Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File:                     XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier:          /tpkGPiFHYYnQ+twOIwEe56Q+9y6R1J3HlM1TiD+Ob0=
Subject key identifier:   61:47:3B:DB:A5:42:EE:81:4A:96:1C:CD:9E:05:28:FA:25:42:ED:8F
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer:       /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial:       018F855C6B89192CB39A23E916CBF9CE6CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number:          0BDA
Signing time:             Fri 17 May 2024 07:02:57 +0000
Manifest this update:     Fri 17 May 2024 07:02:57 +0000
Manifest next update:     Sat 18 May 2024 07:02:57 +0000
Files and hashes:         1: NfOfrM9zfKrYh464bbFLOLgQyqg.roa (hash: Yj4d2XQLmuz88kFb56Q0v6/ebixh30Is+LDr4MaD8h8=)
                          2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: Yr1LCyL/vpYzv6Q0ORwswEIgNyknmLqRteYeCgkFhC0=)
                          3: muSDkmxDLuNPD3E5cYgQcfEjZHI.roa (hash: Fj/WIwThzQWM+mFA20pT5+P8k3CernfR5JL8YgPUawA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 07:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:85:5c:6b:89:19:2c:b3:9a:23:e9:16:cb:f9:ce:6c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
        Validity
            Not Before: May 17 07:02:57 2024 GMT
            Not After : May 18 07:02:57 2024 GMT
        Subject: CN=61473bdba542ee814a961ccd9e0528fa2542ed8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:87:2b:56:f4:51:f2:1e:e8:c4:83:b9:f6:
                    6e:8a:fa:ea:11:d0:e3:78:87:1d:17:2b:45:fa:74:
                    26:29:c9:55:53:0f:b7:92:28:2f:50:f8:d1:09:35:
                    fc:c5:14:43:a2:03:c7:b5:f2:1a:f7:22:5d:73:79:
                    45:62:cc:f5:05:b6:53:ee:98:0a:76:76:de:ab:73:
                    7c:c4:c0:62:45:28:3d:f8:46:cd:66:0c:be:d9:4b:
                    5e:50:2d:1b:60:a0:ce:33:6b:0e:25:b8:54:9b:ce:
                    1d:cc:91:60:15:32:4a:77:d9:44:82:a0:60:80:d1:
                    8c:da:bf:b6:f5:47:5f:7c:03:8c:48:d4:1a:6f:b0:
                    a9:4f:09:e6:e0:3d:22:9c:6c:bf:53:8b:83:f7:da:
                    93:3c:90:47:c8:28:7c:00:3c:e5:03:b5:7f:ea:ce:
                    f9:b6:2a:5b:74:d1:1a:6d:f7:4a:d9:e6:eb:d6:e8:
                    56:32:08:81:bb:65:fb:c0:8d:01:44:5a:7c:8f:d0:
                    9b:79:c6:12:52:2f:90:e9:98:fc:9b:dd:35:15:0c:
                    13:c4:56:bc:73:cf:b1:58:04:13:cf:ca:54:21:e3:
                    dd:5c:06:0f:13:a0:a7:c2:7f:8d:03:e7:56:21:6c:
                    72:91:b9:c1:bf:49:d9:24:0f:e0:62:f9:c1:cc:bb:
                    55:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:47:3B:DB:A5:42:EE:81:4A:96:1C:CD:9E:05:28:FA:25:42:ED:8F
            X509v3 Authority Key Identifier:
                keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:91:9e:d5:6b:7c:bd:f5:72:4b:62:5f:1f:78:96:94:70:64:
         0b:77:c0:7b:cb:c5:2e:51:ec:39:87:b8:bf:30:32:b3:93:c3:
         5b:85:9d:cd:3d:2f:84:47:63:22:be:99:12:f8:b8:64:3e:9a:
         2b:d0:db:ed:8c:e8:8b:34:8c:b5:61:29:98:3b:d1:84:dc:a0:
         87:85:37:bc:1e:84:7f:34:43:a5:74:08:63:4c:89:f4:aa:49:
         66:98:fe:da:9c:dc:4f:02:9e:83:81:f3:b5:c9:da:a9:68:88:
         f5:c8:30:d7:9e:6f:28:b3:29:e6:f0:cc:4d:c9:9b:c7:39:84:
         43:08:78:4f:1a:c7:40:7a:cb:62:84:86:ca:41:9c:b8:c1:d4:
         d2:61:8b:19:a6:ba:43:cd:23:e6:8c:1e:96:f3:31:4b:4d:58:
         51:09:88:c5:b0:de:bb:fb:ea:64:fd:93:4d:7c:d2:9e:63:af:
         51:c7:a1:9d:f8:0f:8a:27:96:b4:b7:b6:50:f9:cb:d0:bd:11:
         cd:9a:3a:d8:ce:9c:e9:52:1a:ca:0c:77:e6:74:63:04:cc:5f:
         f9:01:1d:8d:91:37:5a:2b:af:9f:9d:c1:fe:16:06:c5:f3:de:
         4d:e5:74:d5:fc:78:b8:70:7d:b3:4e:d3:83:d3:a8:21:9d:44:
         12:86:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:20:33 2024 by rpki-client on console-ams.rpki-client.org