Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          emeVwXZAf8l6xTgrVNRE87qqoJ6IDa9OtLa/HM16vh4=
Subject key identifier:   9C:B4:01:98:F5:58:69:B0:2D:BA:47:14:1B:0D:27:DC:8A:D6:13:14
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       018FBE00CF95E3FD15895B95B7EBFE561FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          BF
Signing time:             Tue 28 May 2024 07:01:15 +0000
Manifest this update:     Tue 28 May 2024 07:01:15 +0000
Manifest next update:     Wed 29 May 2024 07:01:15 +0000
Files and hashes:         1: 3vLmPv7Djr6TKH8h-94292rkuas.roa (hash: QtPMjz6hCorikM+hOJr55a+h94gKpssEGVbmMdG9iwo=)
                          2: CyK6Yv7sUzE_Lq7ybNrYqY5eubw.roa (hash: AgZgN0Z+nm8oADFCmN/RR4ciQfAHc4zYz6iD7dHfxfU=)
                          3: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: O4pkDZZzog4VK9ZA8S0+PSq0Gnc5Y2J26V7dvSbSifM=)
                          4: Mhb9g1GW1ic5B1uHQQcAKZQcE_k.roa (hash: FpzRxrdL5GM1JZOZ9tmbgTdHPgyrYrFJIBXSZ3ts6QU=)
                          5: W0mQMZT0Zf4RaR6-AerqmmbEVyM.roa (hash: dhdER9ewgz23PiFYCXseGx9Yn2jG69W/ZYo4DzLqA+s=)
                          6: YogE9d5tH4k68Tt8pwZMnLBty98.roa (hash: uGUbLbhQePNMe2N5mijv6MQR7j0HWESjfb97Dlgfedg=)
                          7: _9EuO7Q9wi0_iwgv-vtLCcRAk40.roa (hash: 7LxWufqxWX4EHv+OGn5XkEjQ1WmdCTgQGfEWl73EFs0=)
                          8: f4LnTDkkCsISE3hbkhAWVsFcsbM.roa (hash: 2isKhp0DeEqoOa/JMwLM+H7q6yvFrj7uy9YZsWVHm/A=)
                          9: zlGre1HI3QgDki2y48vB5K78dKU.roa (hash: u0r3Y/yH2NV0pGG+wY0JrEFpe3ETVzPG4rbbyTHLmIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:be:00:cf:95:e3:fd:15:89:5b:95:b7:eb:fe:56:1f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: May 28 07:01:15 2024 GMT
            Not After : May 29 07:01:15 2024 GMT
        Subject: CN=9cb40198f55869b02dba47141b0d27dc8ad61314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:d5:17:7c:c1:5e:6a:b7:ee:aa:70:c7:45:
                    6c:ba:56:ba:cf:83:53:63:03:f6:6c:c7:c6:c5:cd:
                    ec:dc:54:44:ae:15:ac:5b:db:55:e3:60:79:70:39:
                    a8:bd:d2:d3:70:91:85:9d:56:86:eb:b4:5d:61:f6:
                    87:e8:9f:68:ab:e2:8f:e7:ea:28:f8:5b:d2:a4:6f:
                    d9:0b:fc:af:f3:57:fe:54:42:5f:77:07:da:7e:a2:
                    72:d5:03:bd:4f:48:a8:b7:cc:9c:81:f5:67:45:cf:
                    31:1d:ae:9b:7c:85:2f:02:dc:60:00:75:dc:03:18:
                    3d:ab:d9:f1:20:3d:66:2f:00:bc:a9:77:fe:f4:93:
                    b4:c4:d1:d7:8d:ce:45:99:3f:b6:75:19:4a:f1:76:
                    e3:9d:26:0b:9e:c1:24:dd:ec:bf:7c:82:bf:07:7a:
                    46:5d:48:3e:f9:f1:21:fd:86:6d:05:47:50:bc:a0:
                    df:e3:93:5d:43:f7:58:87:92:7a:c9:06:24:4e:ab:
                    b9:18:50:9a:5a:05:1c:6a:2a:cb:82:85:e5:a3:3e:
                    f5:4f:f4:3b:93:b4:0b:fa:e3:59:07:1a:7d:40:b1:
                    a7:55:34:6c:6f:bb:74:17:65:c8:d2:f4:7d:9b:1f:
                    13:16:9d:52:9b:94:2b:d6:65:f0:55:1d:4c:1e:6a:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B4:01:98:F5:58:69:B0:2D:BA:47:14:1B:0D:27:DC:8A:D6:13:14
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:15:36:1f:04:77:54:26:b7:ce:ab:60:2f:c3:6d:f6:37:
         61:67:27:36:d3:01:b7:f5:ee:8e:aa:f7:a9:c9:d7:63:66:2d:
         f1:a3:a8:98:3c:ed:e3:2d:08:55:32:fe:59:2b:1e:6a:6d:2a:
         0d:d6:6c:48:78:ee:e1:64:6a:ba:7b:10:f4:28:35:29:02:e6:
         90:02:8a:3b:b6:41:6a:6e:6e:8c:f7:51:56:c8:48:ff:42:07:
         96:3d:3a:d7:c1:df:d3:ea:e2:d5:49:9e:00:6e:75:c0:ea:62:
         c5:47:e0:09:ee:a8:93:ef:b4:7c:e1:62:82:ff:1e:e9:f3:1d:
         2a:ea:cb:e8:b8:a1:a4:1d:e5:99:aa:00:22:08:f8:70:86:16:
         a4:a9:3d:2e:3d:66:c7:4b:17:63:af:5b:f6:e6:a6:82:c5:3e:
         e9:f8:22:74:3c:87:ee:5c:0e:6b:60:11:d4:4d:de:58:51:17:
         8b:47:cc:a4:5b:bd:75:33:82:26:31:e1:20:18:bb:44:9d:d6:
         c4:a4:02:de:b8:04:47:c1:b0:22:bf:75:fc:b9:10:b7:ec:c0:
         0a:73:fd:7d:c9:34:8d:20:b3:89:b3:d2:3e:78:a7:f6:59:d1:
         14:69:b8:72:a9:f0:13:67:75:a3:11:6c:d0:69:33:00:61:90:
         4d:fc:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 16:29:20 2024 by rpki-client on console-ams.rpki-client.org