tSx0HIMPOxDDE+DWjdcgDuVpXnQ=)
                          2: i8thVPnIk-CkC4evoKL6J_zPMes.crl (hash: WJgLpFf6H3jf98mYIGLgpSj8vQJKVItZ+IzYmmRYeqM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4cd064-5e46-4a3f-83c5-86bcb7f59d98/1/i8thVPnIk-CkC4evoKL6J_zPMes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4cd064-5e46-4a3f-83c5-86bcb7f59d98/1/i8thVPnIk-CkC4evoKL6J_zPMes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i8thVPnIk-CkC4evoKL6J_zPMes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6b:64:09:8f:88:7b:81:f7:4f:19:bc:aa:6b:9d:e7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bcb6154f9c893e0a40b87afa0a2fa27fccf31eb
        Validity
            Not Before: May 12 06:01:09 2024 GMT
            Not After : May 13 06:01:09 2024 GMT
        Subject: CN=a4fbe233025ed67c819a61e2b975caf7a3dbe423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:30:c9:d3:d0:cd:75:69:ec:9e:2f:02:62:
                    d9:eb:ce:e8:49:e9:f4:f1:2b:b7:4c:f1:de:c1:fa:
                    fa:83:c4:d6:b6:b1:8c:5e:5f:a8:b5:65:5f:e4:d8:
                    00:8b:3a:1f:7d:e5:de:83:57:87:a4:26:6d:c0:66:
                    49:55:43:5b:9e:7d:57:d0:5a:3c:ef:4e:9b:55:7c:
                    41:89:1d:a7:08:74:06:3f:d4:f9:a3:73:c7:99:97:
                    18:e6:37:47:8e:e7:05:2e:68:30:e9:59:f4:ff:2a:
                    8e:c5:c1:f4:e0:c4:ea:4c:b9:ea:12:4b:35:00:a7:
                    a9:cf:78:df:54:53:42:9a:10:6c:7d:5c:76:44:c8:
                    ba:ce:21:97:68:99:56:cc:f9:93:be:7f:bf:2d:4c:
                    9d:49:99:3a:43:be:eb:93:ca:61:a2:fb:e7:d7:f4:
                    ca:84:1e:a3:dd:f3:5d:ef:df:dc:c0:d0:9d:ee:4a:
                    a3:4c:40:8d:8d:22:18:ef:ea:35:12:58:67:0b:c4:
                    b4:84:9f:17:6a:4f:a9:f8:79:db:74:9d:c5:84:04:
                    66:16:1b:6e:18:51:7f:c3:12:dc:46:4e:26:71:63:
                    cc:59:ae:c5:fd:d2:da:19:b7:d1:7c:9b:2b:e7:7e:
                    c3:1d:dc:54:b0:08:e5:58:27:94:67:70:0a:55:64:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FB:E2:33:02:5E:D6:7C:81:9A:61:E2:B9:75:CA:F7:A3:DB:E4:23
            X509v3 Authority Key Identifier:
                keyid:8B:CB:61:54:F9:C8:93:E0:A4:0B:87:AF:A0:A2:FA:27:FC:CF:31:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8thVPnIk-CkC4evoKL6J_zPMes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4cd064-5e46-4a3f-83c5-86bcb7f59d98/1/i8thVPnIk-CkC4evoKL6J_zPMes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4cd064-5e46-4a3f-83c5-86bcb7f59d98/1/i8thVPnIk-CkC4evoKL6J_zPMes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:31:32:48:40:a7:47:3b:62:67:81:92:b7:b5:e1:31:b8:c6:
         aa:e4:5e:7d:e8:e5:c4:1e:a5:2d:71:82:79:1f:1e:38:15:5d:
         31:5e:a2:8e:a2:33:81:6f:61:f7:57:69:92:c2:44:5b:5e:07:
         4c:50:bc:dd:ed:f0:ba:47:ac:23:89:3e:22:90:b8:81:5e:15:
         3e:af:62:88:a7:a6:49:de:ac:6f:a3:32:3a:b8:8f:48:c5:27:
         91:01:ed:8b:06:c3:79:27:38:05:f8:93:34:e9:25:99:bc:b2:
         56:33:9b:e3:81:40:ac:da:57:61:f2:63:ee:1e:37:ea:e1:5b:
         66:70:2f:7e:3f:64:02:66:23:38:24:43:9d:c9:b8:da:5a:05:
         49:37:cd:d8:63:8c:45:03:fd:aa:af:71:d3:54:51:82:ae:ca:
         b1:c9:62:4d:03:ef:ac:ad:5b:86:67:7f:11:44:01:62:04:84:
         60:27:70:d9:fb:a7:fd:38:8e:9a:07:dd:77:b1:ba:80:f8:9c:
         75:b3:b3:01:a2:72:77:38:c3:61:c0:7b:26:3d:bd:21:c2:b1:
         dc:e1:44:13:f6:44:db:3c:d6:7a:ae:ba:bd:cd:e4:2c:ba:0b:
         d9:5a:cc:1f:3e:55:5e:3d:b9:54:d3:77:9c:7e:7d:0c:44:df:
         d6:ab:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 13:30:16 2024 by rpki-client on console-fra.rpki-client.org