Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
File:                     uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json)
Hash identifier:          KOL6iE5spzRzcn6hM07xUaWBcG6eOoA8GiE6j1DT9pk=
Subject key identifier:   32:24:0C:1D:0E:02:7C:9B:69:50:00:1D:1F:93:F0:7A:91:75:A4:E8
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Certificate issuer:       /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial:       018F437A9B078C315EA78628BA6EF01ABBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
Manifest number:          115D
Signing time:             Sat 04 May 2024 12:00:59 +0000
Manifest this update:     Sat 04 May 2024 12:00:59 +0000
Manifest next update:     Sun 05 May 2024 12:00:59 +0000
Files and hashes:         1: 02DN_gznIfsZZeYb_yKpVaus1eE.roa (hash: Al/TZ32Md4MRERGfAY4tWPc87qkpZMMqWoLz80OGwRs=)
                          2: 6OQzZJt7u3gCsY72ao4LXZ6dM6M.roa (hash: YXRhwFXWdyFfNgENFtY9MzLeNr4T7DyBYormpcWqCfc=)
                          3: 8sOMRq3xsoRBp7TdpIKMCQ6MJuE.roa (hash: 49i1/QcMCTIJEzlwd6DLNRsi3SVVb9KD9ZCLatWf+sM=)
                          4: 9vVA2cE_3xp8HDpBUA6uIxOxOQ0.roa (hash: ENGrBT7rDhsfmnUyh0bvE3AUzO4vFOiuJYY7JA1aNRc=)
                          5: DPQcTVe-zkzt3A3HRYS90D6Hi5I.roa (hash: w7EnG6chn3I455eutuiqSjSRcWEa/rOaEIdcXVD6zWs=)
                          6: GV4fSKyooDL_9GCTRWLnAn4yCpQ.roa (hash: KgAZb4Hdapd15DDyIgPF+uYjKjMEZqgwb++U70wGsZE=)
                          7: MQCBTxmepaVQLz953ipFUmRFBbc.roa (hash: h6HMwF6NSuvkUGTfUySxeFqmBKiip+JwXi8u9MjeU6s=)
                          8: tYR2t6XLlJlrCnEBwgsb5sY7qYs.roa (hash: JHavKTgKXDxVz1X1PCoeu6d5p5Md9s5G/iy/pke0rGc=)
                          9: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: 3oBVQCMERPwc4mHpHN/3CGa0hkJzQq+rryt5D1ap2R8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:43:7a:9b:07:8c:31:5e:a7:86:28:ba:6e:f0:1a:bb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
        Validity
            Not Before: May  4 12:00:59 2024 GMT
            Not After : May  5 12:00:59 2024 GMT
        Subject: CN=32240c1d0e027c9b6950001d1f93f07a9175a4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:8c:b8:93:da:b4:fe:a8:9a:01:1a:f2:85:
                    a0:f1:ba:0f:fe:b8:51:f1:82:6b:d3:58:bd:a9:8d:
                    a1:3d:f6:62:93:b3:2d:98:ec:90:df:a8:fd:31:cb:
                    2a:db:f3:6c:95:f7:3d:0a:52:90:df:b4:22:96:97:
                    06:00:a3:61:40:5b:09:1f:a3:43:0b:62:f2:ae:3c:
                    3c:b0:87:0e:bd:7f:57:f8:a6:08:48:09:f4:3e:9d:
                    ee:d7:99:01:af:8f:b3:37:34:91:4a:c4:31:88:13:
                    c5:5b:6f:ad:33:bb:24:23:bf:e3:89:0e:27:ae:46:
                    ee:82:ea:7c:b4:a8:b1:95:f1:57:d4:64:e9:7c:36:
                    af:44:b2:c2:66:21:45:37:ea:a1:df:23:84:43:35:
                    2a:39:97:a7:ae:31:3f:08:f5:60:fe:25:11:a7:4a:
                    b3:20:43:8b:d1:15:89:a0:96:b4:0c:30:e7:e1:36:
                    2f:05:36:5a:76:59:ad:24:de:3d:f3:c1:21:1a:ce:
                    77:54:3c:c9:bf:5a:b4:e4:a0:f8:56:00:f5:53:32:
                    ab:34:47:b8:09:91:82:f3:de:8d:22:32:b7:ac:42:
                    d1:ce:8f:da:b0:85:5c:45:c0:3c:8b:6e:2b:fe:fa:
                    ce:3f:63:ce:03:20:a7:11:32:c6:b8:15:34:92:8a:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:0C:1D:0E:02:7C:9B:69:50:00:1D:1F:93:F0:7A:91:75:A4:E8
            X509v3 Authority Key Identifier:
                keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:66:1d:1b:d8:f0:d0:fc:82:45:ca:e3:c4:b6:8e:08:16:52:
         c9:14:e2:fb:63:05:28:64:a0:5a:17:bc:02:9d:51:8e:b8:91:
         f8:7f:aa:91:c0:f9:a6:f8:45:e0:8c:b4:bf:d7:8a:8f:31:48:
         75:c8:f8:cb:b4:4a:d8:e4:93:77:60:ae:e2:e7:8d:19:93:9d:
         62:5d:b8:0c:5e:74:9e:ac:4e:57:f1:af:2d:99:a5:87:65:20:
         45:f8:a7:2d:02:04:ad:76:58:e2:71:30:cb:76:e2:1b:21:0c:
         cd:29:7b:e7:a4:de:71:78:c4:a1:00:db:77:f1:81:91:2f:db:
         c0:17:95:88:18:f6:b0:97:ac:b8:f8:0d:81:5e:59:4b:63:1f:
         16:e9:62:49:9b:90:f9:c3:8e:c6:06:58:a0:ba:a6:91:ce:3a:
         64:6e:10:38:17:53:c1:b9:c7:91:20:ac:1f:f3:2e:98:1f:b6:
         98:6d:df:7e:e8:99:1c:2e:46:2a:a7:1b:ba:96:f4:e9:c5:39:
         c7:18:c7:f7:67:70:bc:14:d7:47:80:e8:61:a4:dc:b8:0b:2a:
         dc:6b:b3:16:64:f1:90:53:f1:fb:8b:fb:54:0f:df:aa:2f:15:
         ff:50:6f:28:40:45:0b:dd:1c:9f:91:cb:e5:b0:ec:6e:69:b7:
         37:56:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:34 2024 by rpki-client on console-ams.rpki-client.org