Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File:                     8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier:          GwbVQPX0SByJD4e6PgRxKBwVpoFUT74PO/zLYTcSDF4=
Subject key identifier:   B2:96:B9:F4:BF:BB:31:E8:17:2D:D4:CC:E7:A8:9C:A0:B6:A1:BA:8A
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer:       /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial:       018F5994CBA074E5C4C91EA0BFA49406C1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number:          1107
Signing time:             Wed 08 May 2024 19:01:14 +0000
Manifest this update:     Wed 08 May 2024 19:01:14 +0000
Manifest next update:     Thu 09 May 2024 19:01:14 +0000
Files and hashes:         1: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: tUQT5txifoZr3rnEVVd6ZFvKrr0BShngGSiqSTzYfcE=)
                          2: COCWxmv6OhcW5sBnt5gzdC5cneE.roa (hash: HYsh7b8XZitj0Kv4uAK4qBLQUa56cFuKeBEnwdfilRU=)
                          3: _Df5Gsv3TRHtHnP3-JVq1cLx_00.roa (hash: gqPg1SuRrnFnCP4QLevuz3X2p5asc/6RC+Tc47Nxtyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:94:cb:a0:74:e5:c4:c9:1e:a0:bf:a4:94:06:c1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
        Validity
            Not Before: May  8 19:01:14 2024 GMT
            Not After : May  9 19:01:14 2024 GMT
        Subject: CN=b296b9f4bfbb31e8172dd4cce7a89ca0b6a1ba8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:df:6a:17:bf:ca:f8:24:c1:e7:bd:1a:d4:33:
                    b3:8d:c6:2c:0e:f3:78:25:67:08:0e:10:60:6e:4a:
                    5c:ec:d6:59:8c:f2:79:75:d2:fe:17:fb:64:a0:13:
                    f7:d3:3d:db:9a:fc:79:73:31:7e:3d:1e:8a:35:ee:
                    e2:0e:2a:63:c2:0c:f4:a8:50:6d:7d:53:fc:83:d0:
                    dc:e2:62:6e:1f:39:d8:4d:ea:50:a7:60:2d:4e:1d:
                    83:49:4e:35:bf:22:e4:22:46:7e:ef:cf:71:af:98:
                    99:9d:d5:80:8e:13:ae:5e:26:1e:a6:88:2f:46:ae:
                    e0:b8:a4:02:ac:6a:d6:c9:be:91:77:ce:fb:0e:1c:
                    a6:ff:86:56:fd:f1:e4:40:b4:f3:9a:b1:e9:ff:cf:
                    6e:45:a3:bd:59:f3:47:fa:8d:bf:d6:fe:3c:aa:2c:
                    04:70:42:48:b9:63:79:84:57:ec:24:a2:9b:c9:3b:
                    f7:b5:5a:c1:d6:83:77:e1:86:2e:0f:e3:9e:c8:19:
                    cc:2f:72:27:3c:8c:e9:e9:e6:2d:f0:6f:db:e5:44:
                    cc:24:37:e9:8c:50:5e:97:d9:c3:0c:c2:fb:2c:c0:
                    7e:75:e7:f4:bb:2e:40:cf:1b:21:4f:0e:b0:c3:83:
                    22:87:f2:5c:2e:6f:0d:46:dd:b9:37:7b:87:e8:af:
                    b2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:96:B9:F4:BF:BB:31:E8:17:2D:D4:CC:E7:A8:9C:A0:B6:A1:BA:8A
            X509v3 Authority Key Identifier:
                keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:05:90:30:bb:a2:67:b8:35:28:2e:cc:d0:b8:8d:cc:06:
         c2:04:3e:ff:d0:1d:28:eb:aa:96:e3:7c:d1:8c:52:cf:40:61:
         6b:62:f9:cb:56:25:48:49:4b:2a:4a:1e:36:a2:45:0c:09:53:
         8c:cd:54:4f:41:b1:76:24:8a:71:b6:76:04:28:4b:00:32:24:
         c3:ea:e9:d1:8a:34:fa:12:88:a8:5c:73:ba:64:8a:36:95:c6:
         fd:11:c0:a1:7f:11:83:be:cc:a0:06:03:bd:7f:65:90:8d:e7:
         07:9f:b1:d5:33:20:ae:a3:47:04:42:1f:03:c9:b8:c4:b0:fc:
         34:7d:37:60:33:a1:d3:09:21:15:d9:18:2a:e5:ef:f8:26:de:
         fe:ab:d8:fc:8c:f8:7c:10:d4:06:34:df:48:e2:43:6b:d4:f4:
         5a:bd:86:67:af:41:ac:76:1f:36:5e:d2:85:5d:f3:c7:be:5a:
         ea:57:0e:eb:de:8d:7b:34:64:a3:2b:88:30:e8:22:62:5f:c2:
         df:44:b9:1a:fc:c1:92:10:9c:18:76:d2:56:6f:33:38:07:94:
         76:f6:72:31:ed:f6:f5:f7:c3:62:f4:99:18:9b:9f:e5:28:83:
         8f:2b:f4:4b:6b:36:37:ea:f6:b7:a4:6c:a0:f7:ad:ac:31:07:
         08:db:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:45:09 2024 by rpki-client on console-ams.rpki-client.org