Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File:                     gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier:          ph2wKsKdQt1IwHpesgHFGW0HkwRZwRiepCXzZAByugA=
Subject key identifier:   EF:94:A6:67:58:FC:B5:08:0E:4A:55:DE:E6:43:AF:87:F4:2A:CB:B6
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer:       /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial:       018F87B695677829BB07A03285271C0EBBFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number:          0C99
Signing time:             Fri 17 May 2024 18:00:40 +0000
Manifest this update:     Fri 17 May 2024 18:00:40 +0000
Manifest next update:     Sat 18 May 2024 18:00:40 +0000
Files and hashes:         1: FAqGdeQ9V3N5w1G1W9y5ZM_uvrE.roa (hash: rBVGmjTgjE+fdnP23ACtqHdYcKEYV6SYbkpE6bHh8hk=)
                          2: KIWhK-QYRT76OizJKWYMIm6n1zA.roa (hash: TOUTfXE/GzCfBwicys24q0quwyX87AArnJqUTSBG8TU=)
                          3: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: Ga+WRuwTdRT3EbUeDkA+BOPzAkfLw3L79RbnFBfiBck=)
                          4: tjAkzoTMo8Uyy_AIUxHGEGYVSzM.roa (hash: c4xxH33R1zHbTWEj9Anit3aZTsT/I07nxg88orQ7Gec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:95:67:78:29:bb:07:a0:32:85:27:1c:0e:bb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
        Validity
            Not Before: May 17 18:00:40 2024 GMT
            Not After : May 18 18:00:40 2024 GMT
        Subject: CN=ef94a66758fcb5080e4a55dee643af87f42acbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:13:e0:cf:40:7d:df:42:4a:23:56:d0:a6:
                    8d:1d:96:77:c8:0a:23:c3:77:ba:c5:af:de:e9:34:
                    f2:f6:f3:89:76:c0:09:da:f5:1b:01:59:2a:9d:a9:
                    09:ac:6b:9a:d9:bf:14:a5:dd:ff:83:5b:2d:57:55:
                    08:7a:14:ea:96:29:78:90:b4:80:6b:19:66:d7:61:
                    70:97:91:7f:85:f2:c8:d9:fc:fa:ed:30:00:7e:76:
                    27:19:1f:bc:ee:25:c3:80:12:f4:e3:0b:59:69:a7:
                    cc:55:75:c4:89:86:c4:3b:c2:db:80:a6:9f:c2:fc:
                    3c:19:4c:ae:fd:49:56:e8:0f:99:0d:f9:d5:b7:1e:
                    89:49:62:73:48:6e:a8:ad:e5:b9:d3:9a:91:22:34:
                    4e:6a:df:f5:5d:a6:db:fb:32:34:17:ae:ef:fa:18:
                    b7:f6:e0:9b:64:01:ae:48:a6:de:df:80:99:26:06:
                    26:1c:01:c6:17:b9:e3:ec:b5:4a:70:60:12:48:2a:
                    94:58:b6:08:ca:0f:70:c2:f5:57:5d:84:de:55:fe:
                    a3:20:89:9a:d8:c4:b5:17:2a:c3:da:55:c9:b4:f5:
                    f1:24:1a:85:25:f6:6d:77:bb:df:20:6d:c6:0b:f6:
                    47:da:8a:cf:33:e6:a1:4b:9c:37:b8:55:c4:d3:37:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:94:A6:67:58:FC:B5:08:0E:4A:55:DE:E6:43:AF:87:F4:2A:CB:B6
            X509v3 Authority Key Identifier:
                keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5a:45:3d:9c:a2:30:0c:70:40:91:12:9e:34:ba:f0:3f:4d:
         dd:b9:ee:d5:80:f5:32:01:36:09:5d:7b:14:96:21:27:2c:23:
         3b:21:90:92:98:c6:5e:67:e8:f6:a3:e2:61:98:5a:9c:86:e2:
         9c:ad:42:6f:a9:f6:16:b9:4b:26:8c:bd:cb:93:8a:db:8d:2e:
         2a:94:b6:f1:85:ac:6f:2d:32:e1:d9:22:98:48:9f:3b:37:27:
         be:f5:5d:53:dd:64:2d:5b:31:f1:54:a5:53:29:60:a7:33:f1:
         2f:17:0e:76:44:c8:eb:0f:de:0f:e0:0c:e8:8c:73:00:60:ce:
         95:5a:f7:8f:73:e5:dd:a4:ba:54:c7:e8:36:7d:84:1d:e5:22:
         52:a1:b8:1a:fc:4f:c7:fa:e1:d6:b2:eb:77:83:97:8e:fa:8e:
         06:45:23:32:26:78:06:53:28:de:df:5a:9d:48:1e:b7:72:f6:
         4a:de:40:6c:5b:64:81:ce:fc:45:4b:b0:a7:fb:0b:4c:ef:01:
         4b:a4:06:af:8b:20:c0:e3:8c:62:58:e5:fe:f5:71:ff:9c:8c:
         10:a3:95:ab:b3:c2:5a:22:23:08:8f:59:a7:28:27:96:24:9d:
         f5:2a:4b:49:28:d7:16:a4:54:7e:33:94:35:63:a3:9b:e2:74:
         9e:41:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:37:12 2024 by rpki-client on console-fra.rpki-client.org