Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          Zjj9Eja8D6cdLYxBDERy+MwVdXfnL1PPkhM4A4FL730=
Subject key identifier:   4A:FA:6F:08:3B:51:C5:8E:8E:11:46:68:B2:40:5E:C4:48:89:E8:99
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       018FB5341EDD2499AE1B7E94E5AD08943073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          0EBB
Signing time:             Sun 26 May 2024 14:00:42 +0000
Manifest this update:     Sun 26 May 2024 14:00:42 +0000
Manifest next update:     Mon 27 May 2024 14:00:42 +0000
Files and hashes:         1: 6P5QhBox8f1FD5DRtL_bSAN92yQ.roa (hash: M45HxJTMaprsaE1PmI1YokaWjkTOLJZLeS5VKH+0JsA=)
                          2: G10N9QIJrw78dwc6N6vHPg1h-dY.roa (hash: GzfGW1VX6jchYsyt0iS1CzyCJEq9P6KCAtvflPmGACw=)
                          3: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: fBnmsjcS8dIo12BWROnWog7EnlJchWqUTDURpWszcJU=)
                          4: n8Qy3rSGsjWQ4cHYZ_4wxrVj_7o.roa (hash: ZvAFqxTMxvnSTbkPJu+0clrkrEyN0rVBihqjZ+ZH0is=)
                          5: r2fMVW-IDkAJ5LeDSFJjM_dq-c4.roa (hash: bS92CnkuxdwUJdm6yfdyJaUhVnsL6UHHMAgPPhGG0Pk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b5:34:1e:dd:24:99:ae:1b:7e:94:e5:ad:08:94:30:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: May 26 14:00:42 2024 GMT
            Not After : May 27 14:00:42 2024 GMT
        Subject: CN=4afa6f083b51c58e8e114668b2405ec44889e899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:95:f8:75:8b:a3:8b:05:e9:68:95:06:71:
                    ea:ff:e8:80:ac:91:bf:ae:0f:7b:ca:20:af:f2:4e:
                    ca:0e:02:97:5e:c1:d9:e5:5d:00:c3:88:71:08:8b:
                    8d:a5:4d:15:bc:9e:d1:c8:0c:36:56:8a:23:b1:df:
                    6f:dc:18:4f:7f:c3:cc:fd:cb:2d:fd:76:4a:0d:a5:
                    5c:3a:50:2a:ed:2b:d5:b3:37:80:8f:ae:d0:e1:08:
                    e3:77:b8:dd:14:76:14:11:d7:cb:fb:53:f4:a2:15:
                    4b:e3:1d:9a:6f:33:75:09:ca:09:b1:d3:0e:44:5c:
                    0e:08:3a:c9:9d:48:a7:e5:cb:26:02:55:ef:fa:2c:
                    77:40:bd:be:6f:ce:9d:89:bf:7c:e9:cc:90:7f:f4:
                    d1:16:22:06:09:41:f2:5b:a6:39:5b:37:7e:0e:e3:
                    ed:98:6d:9b:48:6b:3d:8c:7c:66:ec:07:bf:88:fd:
                    e3:21:4d:07:cb:08:a9:9d:da:56:17:2f:fb:4c:2c:
                    5a:3f:0d:95:45:76:d0:1b:d3:84:e3:2f:e3:4b:a2:
                    26:9b:40:b2:56:27:e3:5e:48:cd:21:00:f2:c6:95:
                    02:e7:72:e0:69:c9:92:17:d8:b5:ee:fb:6e:1c:e2:
                    59:63:ab:ad:be:43:ac:55:8d:97:3f:a9:ce:2d:23:
                    c4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FA:6F:08:3B:51:C5:8E:8E:11:46:68:B2:40:5E:C4:48:89:E8:99
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a7:d6:53:62:8d:27:d2:9b:85:06:eb:ef:af:29:bc:e2:c8:
         64:c1:fa:5e:40:49:87:a4:36:4c:94:f8:6a:78:b6:c5:c4:bf:
         39:79:c9:4c:61:a5:9f:ac:ff:ef:30:4a:3f:c2:f4:5c:c1:92:
         2b:b0:49:ae:59:7d:df:38:91:25:c6:1d:14:18:29:b3:59:5f:
         43:11:56:42:ce:31:92:0b:e9:32:84:c8:36:fd:ec:45:63:8e:
         52:6b:14:c6:7a:78:52:56:64:b7:6c:02:02:89:54:ba:6d:c4:
         76:e3:2b:6a:82:77:3d:af:71:58:b3:26:32:20:4b:52:96:cb:
         1a:70:d5:44:dd:2e:ef:66:36:0f:35:fa:37:7d:e2:5a:64:8a:
         7e:24:e4:4e:61:14:02:f6:b3:48:26:96:54:db:81:74:b0:c0:
         e1:2f:25:5c:af:3c:9b:cb:19:20:7f:84:0e:14:70:02:a5:ca:
         69:e8:26:ef:6b:d7:44:86:fa:50:3c:85:a4:d9:51:56:5b:d5:
         c2:96:10:60:0f:94:c6:f7:30:bb:83:4e:67:93:64:ab:2a:fc:
         57:e4:9c:3a:8f:b2:09:c2:f3:cd:b2:9f:f4:74:31:c8:22:b5:
         60:9e:62:b8:5e:7d:f5:11:f9:9a:7f:2e:df:b9:24:06:7c:98:
         06:57:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:19:56 2024 by rpki-client on console-fra.rpki-client.org