Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File:                     p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier:          sG+j9SeSGJERNECyLxCDOZIZK3fQ2c4cChvXxvrsMLc=
Subject key identifier:   59:AC:F4:D3:20:82:45:6F:8D:04:69:23:27:6C:B8:6C:2C:4B:91:3B
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer:       /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial:       018F8749FB9D2A586E4CBA99C18F316F5591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number:          08D9
Signing time:             Fri 17 May 2024 16:02:03 +0000
Manifest this update:     Fri 17 May 2024 16:02:03 +0000
Manifest next update:     Sat 18 May 2024 16:02:03 +0000
Files and hashes:         1: POqrWxeOqiQLVDpCTA9cjzodLjQ.roa (hash: U2SgbeksC6h1zkDK4uJByiNHefONzq0+ubqc8Mdd7l0=)
                          2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: 2iSHaHOK5sH69JMSi6fBWr9CwNGmuQLPf9GtCQQdGw0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:fb:9d:2a:58:6e:4c:ba:99:c1:8f:31:6f:55:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
        Validity
            Not Before: May 17 16:02:03 2024 GMT
            Not After : May 18 16:02:03 2024 GMT
        Subject: CN=59acf4d32082456f8d046923276cb86c2c4b913b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:3f:d3:00:78:8c:0c:6e:dd:7e:da:0e:05:
                    b8:82:bc:63:99:00:a0:3b:94:99:11:95:50:26:bb:
                    ce:8d:e5:28:89:bd:39:48:bb:a7:3d:c0:a2:aa:1f:
                    07:2f:ac:a2:a6:65:b6:5d:4d:9d:d8:03:9d:3f:8b:
                    85:ff:25:05:fa:a6:a3:c0:5e:8d:4c:93:2d:83:35:
                    6f:f4:fa:86:98:7b:b9:20:de:0f:9f:c3:ac:2e:f3:
                    22:b4:13:04:1e:5f:5f:53:3d:ba:16:1e:89:ab:9c:
                    d5:92:96:c1:8b:37:c7:e4:34:73:44:9e:11:4d:09:
                    d5:5f:94:2e:ed:63:7f:c3:c3:53:a5:50:e1:63:ff:
                    b2:ab:05:e6:57:73:ee:4e:c5:6f:0a:94:e1:b2:96:
                    f1:5c:5b:b8:54:45:c9:f2:21:d0:99:52:df:67:e3:
                    13:96:b7:d9:40:f1:11:4f:05:96:bf:e8:42:d7:11:
                    ac:97:f4:2a:80:82:08:c7:1d:62:7c:26:0f:7a:f7:
                    38:41:32:d7:75:29:5c:8d:0f:2d:2b:7d:f1:9d:e5:
                    6a:21:0e:74:8d:ec:6e:be:44:3a:e8:e2:0e:b2:be:
                    97:44:6b:07:4c:c2:c4:c2:06:8e:45:ca:56:f6:54:
                    d8:9e:59:b8:88:ee:a5:2b:56:7f:cd:63:a7:a7:37:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AC:F4:D3:20:82:45:6F:8D:04:69:23:27:6C:B8:6C:2C:4B:91:3B
            X509v3 Authority Key Identifier:
                keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:14:3e:79:ee:48:e6:b4:60:ae:c9:9a:66:d6:0d:b3:0e:5d:
         4e:7d:5b:ed:2e:72:8b:a1:31:bb:e9:88:70:84:0d:94:cf:30:
         a7:7c:d9:0d:05:b4:af:5b:22:a9:bd:65:52:0d:22:53:ff:81:
         85:ce:03:8a:0f:0d:b3:23:70:65:17:2f:fb:14:6a:2e:c8:21:
         e8:55:64:55:b9:2e:11:27:93:d4:27:5f:80:6e:d3:33:d6:d5:
         d8:86:8e:05:1d:7e:90:08:8f:5f:8d:da:88:2a:ab:ab:ad:35:
         54:ca:db:d0:9e:76:07:e6:44:5b:cd:2b:85:60:44:ce:59:21:
         d0:ca:4c:2c:76:c3:9b:5b:3e:22:5e:af:37:1a:7f:33:a4:a8:
         08:ad:4e:ad:9c:7c:a9:e0:86:44:a7:56:36:d4:88:f1:fd:65:
         1f:31:32:ce:ef:16:58:b5:bf:0e:96:45:30:56:27:70:69:1c:
         5c:0a:a5:55:cb:8d:cb:4c:87:58:87:ab:9b:c0:61:b1:b2:30:
         c0:a9:9e:5d:b1:e3:bf:cf:59:6b:f6:ad:72:7a:95:2a:8b:d2:
         7a:2e:0e:f4:35:e7:d4:f8:0c:1f:82:b2:ec:38:42:9d:41:2c:
         9a:53:29:04:9d:95:ef:c2:a6:8c:f2:04:79:69:8e:d6:bf:85:
         a0:3b:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:53:11 2024 by rpki-client on console-ams.rpki-client.org