Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File:                     8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier:          GTptT1WzfQAHc79WvMoe/6ELgRmkjPV4iNkHhjmT40A=
Subject key identifier:   9F:B3:EE:56:8F:E4:F9:0A:F0:87:B5:7C:DE:15:FA:1F:76:52:24:FC
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer:       /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial:       018F3C65F4F1A92E3479EB2BE461EFD6C9A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number:          0A13
Signing time:             Fri 03 May 2024 03:01:05 +0000
Manifest this update:     Fri 03 May 2024 03:01:05 +0000
Manifest next update:     Sat 04 May 2024 03:01:05 +0000
Files and hashes:         1: 02u4PN8vTV2Ha0mP9vjfkcZUX00.roa (hash: PUjoWymbVBiy90QHISqzivHb8J8X7UyTKc8QpGLCNGk=)
                          2: 6AM8y_dMjP48BJUqzQRGoOjTUqc.roa (hash: oFRfiyi6Q70rs3mjQuvmw7EDRFzpqA/2oNZ183ASnnE=)
                          3: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: dFnpJJFZjsAie14l+nWgEIgzAdh4W3pMpCJUVKHleBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:65:f4:f1:a9:2e:34:79:eb:2b:e4:61:ef:d6:c9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
        Validity
            Not Before: May  3 03:01:05 2024 GMT
            Not After : May  4 03:01:05 2024 GMT
        Subject: CN=9fb3ee568fe4f90af087b57cde15fa1f765224fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:9c:bb:75:ad:8b:9a:08:42:a5:b4:ac:5e:
                    83:be:93:a4:d4:cd:ae:6e:21:29:f0:a9:e4:c0:ef:
                    c0:42:9e:5c:a7:e0:29:0d:07:ca:76:be:03:4a:73:
                    8b:76:11:c3:85:af:ee:1f:2f:14:a9:6b:7c:ae:22:
                    3d:76:d8:a9:fa:d0:2a:d2:af:60:eb:aa:c2:84:bb:
                    cc:58:6e:e0:44:7a:60:9c:05:e4:50:22:44:72:0a:
                    36:45:29:7d:62:e0:c7:ea:84:59:62:29:e5:dc:8c:
                    f6:f3:e2:00:53:b1:5e:58:80:fc:6c:5e:b7:2f:f8:
                    b5:f2:d3:5a:8e:ea:de:82:51:29:2c:cc:0c:97:86:
                    44:87:16:bf:b0:3f:7d:8b:cc:7c:5b:45:c6:0b:90:
                    f6:ca:11:21:cf:e9:4c:26:52:d2:08:da:39:77:c2:
                    ca:f8:7f:66:b6:3d:91:c4:2e:2f:44:c5:bc:e0:16:
                    bd:65:bc:c0:eb:2f:9f:55:91:35:1a:a3:1e:58:da:
                    cf:58:ab:20:82:ed:af:59:bb:16:91:16:ce:6d:b4:
                    ee:d0:02:3b:0c:c2:9d:e3:65:05:37:3e:0e:15:34:
                    d2:b0:cd:0c:96:9d:cf:31:5a:e5:ed:77:43:02:c7:
                    05:b1:f9:6e:d8:53:d3:38:23:c0:5c:3a:0f:e4:33:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B3:EE:56:8F:E4:F9:0A:F0:87:B5:7C:DE:15:FA:1F:76:52:24:FC
            X509v3 Authority Key Identifier:
                keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:26:b5:3c:44:43:f4:44:dd:16:7a:c7:f7:60:5c:1e:64:48:
         49:4b:53:33:8b:0f:da:c4:47:ba:38:31:ed:a2:98:21:2b:30:
         33:67:a9:e7:7e:ce:f1:a2:f6:82:e2:10:7a:6d:9c:cd:06:ab:
         d2:82:fc:53:6a:2c:20:3e:eb:4a:89:00:69:89:b7:e5:a3:d1:
         ff:a0:f0:46:ab:d5:98:a1:90:dd:69:15:c7:af:15:4b:e5:d7:
         bc:f4:0f:72:e7:3f:42:66:3c:2b:2e:24:02:48:cc:33:8b:b0:
         c5:24:a5:80:1c:7f:f6:04:3e:2d:42:17:7b:e4:75:d5:77:76:
         7b:a1:f7:62:b6:71:fa:c8:b9:ec:1a:de:c9:c4:0b:6a:de:88:
         c5:f2:cd:2b:63:8a:df:3a:df:4c:52:1d:c2:7c:a0:08:e5:57:
         f0:0c:0b:69:45:c1:85:38:d4:bc:a0:11:da:5e:1a:30:53:5c:
         f9:f6:fb:14:3a:b9:8c:f8:75:03:b2:e0:e2:40:e4:95:f1:ce:
         86:f1:a8:40:66:09:f6:5a:c3:7c:e6:f0:39:da:f7:ea:bf:eb:
         4c:23:fd:c0:9e:b2:bb:39:2f:d0:a2:59:f2:fd:31:06:fe:e4:
         2b:c9:21:60:db:8f:19:54:a7:8f:18:32:96:57:bb:53:bc:cc:
         40:87:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:26:03 2024 by rpki-client on console-ams.rpki-client.org