Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File:                     pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier:          wX74To7FXs0XCmuFxzK+oV2E8Y9Y2ZNbtnHijt+zBK8=
Subject key identifier:   E5:FA:79:8C:38:73:08:11:D2:F1:9A:C7:07:CA:7C:74:AA:4F:A4:4A
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer:       /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial:       018FA2F750790C0DDEBDB7B433F316F0A373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number:          071F
Signing time:             Thu 23 May 2024 01:01:07 +0000
Manifest this update:     Thu 23 May 2024 01:01:07 +0000
Manifest next update:     Fri 24 May 2024 01:01:07 +0000
Files and hashes:         1: KCt6vRaN193YobStHJwvIzkRKfc.roa (hash: xVRPI+lcYUMaQrInbbM2+8sqMl1sir5/M7jWnYp4ucs=)
                          2: QpgFlw0-DKUIva8O3uhtPm_FUZk.roa (hash: gh+lxhuX/59ZD/WA2cuSIw4CdW0ygArUittC+V8f6OM=)
                          3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: w+TenSvoMfIxvd+9Tx/Nt4C7GaIBZtjiX24Vo7WsGzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a2:f7:50:79:0c:0d:de:bd:b7:b4:33:f3:16:f0:a3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
        Validity
            Not Before: May 23 01:01:07 2024 GMT
            Not After : May 24 01:01:07 2024 GMT
        Subject: CN=e5fa798c38730811d2f19ac707ca7c74aa4fa44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:5f:c0:03:2f:8e:2a:fa:06:b9:ee:a0:1f:
                    8f:e4:30:6c:7d:67:1a:79:47:98:0a:c8:22:7d:c7:
                    43:8d:31:5c:f0:e5:9e:b2:48:e9:d2:77:4c:f4:01:
                    06:77:01:37:d3:4d:1b:fc:b4:76:2f:7e:f2:b8:85:
                    4c:1a:6a:42:b9:f3:41:65:bb:22:dc:4a:f4:43:ef:
                    3b:b3:ae:ef:31:9f:f5:a1:e9:51:3b:b0:a7:69:ac:
                    12:64:51:ec:69:d4:5b:c5:12:61:30:b6:e2:4b:79:
                    fe:df:54:b2:3a:08:5f:e1:56:68:db:a9:4a:53:94:
                    06:07:03:a5:46:e1:9b:50:07:0c:04:5d:2e:ce:79:
                    82:2f:e2:0c:4b:7d:f6:15:de:b8:c2:73:dd:f1:c6:
                    60:41:6f:fc:56:85:c6:de:e2:ed:c6:8f:ab:fb:51:
                    ab:7a:27:29:44:cf:57:57:95:db:8c:ac:96:c4:c9:
                    e2:6b:12:80:c3:64:ca:42:2c:00:30:c8:db:6d:a0:
                    34:4a:ea:ba:93:17:6f:00:b3:de:7b:82:da:6e:c3:
                    22:e5:4a:3d:46:f7:0f:a8:df:38:07:25:e3:6a:87:
                    35:e7:7b:cd:7b:5a:33:71:18:1f:d4:d0:50:ee:27:
                    e8:8d:93:0e:17:e6:ed:a2:e8:8f:dc:26:0b:10:c3:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FA:79:8C:38:73:08:11:D2:F1:9A:C7:07:CA:7C:74:AA:4F:A4:4A
            X509v3 Authority Key Identifier:
                keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b8:7a:76:97:f1:2d:dd:60:1c:b9:da:31:ee:e8:06:ac:eb:
         a1:ca:cb:42:52:92:29:40:1f:a4:13:bd:d8:ca:c7:3c:34:2d:
         8b:96:92:f6:ce:73:bc:0a:94:30:d9:71:86:7c:da:f9:c9:f9:
         79:50:54:bf:9b:1d:78:f7:58:df:22:e4:5a:7f:ff:7c:e3:b1:
         59:34:f6:1b:28:22:e2:5f:58:c9:af:fe:7b:29:c0:4b:9b:e6:
         5b:aa:f3:5a:ff:08:36:41:b0:09:ef:4d:bf:75:13:5d:43:6f:
         00:b8:68:76:f4:17:43:2c:d6:d6:24:4a:a1:f5:c4:3e:a3:2b:
         be:75:c0:0d:a8:dc:e7:26:06:f6:27:aa:40:56:df:33:6d:43:
         e9:4f:42:41:f2:20:ae:c0:f8:2d:54:99:90:16:2f:55:fb:db:
         c4:cd:ca:3f:28:35:76:5e:b0:92:ae:56:e4:e5:bb:c3:cf:91:
         b0:c4:51:e8:47:2f:2b:c1:08:0d:69:7b:16:42:fd:2e:a0:33:
         34:c2:21:5a:03:a2:63:f1:61:67:10:82:89:74:ec:ca:f6:8a:
         26:2c:15:0a:78:17:66:43:87:df:2b:25:11:47:0d:df:d0:4e:
         cf:fe:30:78:6d:28:59:e4:d8:0f:3e:ba:51:89:61:53:df:e8:
         14:53:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:11:04 2024 by rpki-client on console-ams.rpki-client.org