Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
File:                     520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json)
Hash identifier:          5mGjdU4AbkAMi50CyS1Rb76ecCoQTeGq6SjwMPXadeE=
Subject key identifier:   87:6A:29:FA:47:3A:DB:65:7A:F8:21:8B:CF:74:9F:FF:F5:A1:CE:5D
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Certificate issuer:       /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial:       018F6B2D6BE607800A92F783D226616B3B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
Manifest number:          0C51
Signing time:             Sun 12 May 2024 05:01:29 +0000
Manifest this update:     Sun 12 May 2024 05:01:29 +0000
Manifest next update:     Mon 13 May 2024 05:01:29 +0000
Files and hashes:         1: 09AhODH8jdRGyrQvy4UzUTAdhIw.roa (hash: pTsVz8xf43TT4PCl1IIDfU5Yae9qyKpAV6qxYLjd6HA=)
                          2: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: e+1gaD1ZmpIQhccNJI7FguURCEawyuEaZGScj6iSYpE=)
                          3: 5nKpvKctsxiZWaJlPM7CLuQemIg.roa (hash: WQOQ8q+7K9KBF6asc/rGQoUGKsRff8tH977Sl7YgfII=)
                          4: BucJvvExLyIclKkhm71pHqGl8fo.roa (hash: FcMmyZtFKwbiwMwGeay8edxIZMvjn2FGK/NXxtZJqEQ=)
                          5: G5Xr-fEFuw6qX_ZzJ1P0OIAHDXo.roa (hash: AA4CQqIDxZ/EAlmYRDfJ3Ue90OXWrWKy7S7JeI9HFB4=)
                          6: L-bgN2aTA_J-hJlHr46VZmzOoJ4.roa (hash: NLdhQ+92KzguBkjKtiN+iNJiKDMF8PKEq4PBSfRADIs=)
                          7: LBHoAiHbD38HDCErpLH5TnVUluA.roa (hash: UnaYP2+vFQcO0nSMwf8RU40rSlFVlzWo8dB0ZeYuT7c=)
                          8: Rh3NEvNzW9CoE-_tnSyBdAUl_kc.roa (hash: XkvbmH8qcwmcXE5ADM4Bs6r17wZTloWZsMlTTsCrjks=)
                          9: S26GBAVB_SQCg7tEdc2n-dNXiXU.roa (hash: aACtqxh+2LSUI50GU3+k+vAn64Nn6HXTMAZMIJUeC7c=)
                          10: UeqWP9xa0Y4HrRCFRr_C16PN-Ck.roa (hash: iOlYd7tlDlIti73IokF16mS37kGo1nLViBSis48QGKg=)
                          11: YbdnsKKcLWXNt16ld8ZvdDfRwvI.roa (hash: xG7IHAySfija7pf7oM9P1hrZ7cvpaRte6EMf43t62U8=)
                          12: kXplFP6gUF52i6wVPMghV1C0EhU.roa (hash: sPcx3UnYKqpwUXyNwMIARKTwimyUf18TlzdlM0hj3C8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:6b:2d:6b:e6:07:80:0a:92:f7:83:d2:26:61:6b:3b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
        Validity
            Not Before: May 12 05:01:29 2024 GMT
            Not After : May 13 05:01:29 2024 GMT
        Subject: CN=876a29fa473adb657af8218bcf749ffff5a1ce5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:35:6e:31:a0:e6:ab:22:38:8a:ce:3b:f0:
                    32:7c:be:dc:5d:c0:53:bd:70:e8:c7:1c:7a:65:2e:
                    bb:4d:60:29:f3:23:3c:d6:61:16:29:bf:d0:d1:b8:
                    17:ac:7c:cd:ab:11:e6:0a:e6:31:48:30:cc:85:d6:
                    cb:3b:e1:b4:54:c2:3d:1d:c9:70:15:ae:b6:50:8b:
                    f5:3e:5f:20:51:47:ff:e0:83:67:7e:1c:6e:80:e2:
                    df:3d:dc:34:4d:f2:14:0a:29:4f:87:f0:d9:72:d2:
                    ce:db:53:49:3c:26:9a:54:52:7a:bd:4f:49:9f:b0:
                    65:f6:d9:30:96:81:a4:8b:53:db:cd:30:3e:a7:e7:
                    b8:8c:cd:28:52:cd:70:ed:c4:62:30:00:f3:c8:8a:
                    0a:f8:55:92:ef:cd:c6:4e:53:00:52:cb:27:24:c9:
                    ad:bf:45:13:23:2b:23:5c:82:ed:d0:3d:a8:c8:22:
                    8f:74:83:eb:cc:4d:48:1b:d3:3c:c8:6f:8a:31:18:
                    6b:9c:df:b9:01:c9:82:23:d5:a3:b9:1f:d9:96:1c:
                    c6:47:83:a2:46:99:5d:a5:89:ac:64:0c:88:ef:f7:
                    4e:a0:60:b5:48:6d:63:b9:c5:00:49:2d:6b:74:0a:
                    7d:84:70:b1:46:7f:a4:db:ea:ef:9c:ab:b6:4f:aa:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6A:29:FA:47:3A:DB:65:7A:F8:21:8B:CF:74:9F:FF:F5:A1:CE:5D
            X509v3 Authority Key Identifier:
                keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:6e:e3:f8:bd:8c:22:bd:10:bd:ce:6d:85:42:a8:72:73:
         57:40:37:4c:4d:de:e8:86:07:d5:12:ce:06:d6:37:8b:ba:b0:
         58:59:62:d9:e3:aa:5c:0f:0e:02:4c:ad:8c:e9:62:84:b6:24:
         c7:d2:a4:c4:b9:3f:b3:f6:8e:3f:f3:59:c7:80:bc:76:2c:6b:
         ad:1a:02:24:e3:00:9c:71:88:0b:ce:1f:6b:85:88:8b:43:5c:
         0a:34:7b:0c:da:60:4c:ae:25:d4:94:96:07:c1:6e:35:c1:a4:
         06:a0:a3:ee:6a:8d:f2:ad:0d:83:12:52:66:74:c6:b2:20:a3:
         b4:48:5b:d6:75:2d:ed:2f:f2:2a:65:fd:e8:0c:0a:a4:8c:0e:
         be:a9:f7:51:1d:2a:eb:ce:bd:0d:db:d5:f1:d7:1e:a4:f1:61:
         b1:13:b7:2e:0a:b5:75:37:6c:44:5a:ea:75:7c:2c:af:ab:71:
         4a:c5:43:84:62:34:23:39:dc:f9:75:69:3a:20:12:d1:65:9d:
         21:be:54:b3:72:32:e7:aa:a1:7d:e5:ca:7a:ef:7d:63:1d:5d:
         7b:cb:f4:08:4b:99:fb:7f:e0:25:be:0a:34:67:51:cf:44:39:
         14:6f:7b:07:09:cd:46:4c:cc:93:36:1b:80:14:a3:0c:68:20:
         51:63:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:46:13 2024 by rpki-client on console-ams.rpki-client.org