Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File:                     io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier:          ctvwylCvQzoX6mPRzHMjqF0DNX1JZJ3ZMWsRl0tw3R8=
Subject key identifier:   CB:51:FD:7B:29:90:24:22:E8:67:53:F5:2D:C4:A9:FC:D0:30:7A:B5
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer:       /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial:       018F8824A23A3821CB5F9DF3189057E7370B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number:          0571
Signing time:             Fri 17 May 2024 20:00:53 +0000
Manifest this update:     Fri 17 May 2024 20:00:53 +0000
Manifest next update:     Sat 18 May 2024 20:00:53 +0000
Files and hashes:         1: J6ob4qLDTBHq0B8WD1EHKMOj4gk.roa (hash: 57UjxKjGGN9EUVEfBvR4Etnf/Xv+MeSSOoixhR+OvJI=)
                          2: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: 1puQmSjY00M/WvsEuqWMvmFv15xZ3CXD8JJ30fGlfVo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:a2:3a:38:21:cb:5f:9d:f3:18:90:57:e7:37:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
        Validity
            Not Before: May 17 20:00:53 2024 GMT
            Not After : May 18 20:00:53 2024 GMT
        Subject: CN=cb51fd7b29902422e86753f52dc4a9fcd0307ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ff:25:91:0c:21:55:75:2a:26:15:31:11:38:
                    6c:a7:77:61:e3:7e:f6:8e:98:d9:af:6d:e2:fb:fa:
                    56:cf:ac:ac:0b:33:71:07:88:7a:97:20:04:a6:3c:
                    20:88:0e:c2:ef:dd:93:12:cf:00:ec:2e:77:11:a4:
                    5e:ce:56:96:25:fe:ff:18:f7:31:11:df:3a:61:96:
                    03:86:d9:1c:97:44:44:89:29:e3:21:22:2f:8a:f1:
                    7c:5e:4a:6c:cd:83:19:51:61:64:2e:41:2c:14:16:
                    24:ec:ef:0d:66:c3:ca:20:dc:e4:6c:4a:83:05:b9:
                    4b:7a:cd:2a:4e:c8:5d:c6:f3:1e:ab:55:08:7a:47:
                    39:fb:76:6e:e6:ff:c7:c7:d9:d8:a0:16:4b:14:db:
                    40:8c:4f:d1:2a:b1:75:27:39:c2:59:49:0c:be:fe:
                    0e:69:09:ad:95:f5:29:a5:e1:4d:7e:87:ba:0b:89:
                    1a:32:dc:b4:73:1c:d0:79:15:ea:fb:10:2c:ba:c3:
                    a7:6c:eb:5d:21:32:d5:a1:1a:ea:0e:87:41:14:6b:
                    96:00:3d:7b:1e:6c:36:42:a5:3b:92:4a:2c:c8:75:
                    87:1e:3f:14:84:10:a5:01:3f:19:07:ef:29:a2:8b:
                    a6:1a:1c:af:03:31:27:db:a5:18:fe:c5:6a:73:cc:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:51:FD:7B:29:90:24:22:E8:67:53:F5:2D:C4:A9:FC:D0:30:7A:B5
            X509v3 Authority Key Identifier:
                keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f9:b0:e4:e4:28:09:41:6a:09:e3:de:42:51:50:bd:fd:67:
         d7:98:72:af:9f:6c:e2:92:0f:b0:f2:0c:52:1c:5c:b8:43:6a:
         70:90:d5:2d:54:76:8b:93:73:ff:b2:1d:5b:ac:3a:0a:7d:91:
         2f:2d:60:e4:45:dc:c1:16:4c:79:b1:c4:d8:46:36:9c:68:0a:
         25:fa:32:50:4e:cf:a0:12:4b:d5:a3:bb:07:26:c1:89:a2:39:
         b8:3f:fc:c5:46:dc:14:da:2f:c7:72:ed:ec:97:72:74:36:d7:
         b6:59:da:2a:51:84:b0:50:ce:37:f2:b4:f2:b0:41:fb:89:b5:
         19:45:c4:48:7f:dd:32:f7:3b:28:7f:b2:f4:e2:43:2b:11:29:
         a4:1f:6f:be:36:7f:fc:93:3c:19:eb:e5:8e:ae:9a:8b:a6:d6:
         cc:a2:6d:b1:2d:d7:54:23:bb:4c:23:47:14:0e:bc:eb:c4:05:
         94:73:12:44:f0:87:b9:ae:79:63:2a:8b:4f:e3:42:94:ed:ce:
         45:3e:0b:02:04:c8:be:7b:d7:fb:b1:62:42:8a:8e:3e:28:32:
         a5:80:a5:0d:3e:78:eb:e7:09:4e:1d:fb:04:01:89:66:46:18:
         13:05:18:29:19:cb:2e:1e:7c:5c:0f:d5:43:b6:76:50:ee:84:
         d1:21:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:20 2024 by rpki-client on console-fra.rpki-client.org