Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File:                     8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier:          NLqp5R7tiT48cb9imHug2bXQN3THAphnk9gs27uztUs=
Subject key identifier:   B0:55:82:86:09:28:3F:E2:F0:90:77:30:4D:98:79:1E:B8:C3:DA:B3
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer:       /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial:       018F23B8DD8E69A9FF60DBB3D91598B4F040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number:          114B
Signing time:             Sun 28 Apr 2024 08:01:08 +0000
Manifest this update:     Sun 28 Apr 2024 08:01:08 +0000
Manifest next update:     Mon 29 Apr 2024 08:01:08 +0000
Files and hashes:         1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: HiQ9kG1QuEH/XTNucjSZoE1wy8bB7sVv2Wl+qFb58tA=)
                          2: EuHRmOT6BLvuvzFnaniBD1j8kpA.roa (hash: rR6eYgrJMbIGgUVttHT7k5KPvqF4poiSxj3DajmrNGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:b8:dd:8e:69:a9:ff:60:db:b3:d9:15:98:b4:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
        Validity
            Not Before: Apr 28 08:01:08 2024 GMT
            Not After : Apr 29 08:01:08 2024 GMT
        Subject: CN=b055828609283fe2f09077304d98791eb8c3dab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:da:a8:ec:ec:47:99:66:9b:91:21:6c:29:
                    15:06:d6:a0:14:39:df:e8:af:92:5e:ac:22:ee:06:
                    4e:d9:c1:2e:1e:9d:cc:12:08:1c:60:ec:22:86:8a:
                    7c:0d:a2:87:5a:7e:e0:41:96:b2:d2:0e:3b:4e:fa:
                    75:64:cc:97:cc:54:69:e5:d4:95:a5:bd:27:4e:18:
                    0e:66:6a:79:14:b7:23:5d:11:ab:19:9c:3e:50:ff:
                    a6:9b:22:06:a5:27:8a:e8:c4:e0:ee:14:2b:b9:2d:
                    d7:39:ac:de:1c:e2:9c:33:c1:86:d9:c7:87:7e:b1:
                    92:8d:b9:74:db:9f:b2:25:cb:cb:40:2b:b9:c6:e8:
                    97:b8:e3:85:d1:39:db:ab:54:7b:c3:e2:19:9b:3b:
                    b8:86:17:d0:1e:0e:27:60:6c:bb:49:41:d7:b1:84:
                    ef:23:ce:64:82:21:8c:d4:df:e4:2e:56:ca:d3:76:
                    99:cd:06:72:8a:b5:56:4c:37:a8:43:69:8f:48:ef:
                    47:0d:00:68:ef:25:dd:00:fc:3b:98:fb:3d:f3:a5:
                    cc:5c:93:c3:07:4e:1c:f3:70:c1:19:6b:8e:76:b0:
                    83:3e:94:03:e0:f4:1c:9d:93:66:32:28:8d:d1:3d:
                    60:a7:4d:41:de:63:2c:b9:8d:f5:08:a5:27:66:8d:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:55:82:86:09:28:3F:E2:F0:90:77:30:4D:98:79:1E:B8:C3:DA:B3
            X509v3 Authority Key Identifier:
                keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f5:33:35:7a:48:13:7a:bb:f2:2a:45:c3:ff:4d:e9:4b:73:
         ee:dd:11:17:66:22:47:ac:0a:2d:dc:5b:3a:06:59:b1:5e:cf:
         06:90:74:16:7a:3b:99:63:d0:2b:bf:c2:b1:53:9c:c5:f6:13:
         15:50:1b:f2:9d:a8:36:a1:d6:2c:33:1e:77:a4:21:34:dc:89:
         3e:c4:23:51:60:cc:95:71:73:40:80:5e:9c:33:48:5d:1c:9c:
         fd:88:64:03:f5:09:4f:9f:12:5b:4d:d3:a1:27:bb:c3:84:c9:
         5d:9a:4a:cf:d9:b0:8a:1b:e7:ed:be:83:c6:10:fe:f0:22:50:
         16:9f:00:27:50:5a:40:8e:89:e7:fd:07:84:f6:e1:3b:89:65:
         7d:3e:35:30:4d:31:e0:bf:c2:61:cd:f3:8b:6b:e1:f4:e7:3b:
         c3:ca:d7:f2:f5:b2:08:5e:02:06:c7:6e:32:cf:8e:6c:ef:bc:
         ea:92:20:47:c1:ef:c8:ef:32:60:ef:41:20:79:3d:c3:a5:2c:
         8d:b9:e1:49:d0:95:7b:f6:a3:de:62:0d:e0:14:d3:84:56:d7:
         8f:ac:32:74:82:9a:f2:bd:3f:ff:3c:22:89:54:d9:77:bc:7b:
         0c:72:e3:b1:19:ac:9d:ba:e3:25:84:de:55:89:7a:37:7c:cb:
         be:de:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:10:41 2024 by rpki-client on console-ams.rpki-client.org