Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File:                     AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier:          9eTxUosUPIB6zmv9cmobbJC4ef6TrHyz9s9KvHZeAtM=
Subject key identifier:   F1:FB:58:54:5C:29:06:54:22:2E:1F:EB:64:FD:8B:A3:1A:78:7E:35
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer:       /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial:       018F7BB350EBE18801A1C0D4A7FCF2BA16F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number:          0816
Signing time:             Wed 15 May 2024 10:01:40 +0000
Manifest this update:     Wed 15 May 2024 10:01:40 +0000
Manifest next update:     Thu 16 May 2024 10:01:40 +0000
Files and hashes:         1: 5vckYuVMS9fcxZZbOnN7zrEqeso.roa (hash: seghFKT4JqYd6GrpikQhtR8p3SDxHp4YMz/BLJGiKgM=)
                          2: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: yZupqcPuBBu8S6DLtso09ThtuCekYfpnxtjEDaiT0Xo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 10:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:b3:50:eb:e1:88:01:a1:c0:d4:a7:fc:f2:ba:16:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
        Validity
            Not Before: May 15 10:01:40 2024 GMT
            Not After : May 16 10:01:40 2024 GMT
        Subject: CN=f1fb58545c290654222e1feb64fd8ba31a787e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:1a:ca:af:27:f4:96:7d:43:26:2e:63:bb:
                    03:de:95:4e:4d:90:f1:6e:6c:ba:d3:a8:c0:89:86:
                    7d:6b:62:46:b1:81:5c:6f:71:da:c7:a5:4b:5a:f9:
                    36:7e:b0:89:5a:1d:96:d7:1a:f4:fb:c6:8e:7b:86:
                    98:c5:b8:c4:cf:63:7c:2c:da:c1:ba:40:fc:b4:bd:
                    3d:3b:d5:b3:58:58:fc:94:07:d0:eb:23:44:af:47:
                    0b:ec:8e:09:ec:af:33:a3:82:d4:18:c0:bb:fc:76:
                    15:82:82:6f:ba:c7:44:38:47:05:8c:04:63:ad:31:
                    e3:d8:24:9d:82:d6:d0:a1:00:e9:a2:24:3b:9d:cd:
                    a1:ca:1c:1c:4a:39:aa:fc:ae:63:f6:ab:26:80:ac:
                    ec:06:45:96:ca:8d:a6:0e:bf:da:0f:3a:64:e9:a3:
                    16:f8:54:f4:ca:03:05:8f:04:70:70:26:36:a8:d8:
                    b8:66:72:4c:64:d6:c8:9c:43:93:dd:d3:0a:1d:d0:
                    1b:eb:1f:86:fc:9e:4d:63:ab:49:62:d8:78:27:5b:
                    6b:d1:ea:73:fe:9e:87:16:e3:30:89:5f:a3:50:3e:
                    02:0b:86:a5:78:72:4d:99:35:d0:9d:a2:26:71:29:
                    0d:1f:7a:48:79:6c:76:6a:17:32:59:0f:af:f6:14:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:58:54:5C:29:06:54:22:2E:1F:EB:64:FD:8B:A3:1A:78:7E:35
            X509v3 Authority Key Identifier:
                keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5a:60:c0:db:f1:66:88:31:55:44:d0:16:78:b7:8b:8c:c4:
         a1:37:f6:0e:71:c7:c2:05:98:42:a3:2f:e2:b9:01:e2:77:18:
         54:95:12:f2:d9:c2:14:fc:f5:07:49:7e:c9:8e:13:7f:65:a5:
         61:ac:ac:44:5a:7f:a0:8c:0d:38:8e:67:19:33:06:99:6d:14:
         98:6d:4a:fe:65:c2:c8:e7:2e:dd:bc:7e:7e:69:60:0f:90:65:
         23:39:f6:67:ee:d6:0e:d7:d8:f4:05:01:8c:1d:b9:88:97:ca:
         de:d5:cc:20:0a:44:82:13:17:20:a0:6b:15:3b:f9:07:57:fe:
         66:78:60:e8:e9:7b:ca:46:a6:f0:63:cc:87:06:aa:dd:bd:9b:
         c2:81:91:59:87:41:7c:b4:aa:3d:13:16:4c:ed:6b:7c:c8:47:
         75:e8:41:c8:f6:75:bf:39:14:1f:96:1c:1c:1d:19:e5:d8:86:
         c7:bd:20:66:11:e8:ef:ab:97:94:a8:f8:f8:45:06:a3:13:74:
         ee:36:c2:4a:64:28:d8:c1:e4:f9:82:93:10:40:a9:61:38:0b:
         bf:03:84:ca:97:90:e1:65:d0:92:9d:1d:fa:01:2c:a0:c3:62:
         e4:c4:9a:7e:16:a8:9e:9f:fe:a7:ce:2c:33:8c:9a:97:83:32:
         15:d0:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:03:24 2024 by rpki-client on console-ams.rpki-client.org