Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File:                     1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier:          pOEyDOTKcWVO+CGpa8WrgvDDMVscE7teSe7oodYf8BY=
Subject key identifier:   DF:12:51:58:1E:32:89:44:07:6F:F4:4C:52:9F:69:18:44:17:4F:1B
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer:       /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial:       018F8A49A1857D0699C868178E306B67B207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number:          117E
Signing time:             Sat 18 May 2024 06:00:32 +0000
Manifest this update:     Sat 18 May 2024 06:00:32 +0000
Manifest next update:     Sun 19 May 2024 06:00:32 +0000
Files and hashes:         1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: sfx0Sa0JG5LlzAll+Mrx7vCKzrbpoQ4L1ztSVXEbq8c=)
                          2: IQUY6hZIRlDD87bVe3Fdnfwe3cQ.roa (hash: yLkAZNO68WsfjR6Rq6ZHJh3pFlE8GxmK6nsysNArrSs=)
                          3: _D4aDdgXjfDC3w2x8vgzuFoc0_o.roa (hash: koCRhSdvjI0PZh70imVyxfMgs3ix1LtC+CWFg1BgnVk=)
                          4: afbV6p7LvuvEEyjVSuP-TtnXjNI.roa (hash: fB0GG3sjxq89aZXqrSQW/PX5OHHdGlDl7be2SycqE3o=)
                          5: cD1Y9rt792fQ-TazQwxzuH85B-g.roa (hash: /991gHkkNrAJOnOk8relhLJG9blT4WFiJp6SP0Leilw=)
                          6: g39fXJWWgdCYIuc9NcTAEnSqFg8.roa (hash: Pn0kxOQJZO5SyvSjWpMJbvsc56KeKH5wdJMaQRT8/1w=)
                          7: nc1mP5BfexK_yeyVv2zTWCwwwzY.roa (hash: zkO6Pll4dK4kF42u+5vqnHBGhM3Wi1hRQbcUmOb3Iqw=)
                          8: qOL2GhcvZfH468QXPCfSQ8BM5uY.roa (hash: nS7rWT9BeH8zXl6eqUXfOxluzVFf2FAVgD62ZhDeWtA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8a:49:a1:85:7d:06:99:c8:68:17:8e:30:6b:67:b2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
        Validity
            Not Before: May 18 06:00:32 2024 GMT
            Not After : May 19 06:00:32 2024 GMT
        Subject: CN=df1251581e328944076ff44c529f691844174f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:86:d2:a5:11:95:3b:29:dd:b0:d0:ed:6d:
                    b9:3c:02:09:14:5a:6f:74:40:d5:08:e3:34:d7:de:
                    40:fc:d0:90:81:d5:1a:64:d2:65:2e:11:43:32:5d:
                    cf:c1:a1:6e:65:af:1f:bb:86:3d:35:ed:12:2a:d2:
                    e0:ee:98:86:2d:d2:69:63:b5:64:db:b1:15:58:17:
                    e4:ac:11:43:5a:69:b4:2d:d3:bb:47:a5:b9:92:87:
                    78:24:03:8b:3e:a4:aa:26:b7:14:0a:d2:ca:da:1e:
                    c0:2c:e1:5a:09:29:ff:74:99:f1:6b:c0:10:b0:37:
                    0b:a6:db:d9:f8:71:ae:38:7a:92:71:a8:a8:3d:0f:
                    a6:80:38:a9:98:b3:48:65:db:ca:0f:e4:40:0a:da:
                    ce:36:34:4e:af:cb:fe:87:8e:e7:ac:92:d9:7f:b6:
                    49:ec:c3:5b:bb:70:f0:6c:88:24:1a:a6:e7:9e:09:
                    33:ef:e5:9c:b7:0c:a2:1b:2a:28:fb:e2:bf:e4:df:
                    9b:0c:96:ae:49:ed:2d:7e:be:66:06:22:ff:69:71:
                    9e:e0:ba:bf:c2:5b:03:31:9b:0b:24:5f:9a:42:28:
                    1e:26:23:c1:13:60:9a:fb:e7:97:e4:4b:7e:0d:0b:
                    71:c2:c2:c8:e8:f2:96:f7:44:51:09:cf:33:ce:5f:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:12:51:58:1E:32:89:44:07:6F:F4:4C:52:9F:69:18:44:17:4F:1B
            X509v3 Authority Key Identifier:
                keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c6:d8:8c:30:29:14:ae:c5:7a:81:6f:4c:d4:7f:ab:0c:f6:
         68:5b:5c:37:80:b8:1b:58:59:28:9c:96:2f:86:94:7f:df:7f:
         e4:b6:6f:f7:81:06:43:3e:bd:73:e2:85:af:27:4f:0e:0f:bb:
         53:db:b9:e0:31:98:bf:8f:37:7c:04:d5:6a:e8:3e:1e:45:e6:
         49:00:3d:e8:8c:f3:7d:29:bc:e6:5f:ec:e5:2d:9f:78:0d:58:
         37:96:ea:dc:04:a3:cb:b8:64:4a:c8:f2:73:c8:49:57:70:51:
         d9:22:04:e7:30:47:dd:48:cd:97:d4:ec:35:fb:c9:55:d1:db:
         f4:eb:9d:30:06:96:8a:f3:76:65:7b:cf:64:14:55:72:5b:8b:
         bb:ea:b8:18:60:6b:dd:ba:b5:db:de:c0:20:d6:f8:ad:93:41:
         9b:56:d1:10:26:2b:34:c1:c0:13:12:4b:2a:50:49:1d:98:fb:
         5a:84:f3:0c:8a:97:fb:eb:9f:84:2c:df:f4:b4:cc:54:43:40:
         44:0d:ba:6d:2a:8f:85:28:eb:06:ca:14:2d:1b:05:2b:69:d2:
         04:d6:11:e4:63:5c:cf:00:a6:20:26:d5:43:9d:c4:68:9c:7b:
         e1:28:da:25:e4:97:4d:c2:8a:fd:32:cd:83:c7:7c:e5:55:d2:
         97:7f:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:23:54 2024 by rpki-client on console-fra.rpki-client.org