Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
File:                     SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft (raw, json)
Hash identifier:          5L8gjAaHBbxasnXEGTGaigR0Mn6gShU5INe+pzeJhy0=
Subject key identifier:   8E:79:BC:4F:AD:D1:1B:7C:D2:AF:52:5F:BB:53:EF:DE:8F:5F:19:99
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Certificate issuer:       /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial:       018F866CBB1BA286013D30A6CA6DF5932FC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
Manifest number:          0A70
Signing time:             Fri 17 May 2024 12:00:23 +0000
Manifest this update:     Fri 17 May 2024 12:00:23 +0000
Manifest next update:     Sat 18 May 2024 12:00:23 +0000
Files and hashes:         1: NZtGTotXj9rRYop4oFcOLTWsNtU.roa (hash: 6o3WOILsF2IZzdO9hv4y9Gw4HnY6mzuf0d0Fvs4ZDes=)
                          2: SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl (hash: HUgBYkR0cf5t1+URq3qNgrhCD3CDp8QBfs7wCFkx+B4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:bb:1b:a2:86:01:3d:30:a6:ca:6d:f5:93:2f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
        Validity
            Not Before: May 17 12:00:23 2024 GMT
            Not After : May 18 12:00:23 2024 GMT
        Subject: CN=8e79bc4fadd11b7cd2af525fbb53efde8f5f1999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:ce:c5:3c:2e:6c:fc:1b:2a:34:0d:d7:a7:
                    22:43:6c:e0:f2:1a:e5:ba:40:19:78:74:d5:59:57:
                    a1:69:55:73:ca:c6:43:6f:8c:00:ad:18:54:b2:ef:
                    6b:fb:60:67:23:fd:5d:c5:8d:c9:d4:9b:a2:ee:e5:
                    aa:06:24:ee:b4:10:37:33:0b:19:12:aa:4a:c5:2c:
                    f8:70:42:cb:9c:19:ac:fc:7b:74:3a:76:f1:8d:eb:
                    03:a1:14:29:3b:c3:c1:33:01:92:17:71:1d:df:52:
                    88:0c:70:57:b4:d7:24:d9:3e:5c:fc:30:7b:5a:99:
                    7b:08:84:be:ed:5d:7b:28:34:68:e6:1d:5d:f3:18:
                    71:b3:b9:c8:77:1c:a7:8e:39:dd:83:d7:c7:22:fa:
                    9d:a2:83:5a:11:4c:9b:3e:12:12:0d:a4:70:cb:2d:
                    64:81:1c:d9:0b:99:53:21:0f:39:f2:2a:58:52:77:
                    a8:bf:99:f5:88:13:2d:13:b3:78:9f:f5:3f:d3:b2:
                    e5:76:5b:bc:6d:99:ce:8b:f3:dc:81:33:34:96:41:
                    7e:c4:b1:d6:5b:3b:ee:a9:f2:ef:dc:35:e2:ea:29:
                    0e:63:4a:5e:2b:4b:ef:5a:54:73:81:85:19:46:cf:
                    26:cb:4b:b1:85:5e:1e:63:30:06:34:45:b2:20:16:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:79:BC:4F:AD:D1:1B:7C:D2:AF:52:5F:BB:53:EF:DE:8F:5F:19:99
            X509v3 Authority Key Identifier:
                keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:d7:15:1b:ca:27:5c:ef:8e:13:8a:4e:02:f5:b1:cc:17:
         ce:86:a3:b1:6d:af:65:98:f6:1b:9a:da:dc:15:7d:ed:4f:58:
         e5:24:43:32:dc:07:7d:c5:d1:45:1b:da:f1:bb:8e:be:bd:36:
         3b:32:80:ce:9c:a4:bc:78:62:7f:ad:00:c4:24:b4:7d:b8:73:
         93:cb:08:3a:53:69:e4:d0:8e:b1:34:13:0a:17:78:0d:42:7a:
         99:c1:91:a8:6a:34:e8:4f:e1:9e:a9:be:9c:98:a4:b3:b7:2b:
         73:2e:b4:42:d8:aa:f9:99:ec:27:57:d6:55:64:37:62:65:e8:
         bf:ee:96:99:ce:fc:6d:25:21:bf:2b:01:d5:c2:02:21:ef:c9:
         6b:11:3e:f3:d9:6d:8b:7e:f7:2f:c4:a9:55:8c:da:03:34:ae:
         6d:38:53:e9:69:3d:e8:d8:86:49:e5:28:2e:34:3c:d2:9e:65:
         e1:5d:63:c9:ca:a0:4a:a4:ed:ec:a3:80:40:8b:c8:cd:a6:af:
         09:a9:cc:42:89:76:2b:8d:36:00:df:5d:fe:43:ae:cc:9e:d2:
         35:6a:03:63:de:9e:0d:85:89:6b:29:c1:f9:d7:27:17:ca:6f:
         ec:06:fd:36:de:36:b2:ba:4a:75:75:d2:67:7d:fd:f5:2e:97:
         f3:ed:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:25 2024 by rpki-client on console-ams.rpki-client.org