Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File:                     86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier:          4mAleuPRSabEdB5qdFlI56dpv+sVF2G7J+J2OhYIgNw=
Subject key identifier:   8B:C6:78:40:05:05:15:36:9D:50:EA:81:A8:9A:95:A3:13:34:E6:45
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer:       /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial:       018F497D25320B1A75B3911313FB4EDF7F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 16:01:29 +0000
Manifest this update:     Sun 05 May 2024 16:01:29 +0000
Manifest next update:     Mon 06 May 2024 16:01:29 +0000
Files and hashes:         1: 1UUi7RNxsKiwh6Wl81jrhYvrci4.roa (hash: UWEiWw0MPnfgjJadtpqsDI48pLOKqz6h27VmB2MTWaA=)
                          2: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: 9neofTDBeauoMus1NKT23YRKOL7aZpfj+u2gRKFZKZs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:7d:25:32:0b:1a:75:b3:91:13:13:fb:4e:df:7f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
        Validity
            Not Before: May  5 16:01:29 2024 GMT
            Not After : May  6 16:01:29 2024 GMT
        Subject: CN=8bc67840050515369d50ea81a89a95a31334e645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:03:08:aa:1c:38:22:ac:96:03:56:af:04:
                    39:8c:a3:2e:05:b3:99:e3:0c:a1:e5:2e:22:7b:fb:
                    a6:11:21:e1:49:7b:c0:9d:d8:36:e1:e3:48:8a:04:
                    a6:9e:92:98:b1:32:b0:93:54:4a:5d:10:6e:26:41:
                    1b:f0:ea:09:38:83:44:99:f8:9d:81:6c:52:c8:a1:
                    6e:45:da:02:35:25:6a:05:b8:23:f1:9f:54:73:23:
                    70:5e:29:fa:a7:27:fb:42:40:14:f2:34:d8:c5:6e:
                    3a:43:1f:16:ca:e8:c9:07:5d:ae:03:58:d5:7e:1b:
                    73:b8:28:13:d6:12:aa:16:3f:57:ff:51:ac:15:81:
                    79:7a:15:ea:69:f3:3f:5f:77:4f:8a:51:bd:37:04:
                    5d:00:b9:ac:6f:9e:06:9d:a5:20:e1:a7:23:ce:99:
                    01:c3:3a:d7:21:f9:56:93:9c:07:1d:36:04:86:5f:
                    f1:31:6d:0c:86:17:ac:a9:d0:a8:fb:7f:22:b9:38:
                    96:48:25:bb:71:34:7f:bb:63:bb:40:c9:45:f4:32:
                    0a:58:3e:18:57:53:16:e3:56:18:08:cc:2a:e1:42:
                    6f:4a:36:c5:5a:f5:a1:2f:79:b3:e3:b4:04:8d:3e:
                    18:72:ce:43:03:37:1a:0a:17:e9:5e:44:18:8c:bc:
                    f1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:78:40:05:05:15:36:9D:50:EA:81:A8:9A:95:A3:13:34:E6:45
            X509v3 Authority Key Identifier:
                keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8a:72:61:08:e5:c2:ba:2b:30:76:b5:63:80:c4:eb:54:57:
         36:e8:d7:66:be:87:94:c6:88:32:56:92:46:ab:9b:31:3f:f8:
         ff:31:ec:a2:10:74:71:3d:bb:26:13:3d:42:4d:20:79:24:85:
         84:d7:be:f1:ab:6c:91:1b:1d:7c:e9:f0:05:f3:ee:b9:1f:50:
         5a:f4:9f:d7:6d:9d:62:0b:b0:20:2a:bb:8d:ad:14:5d:94:9b:
         e9:35:0b:78:bf:c7:51:0f:1c:bd:a8:a3:3c:61:63:f2:a1:20:
         45:48:2d:29:36:a7:ad:c3:41:2b:a0:66:1d:37:55:1d:38:fe:
         63:95:fe:d1:25:41:94:68:12:a6:13:7f:28:eb:0d:b7:b5:01:
         9d:e3:49:b5:1c:39:5e:71:d3:4b:86:43:89:c8:4c:c9:81:98:
         dc:ec:94:60:73:b4:d7:3b:1d:36:c2:48:75:46:00:39:dc:8f:
         96:7b:ae:71:1e:40:8c:2f:cb:50:29:73:ff:48:a2:52:d2:df:
         2d:69:78:1f:a3:52:87:29:0b:24:ac:d3:f5:66:43:b5:81:ea:
         9e:32:11:0e:ef:1d:97:10:4a:60:60:ae:ba:3d:02:cc:6e:43:
         5a:c9:b6:d4:cf:a0:29:cd:5e:11:ea:af:94:90:d1:cb:07:e7:
         01:bf:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 17:03:31 2024 by rpki-client on console-ams.rpki-client.org