Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File:                     I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier:          O3b5abq9Je5gUxG7nMsXBDxkSYDGFgUm1hoTrFaJdzs=
Subject key identifier:   78:44:46:D3:45:A1:A5:E4:F9:DF:40:95:75:A3:5D:E7:B1:0E:D5:4E
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer:       /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial:       018F4079DA28FBBBF2447E3C4F1F854FC01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number:          08A6
Signing time:             Fri 03 May 2024 22:01:18 +0000
Manifest this update:     Fri 03 May 2024 22:01:18 +0000
Manifest next update:     Sat 04 May 2024 22:01:18 +0000
Files and hashes:         1: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: glBwEMLonkOJwxlu4l7fpkhgA1s2eTc2SIYFHQcvjyc=)
                          2: dWcRkvNvK-ARasQXCle_5kBtItE.roa (hash: L0E2a8Fzy7LlakGMRj42m3kfG6OGKhwkH8vDW+4qE2c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:40:79:da:28:fb:bb:f2:44:7e:3c:4f:1f:85:4f:c0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
        Validity
            Not Before: May  3 22:01:18 2024 GMT
            Not After : May  4 22:01:18 2024 GMT
        Subject: CN=784446d345a1a5e4f9df409575a35de7b10ed54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:04:e9:a1:ff:89:0b:a5:e3:80:68:36:32:
                    36:52:92:6c:d8:95:5c:a3:10:e3:f4:ec:ba:c4:9b:
                    43:93:e3:c7:a8:e4:56:36:28:61:9b:32:6b:c6:27:
                    f5:d5:7b:cc:1d:82:c4:47:83:8d:e8:33:2f:e0:aa:
                    72:10:72:63:72:e9:6a:ca:b5:b6:48:f6:e9:dd:36:
                    da:32:36:e7:ac:a7:ef:a5:59:df:77:79:6f:12:4b:
                    c8:b2:2e:60:15:fc:c2:68:19:99:6d:fb:a8:ba:69:
                    0e:fe:ce:65:18:b5:f1:03:76:76:13:a4:c2:5a:32:
                    90:52:e6:d2:7b:33:55:07:ac:6c:7a:f5:c9:d4:55:
                    86:ac:81:d1:ca:f8:b8:72:c8:8e:82:1b:35:d3:fb:
                    23:b0:6a:a3:7f:64:99:15:c6:f4:bf:2a:18:0b:8d:
                    d3:22:11:09:8e:78:05:bb:62:41:bc:e9:f3:6b:b9:
                    77:c2:e6:5f:f4:99:a4:cd:df:e6:0e:d6:16:b9:a7:
                    12:65:d2:f7:d8:62:56:30:fb:00:b4:20:99:bb:89:
                    2e:a7:04:3d:78:c4:37:d4:84:c5:f0:46:59:c0:78:
                    8f:e0:0e:4a:96:21:fc:c8:a6:65:69:f7:bd:e4:f6:
                    1a:f6:9f:bc:35:4d:c2:12:e9:e3:5b:1b:ac:d7:44:
                    5b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:44:46:D3:45:A1:A5:E4:F9:DF:40:95:75:A3:5D:E7:B1:0E:D5:4E
            X509v3 Authority Key Identifier:
                keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:af:00:3f:48:78:ba:e3:75:b3:6d:40:aa:31:26:d9:9c:64:
         ad:ee:a5:9b:39:56:1f:95:9f:c9:59:68:28:a2:2a:e1:3b:a3:
         a6:95:71:b6:e9:d5:5c:ee:4a:35:27:db:9a:fc:46:07:9e:1a:
         4f:f3:24:c2:85:97:ab:17:70:a7:12:ba:1d:f7:8c:00:8f:cb:
         60:b4:2b:42:ec:4e:e7:2f:c3:53:c6:11:ef:ca:fb:aa:44:f8:
         3a:50:ef:75:4f:c4:94:5c:f2:50:d6:7e:9b:e1:c0:9a:1e:c1:
         b3:37:63:8c:a5:89:b8:3b:ca:4b:20:ca:fc:bf:64:f4:52:25:
         73:87:cd:18:d1:05:fe:43:34:6c:f0:20:84:7f:ec:01:6b:3b:
         93:d0:ed:3f:26:36:eb:aa:67:0d:75:4a:e5:04:d0:01:24:a1:
         09:2d:16:15:3d:50:aa:d3:2d:52:18:7a:6e:4c:31:07:7d:c2:
         71:84:63:3c:02:9f:79:e8:ff:5a:09:73:d9:65:9d:fb:87:7f:
         ff:18:f2:28:e9:15:fe:cb:96:9b:fd:17:d7:e2:13:b3:ae:d7:
         d6:96:d3:fc:e3:c3:77:9d:67:71:9a:d7:78:c5:b8:b2:01:27:
         46:62:58:68:ee:af:dd:63:1e:c7:57:f5:3a:fa:ef:21:59:4f:
         f0:a3:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:56:25 2024 by rpki-client on console-ams.rpki-client.org