Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File:                     cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier:          4+ycITipd+TXrOwqsBMPrejVWpOzGIRcoNkpm2mY0T0=
Subject key identifier:   E5:6D:CF:78:D0:14:CD:A5:C7:E7:BF:76:C4:FD:B6:E3:95:85:64:8E
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer:       /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial:       018F8748744E0E69AD78475E72E345A51C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number:          1109
Signing time:             Fri 17 May 2024 16:00:23 +0000
Manifest this update:     Fri 17 May 2024 16:00:23 +0000
Manifest next update:     Sat 18 May 2024 16:00:23 +0000
Files and hashes:         1: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: yB/7KCxBBKOIH2bfh+q+agOFOs0N+XVeLvYZR+T+o7o=)
                          2: gVFQC3-PiAgHdIjsGi9mlmICzRY.roa (hash: knWqGtTk/fZsHddDpCscVW8GShL9cKgPegRItnHJuTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:74:4e:0e:69:ad:78:47:5e:72:e3:45:a5:1c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
        Validity
            Not Before: May 17 16:00:23 2024 GMT
            Not After : May 18 16:00:23 2024 GMT
        Subject: CN=e56dcf78d014cda5c7e7bf76c4fdb6e39585648e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:4d:22:d1:77:af:7f:a3:ab:34:15:23:01:
                    42:83:ca:b1:75:ed:32:a8:c1:44:78:d3:93:fa:54:
                    29:92:40:1b:b0:44:6e:d7:86:cc:90:86:ef:cf:5d:
                    0b:1b:cd:57:b6:e0:4b:fb:8e:ee:75:5e:ad:1d:ef:
                    c8:24:44:81:d9:ea:2f:d9:4c:e0:69:df:57:7c:d0:
                    d7:f8:79:50:72:e5:73:8f:23:28:d1:6e:02:68:89:
                    2c:0e:07:84:25:c4:11:96:96:f2:5e:85:ea:43:02:
                    b2:f5:e0:ee:90:17:96:42:91:0a:cc:13:40:45:4c:
                    a9:ec:a1:2f:b9:62:f6:a4:c0:1d:6f:50:92:bb:d4:
                    f4:c1:83:7a:57:b0:f3:12:60:84:97:66:7e:b4:6a:
                    74:e0:ed:f7:5f:63:25:6c:c6:0f:4d:f6:46:c4:53:
                    a5:2f:da:7e:90:a8:38:4c:0c:43:53:90:5c:a9:c4:
                    33:68:62:f4:a8:ee:b5:2a:f4:dd:e0:4b:29:e4:50:
                    a6:44:17:8c:1a:61:b4:d8:14:1c:99:95:c2:0d:e5:
                    da:31:02:c0:c0:58:28:41:dd:af:a5:bb:33:96:92:
                    fd:20:7f:03:3f:2c:2d:8b:97:12:68:53:ec:b6:42:
                    94:93:05:85:f9:12:05:1f:a1:0d:6e:53:f6:a5:e1:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:CF:78:D0:14:CD:A5:C7:E7:BF:76:C4:FD:B6:E3:95:85:64:8E
            X509v3 Authority Key Identifier:
                keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4e:73:f7:4d:63:4b:80:61:6c:4b:e3:5c:c5:25:0b:90:3b:
         74:b4:0b:e1:e6:cd:fb:a3:d6:ff:d0:1e:c5:9b:10:12:45:a2:
         97:42:c6:a1:eb:ce:68:af:a7:4b:9e:69:b4:ba:7d:32:23:0d:
         6a:ba:e8:36:c4:9e:6c:92:f3:1c:20:bf:15:86:d3:ef:1e:74:
         b5:a8:be:d8:ef:0b:f6:07:61:81:4a:86:78:9e:02:a8:53:d5:
         9b:3e:5d:e9:72:89:1f:d1:10:90:f6:8e:e2:66:aa:75:6f:96:
         c7:38:eb:29:3c:f0:95:2b:b8:f9:c5:4e:67:29:e1:9b:51:83:
         a2:74:01:3c:35:2f:41:49:74:0c:85:c1:0d:b0:0a:c7:e6:be:
         08:bc:1f:3c:5d:0d:69:77:95:58:d4:39:14:c9:55:7c:c4:4a:
         ad:98:b5:28:21:7e:8f:49:f4:87:50:d4:22:c9:fe:06:64:88:
         1c:dc:d9:8f:39:c9:f5:3a:7a:23:e0:fa:48:8c:3f:5f:cd:8e:
         c3:0f:99:e1:f0:c4:ba:10:e5:d5:be:57:c5:36:5e:df:d1:56:
         ca:25:71:f4:82:1a:1a:da:f1:44:93:5a:54:b3:46:53:66:d1:
         99:ee:24:63:06:1d:8a:f3:7a:31:f2:bc:13:4a:c9:7d:b0:5b:
         bf:1b:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:41 2024 by rpki-client on console-ams.rpki-client.org