Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
File:                     s57NJPMhmI3rfBncoFKk48SbYOo.mft (raw, json)
Hash identifier:          KRorAd/VNXgD0s8OHc1iuGRTwIWgBr2+6eD9kBZCrs8=
Subject key identifier:   0D:DA:C0:8F:F9:D9:48:0F:8B:12:8A:67:4B:4B:68:7D:DF:26:66:62
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Certificate issuer:       /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial:       018F9B3D66DC81FD4A36CB962CAA385AD493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
Manifest number:          1192
Signing time:             Tue 21 May 2024 13:00:43 +0000
Manifest this update:     Tue 21 May 2024 13:00:43 +0000
Manifest next update:     Wed 22 May 2024 13:00:43 +0000
Files and hashes:         1: 9XHxKJ0WI-P3IcOmFgGednxUJbU.roa (hash: ROHwJQ5aBds1pvosQThys7UgHao9D+lnQ9epORD47Ps=)
                          2: CAEBqCeQQKaZQxwXuUKfTAui-ho.roa (hash: MC9vXt0QY6CbqlRPG4LvPP3Kc2YfGF4RnraWWnJ9Lw8=)
                          3: DIc26-XqqdLdZnq-Jm-wxjzfvSI.roa (hash: jIKfOQ7MRjlOe75wSwbSoxNPgs8936hCqlZY7tfzLhc=)
                          4: DmK_EMA2E48Iv5iHNGgRlWxTEBM.roa (hash: aRzoG9oNEnHJoiFWb8qbL74EglgYgqiSBVgw4aM/eB4=)
                          5: DnaT0qJaGMculPKHxQnyJbIbX9Y.roa (hash: lczjgYuCKmP/00NqKfxqvqsCAwfV4h3DFQ2mDCZvhFU=)
                          6: GUsM4n0lEB6f8RpP9qCCBZxLZMY.roa (hash: +dKtcWvfKHqlMhBLBrBhtABSfzVcCnlhMXOCHDXquPg=)
                          7: I1tN2r1B9MM0dcBHLGMO_MUEbyI.roa (hash: /5eG+aEOaxUf/3vI8hiQ+V6Ahtmfz9CJp1Zey18lHDo=)
                          8: N81-PLZ7CZrD8E5tgzqH0n1Dn-4.roa (hash: ItbxJdHs3VaYqgsETmzM3RYt5jZs1GSREr8rp+vXqdE=)
                          9: aDDMo9Vj3LSI6syqna_JMnFfea4.roa (hash: JF/mEQDnI5tJBs9HgmQNAhOTIGEX1Exk34j0hsFwgnI=)
                          10: s57NJPMhmI3rfBncoFKk48SbYOo.crl (hash: ggMjtGhGRHF3Xkq4UqArmST7KlpLg/fQoFVk4Qe/8IY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:3d:66:dc:81:fd:4a:36:cb:96:2c:aa:38:5a:d4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
        Validity
            Not Before: May 21 13:00:43 2024 GMT
            Not After : May 22 13:00:43 2024 GMT
        Subject: CN=0ddac08ff9d9480f8b128a674b4b687ddf266662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:21:90:1a:69:59:80:b3:1e:cc:bf:e0:88:
                    a5:b0:a6:9a:9f:a2:5b:be:22:fb:b1:7f:03:46:e9:
                    5a:aa:87:ea:0f:5a:25:69:d0:fb:0f:6a:40:aa:a0:
                    38:88:2e:b8:02:c0:bb:23:0b:23:cf:48:a3:34:b9:
                    e0:3f:cd:71:e1:db:cd:87:02:9d:14:c3:aa:64:e1:
                    3a:32:a2:8e:9d:5d:92:09:22:d0:bd:cd:c0:d1:f4:
                    d1:68:00:d5:6d:32:ed:eb:d4:90:32:35:52:32:2e:
                    05:98:51:0b:48:17:89:3a:7a:a2:69:68:e9:fa:27:
                    e9:2b:72:b8:8d:91:bb:29:56:30:f5:90:f0:70:f4:
                    72:0f:e0:73:74:38:9a:47:51:62:83:5d:98:8a:47:
                    57:07:35:67:45:c6:c8:59:8b:7e:b5:0e:05:98:4d:
                    f9:fe:4e:48:c0:2a:d8:b5:0e:dc:2a:d6:d6:18:ca:
                    70:7f:02:03:b0:01:7d:5a:69:b6:8f:dc:03:6c:5d:
                    a2:b5:a8:b3:4e:81:75:51:0a:51:3b:68:47:14:a1:
                    8f:63:47:67:d1:d9:ae:14:98:19:d5:f6:2c:7f:d3:
                    43:a2:ea:d1:40:99:0e:c5:6d:a7:e9:b8:0a:40:bc:
                    23:0e:47:cd:cb:e7:5a:04:3d:14:93:fa:c2:4b:cd:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:C0:8F:F9:D9:48:0F:8B:12:8A:67:4B:4B:68:7D:DF:26:66:62
            X509v3 Authority Key Identifier:
                keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e3:8b:38:5b:81:a6:e0:a9:f6:b4:c5:b5:5e:d4:d4:69:4a:
         bc:e9:ca:bc:da:d9:1d:fa:cc:53:94:1f:6e:62:62:bd:49:aa:
         cc:db:b1:1e:a6:7f:8a:50:0b:10:30:57:60:a2:7c:0d:48:56:
         71:6c:a4:dd:62:67:5c:2e:9a:ba:35:fc:9b:7d:f4:82:bf:cd:
         51:60:76:27:c7:d3:78:41:17:10:ac:32:45:da:4b:6f:19:40:
         58:b1:66:eb:6e:ad:9b:ff:35:8d:31:b5:ee:3b:b0:b6:15:d4:
         1f:02:9e:ef:4a:89:de:f1:8f:e7:25:07:e8:79:96:76:f9:7f:
         87:a6:28:e1:99:d4:8d:a0:3f:ea:c6:fc:68:43:96:bd:6e:cb:
         90:b7:61:50:a1:11:6d:10:7f:a6:2e:4f:48:18:8a:c8:b3:86:
         58:4f:d1:a9:20:d9:0f:ad:ae:48:05:d7:d5:b0:92:d1:38:dd:
         10:0c:f8:16:72:f4:2f:8a:41:53:fa:82:47:85:5b:2b:99:11:
         93:17:ce:fd:a7:a6:2c:db:15:1a:81:56:01:c9:69:78:02:6b:
         f6:1c:72:d4:28:ba:37:97:72:43:99:49:24:93:6d:ca:d1:c6:
         fe:89:0d:1e:8c:7b:3b:1b:6e:98:46:78:ec:86:93:a4:c4:43:
         66:ff:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:58:33 2024 by rpki-client on console-fra.rpki-client.org