Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
File:                     zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json)
Hash identifier:          Qllf4NER3JPeBmfZQqBNZN4CRHPIoOUL3IPOwQvihTg=
Subject key identifier:   2E:4C:91:B1:87:7B:2D:5F:45:22:34:09:C2:FE:8E:D1:40:95:4F:82
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       018F5CCF19C961F4F6740D631CB5BDD73197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
Manifest number:          1166
Signing time:             Thu 09 May 2024 10:03:47 +0000
Manifest this update:     Thu 09 May 2024 10:03:47 +0000
Manifest next update:     Fri 10 May 2024 10:03:47 +0000
Files and hashes:         1: 0xHjVSZdRfrStkMzArdqdZbKInA.roa (hash: QcW+K87diU5BkEN/PvkZJcP6sfhBwWdtE+/6h6H/nQk=)
                          2: 6GjqnuCuDVv_J-V6e1fcSAZNM8Y.roa (hash: +2ZrqdKMGq4za9nf9hc6i6aIsUE79Pri6Ng9W87kHR4=)
                          3: V-WztWpNQN3v70M5nFo3CeYonfo.roa (hash: sb09Cdd8d53Y4vQ3YKix/zgsSHBlBJmxWU03hD1ua9Y=)
                          4: X5WodBu3Me40y58jT9DgXkn1quI.roa (hash: 3Ux0oyp+2KFx72lcCbMaI/bInQzpCCbNZvrymtK0yVM=)
                          5: XWSuYIY-y_Sya5OxmXkQqjup0gc.roa (hash: 9QVWsqoBncVVxPPAkJC0HV52oWAgLzg1gTvmGQ68mTI=)
                          6: kL9QonV4wN-kpc9dHdgV56YtQl4.roa (hash: wDwu1ONeglr5+9PFg3ggzb7lNzthhjoc891qfzymJV4=)
                          7: mYcpzNPDBX_MC14MZpRFwBuQFW0.roa (hash: 1IRYr7sXLXl6b6ffdA9wcVI9nCBPOO3s6yuWRC+ZNaI=)
                          8: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: 3UY6ayhYUBN4GH8ACafYj/IkjtirrRCpEQEBLrtuU3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5c:cf:19:c9:61:f4:f6:74:0d:63:1c:b5:bd:d7:31:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: May  9 10:03:47 2024 GMT
            Not After : May 10 10:03:47 2024 GMT
        Subject: CN=2e4c91b1877b2d5f45223409c2fe8ed140954f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:22:ee:c9:c6:76:9f:d5:19:59:d1:6c:0b:
                    9d:0f:5a:4d:20:ff:49:a9:e1:62:46:34:8a:e5:aa:
                    b4:45:80:cd:39:55:be:1f:7d:4b:fa:1e:d8:c4:cd:
                    ae:88:f2:01:3b:15:de:4c:9b:78:7d:76:fe:d7:29:
                    46:a8:cc:ec:dd:81:c1:3a:ec:1a:15:77:00:f5:f5:
                    91:ec:1f:8e:f1:5e:20:4f:36:71:52:5d:e0:19:48:
                    a7:b8:ce:d9:47:43:b0:22:5d:3a:d2:f2:5e:8e:59:
                    cf:a9:a5:92:72:44:4e:c2:46:6c:20:67:a2:b3:85:
                    20:7a:07:12:be:27:a0:7f:dd:d8:dd:55:47:75:12:
                    21:64:d0:50:b1:40:df:b3:2c:ad:dd:f8:5f:c8:8b:
                    c0:26:6c:60:c7:96:ec:af:44:45:ac:ff:dc:5a:8a:
                    af:c1:ff:e7:e4:17:77:c8:6f:ca:1a:b2:46:d3:c5:
                    c5:2e:3e:8b:9c:23:60:8a:86:bc:6a:38:37:6a:fb:
                    7b:f3:e0:79:a4:04:27:9b:ee:50:db:e2:85:b9:8f:
                    26:ac:ad:a9:49:b2:01:14:07:ca:b2:9d:64:61:8b:
                    b3:11:74:37:51:05:7a:53:1a:3e:40:8b:fc:c7:eb:
                    7b:ce:a4:b4:3e:ae:b6:ec:a4:ce:8d:ef:65:c2:fa:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:91:B1:87:7B:2D:5F:45:22:34:09:C2:FE:8E:D1:40:95:4F:82
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:73:02:2a:a1:56:1e:a2:69:99:ad:58:f6:e8:22:b3:1b:
         dc:aa:df:62:89:00:a5:5e:4b:5b:19:7e:20:f1:af:51:6f:00:
         cb:73:a0:8d:bd:1e:8e:36:48:0d:f2:4f:e5:0a:a8:9e:90:60:
         91:80:af:1b:b4:f3:3a:19:12:12:18:d9:c2:e0:09:5b:f4:67:
         3d:32:7d:61:fb:07:4d:7d:a3:64:46:4b:92:4e:41:17:92:ec:
         f2:9d:bd:87:94:4a:5a:3e:04:38:8d:b6:18:5d:9b:35:20:84:
         69:2a:16:d1:0f:41:70:23:6a:89:4d:af:a5:03:c8:d0:9c:18:
         5d:a6:bb:34:fb:ab:84:ad:a8:23:1e:94:10:2c:56:64:91:cb:
         cb:20:89:05:73:f9:40:39:5e:62:0c:72:2d:1e:44:b8:83:8a:
         eb:35:1a:e3:30:4c:bf:13:52:0e:77:08:36:83:b4:fe:d5:4d:
         09:2c:aa:f4:eb:08:05:3e:56:c0:38:f3:e2:fc:74:8c:67:2f:
         80:df:5e:0a:2d:6f:cf:d5:e8:cf:17:05:bd:9f:3d:6d:e9:c0:
         b2:f2:2e:e1:ea:50:9d:38:9c:59:4a:22:aa:f1:e8:e1:e0:2b:
         8c:5a:ac:2c:80:cd:c7:af:0b:fb:7e:83:47:9a:9c:39:04:16:
         dd:43:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:44:53 2024 by rpki-client on console-fra.rpki-client.org