Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File:                     DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier:          RD+SRQcmIw77Uxy1WhsWOa3/hThA1+fvXgHN6/oSbec=
Subject key identifier:   FE:74:5D:CF:1A:90:BE:88:9D:1E:51:B6:4D:C8:02:B9:16:A1:FE:C8
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer:       /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial:       018FA063FDB3B90833EA62963B6B2E1B6C6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number:          1189
Signing time:             Wed 22 May 2024 13:00:58 +0000
Manifest this update:     Wed 22 May 2024 13:00:58 +0000
Manifest next update:     Thu 23 May 2024 13:00:58 +0000
Files and hashes:         1: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: vphgUn/Vw04GQkrDGyOU6UV5Z2/vOGuXxVhEwMMnpRY=)
                          2: KKRdZ-0_xERDK7u-dz12NqU2c6M.roa (hash: GwxCdfXBc/T0lMrooEqMstsB6ekR5Z6DPv2WraaOI7o=)
                          3: MWcOMuwEtxO1rHyAW9AEAEE_rGs.roa (hash: X+zcH0NMtTWKex4fvkUyU5ApV38Z0IxH4a2oM1PXno4=)
                          4: Wn9XEzShKD8khs-cF-1qr_q-yho.roa (hash: AXM7KhI1ht5+rpAsAzXDKKQaYAPikg4FWf9pDCXqaR8=)
                          5: asVJqUNiaaLh1kPN5ccKX5hTZ5Y.roa (hash: bsW+aHq6JxYhHX0Ee66z/bLsbi+HleZFl92FQri8CLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a0:63:fd:b3:b9:08:33:ea:62:96:3b:6b:2e:1b:6c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
        Validity
            Not Before: May 22 13:00:58 2024 GMT
            Not After : May 23 13:00:58 2024 GMT
        Subject: CN=fe745dcf1a90be889d1e51b64dc802b916a1fec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:16:bc:41:be:bc:c5:ec:a4:85:80:f3:90:
                    e5:9c:4a:97:a9:57:18:a2:78:cf:e7:b0:b0:0a:1b:
                    14:94:59:13:11:c9:9b:e8:cd:ed:41:82:66:cf:35:
                    3a:b0:c2:80:d9:ed:b4:1b:bf:18:43:a0:24:d3:45:
                    e0:2e:1b:60:28:1e:ee:2c:c4:9f:aa:80:b8:0d:71:
                    2c:7a:3c:cc:ad:83:ae:70:20:c8:2c:e3:c0:72:38:
                    c3:27:5f:73:29:99:8c:91:e7:46:83:75:7b:e2:01:
                    c2:ac:97:1b:18:98:1a:a4:e0:5d:2b:a5:d1:28:1a:
                    0d:52:19:56:07:c1:39:f9:f9:6f:22:d1:f8:87:f1:
                    43:10:1c:20:ba:15:e5:58:bb:14:c9:77:bf:db:96:
                    95:38:71:28:51:a2:c6:25:4d:9b:aa:24:89:2e:52:
                    f6:66:6a:ed:05:db:ca:32:ae:87:72:f0:b7:b3:87:
                    ad:1c:b7:e9:3f:54:bc:e4:6a:7b:9c:55:5c:94:05:
                    54:8c:93:67:ec:f0:02:7e:3c:62:3d:61:4c:90:bd:
                    c9:21:4d:b6:38:a6:78:cd:2f:ff:3c:56:96:88:ec:
                    d8:ac:89:92:df:6b:52:cd:f2:5d:b2:b8:36:31:9f:
                    93:ab:4f:68:dd:fa:5f:97:f6:15:a7:ca:a5:5b:5f:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:5D:CF:1A:90:BE:88:9D:1E:51:B6:4D:C8:02:B9:16:A1:FE:C8
            X509v3 Authority Key Identifier:
                keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:d4:c5:6c:cb:e2:89:31:b2:22:dd:f6:9a:7b:eb:a3:fc:
         3b:d9:77:84:bc:19:ed:56:ae:4a:6a:34:ae:ba:8b:28:1d:bf:
         1d:ef:98:c8:3d:b7:7c:6e:f0:3f:a8:b0:19:9e:31:34:48:01:
         63:2f:79:5a:11:21:12:94:4e:1d:d3:de:1d:19:3f:da:eb:9d:
         f6:37:10:ae:6d:99:1d:8e:30:35:84:15:73:30:f4:d7:93:d9:
         54:c4:5a:99:49:1d:4d:68:e3:20:db:f9:f0:31:eb:76:4f:07:
         bf:c3:f3:99:a7:48:d4:88:40:14:7d:5c:a8:8d:d3:ca:4f:3c:
         bd:14:83:d4:51:5c:0d:ee:56:63:a4:49:2a:b8:62:48:84:4b:
         59:66:56:bc:28:30:0b:97:af:ab:23:6a:32:bf:0c:ed:be:73:
         e4:2a:da:22:72:99:22:0a:ed:83:9b:41:c5:df:ca:94:82:43:
         c6:97:58:db:4b:18:fb:e0:8a:62:fa:80:4b:ea:a2:14:0f:bd:
         af:e8:ec:ca:64:62:d5:53:c2:b8:dc:9c:29:e5:dd:ca:d2:42:
         80:44:b1:b4:9a:30:ae:6a:d1:a3:84:61:22:21:fb:bb:93:1f:
         78:70:45:07:fa:8d:19:d2:67:95:96:de:88:7c:36:3c:88:f5:
         64:ef:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:28:23 2024 by rpki-client on console-ams.rpki-client.org