Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          ROv/pEFwWFm/eDpBJrVe9ga1WTC/nAjKJO2fIXLehKw=
Subject key identifier:   9F:97:8C:B6:15:4E:23:58:AD:3F:FC:5C:A1:6B:46:03:EA:10:0B:A5
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       018F8CDC81F2DB9D149F999C82E7698185D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          1194
Signing time:             Sat 18 May 2024 18:00:12 +0000
Manifest this update:     Sat 18 May 2024 18:00:12 +0000
Manifest next update:     Sun 19 May 2024 18:00:12 +0000
Files and hashes:         1: HC5GtYCgwXAM0EGShBr8x1zST44.roa (hash: qykx+RMSrryYq2MiPIogrR+RjHLHxSwAAH+2ZyqGIdo=)
                          2: PbVA7VFO0BqUeIBTpM9_XmQHMCo.roa (hash: 5lKSwEQZYz8OcYUZaWvJ1Jg7s63yWztvdRJkaB4kyuM=)
                          3: WUstWl87QBanTmWURCVqXXL8U-8.roa (hash: mzZYG9J7D7TdzZo6enH47d3mLQxZKbjYp8gkyKRxR54=)
                          4: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: opOQcviMXh+C2qMqUvpQIMBUFegzonMyWlV17uSd79s=)
                          5: ubRVwzdGReTzgXA9IHD-hKxUlhU.roa (hash: ZAX/VuNxnc29LHeqAdWwCVvQAzn2EfOmR0eloWLDonA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 18:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:dc:81:f2:db:9d:14:9f:99:9c:82:e7:69:81:85:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: May 18 18:00:12 2024 GMT
            Not After : May 19 18:00:12 2024 GMT
        Subject: CN=9f978cb6154e2358ad3ffc5ca16b4603ea100ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:77:45:16:54:d4:99:47:cf:92:59:86:ee:
                    5b:ad:a5:15:99:85:8a:a1:b6:2a:3e:7c:23:a3:28:
                    ab:c7:06:19:06:b3:0e:2c:65:3e:6e:4f:30:25:ae:
                    6c:cc:18:f0:37:e0:50:56:fd:db:e6:dd:0d:79:8f:
                    32:7e:1e:a0:a1:78:b1:cd:83:ed:a7:a5:18:74:c4:
                    cf:e9:22:8c:1d:d9:ca:ae:92:1e:b2:6d:7a:e1:98:
                    95:d5:75:ae:bb:79:dc:ee:58:6a:87:8c:d6:9a:6e:
                    d5:ee:61:d3:02:01:e2:8a:16:00:c0:2f:47:c8:0d:
                    0e:3a:92:f2:d5:75:33:10:03:17:bc:2a:32:f7:c5:
                    ef:1c:58:af:f1:67:9c:3f:fd:a9:06:e8:d3:c5:16:
                    29:57:c4:9e:da:fc:79:c1:d7:c1:ed:15:a7:0c:2a:
                    35:95:ce:9a:5e:72:ae:d7:7e:91:75:f4:09:e1:de:
                    9d:4c:20:da:b5:80:49:db:c8:e1:f2:6e:90:3d:e2:
                    d7:26:fd:87:43:26:f9:31:45:d1:86:cf:9b:ba:c7:
                    ce:23:eb:69:1d:3d:45:5c:80:a3:36:30:38:a5:2c:
                    b7:49:45:c4:b7:68:17:4d:41:1a:ef:d5:00:10:e9:
                    5d:aa:37:b9:12:a0:44:1b:bd:1e:ef:23:ba:fb:ef:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:8C:B6:15:4E:23:58:AD:3F:FC:5C:A1:6B:46:03:EA:10:0B:A5
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:84:6a:06:90:df:5a:42:6d:d3:4c:c6:9e:af:3b:f4:7d:2f:
         f8:03:d8:3a:e4:4e:0b:c3:93:f2:6e:5f:53:b0:2b:0c:e7:54:
         f0:27:84:40:49:1c:ed:91:d9:4e:97:f0:f3:56:15:79:b4:d5:
         55:b0:a2:ee:ed:90:71:01:8f:04:eb:7a:28:11:5b:d4:20:ba:
         29:34:1a:f2:8d:3d:14:96:fa:f8:06:ec:cd:11:7e:25:90:e0:
         6b:c7:e6:55:25:34:2d:ec:ff:b2:e0:53:a7:93:1c:4e:9d:2e:
         bb:9c:37:f1:dd:bb:5f:f7:ee:05:3e:f0:a4:ba:7e:e2:7c:d1:
         7a:e7:54:80:6e:49:92:7a:d8:80:72:34:86:3d:0b:32:00:12:
         55:61:68:36:8a:b6:09:f9:cc:6b:dd:ef:23:ca:a6:1b:45:5f:
         d7:28:73:4c:17:cf:af:50:ee:0d:c0:0f:c0:1d:c4:4b:57:ad:
         a2:93:a5:ff:ef:e7:ce:7a:37:fd:55:8e:8d:f0:b3:44:76:ca:
         25:1f:c1:e6:8a:29:d0:ec:6d:f9:37:e3:26:3c:5f:a1:4d:cd:
         32:1c:e6:ab:8c:dd:27:0f:40:dc:4d:57:5f:8a:c0:6b:9f:83:
         ca:ca:77:a8:bc:48:a5:f6:a2:48:a1:f6:98:ae:ad:2d:38:9b:
         65:64:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:17:52 2024 by rpki-client on console-fra.rpki-client.org