Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File:                     ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier:          +cTUIoHCPHenAVDRkHRdwAbELPsfJuxg+DK0F5qSw1w=
Subject key identifier:   81:1F:B6:A8:97:24:57:D0:4C:82:2C:78:FD:1D:A9:93:50:76:74:46
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer:       /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial:       018F91956A66B8B611C56223D85B488DD5E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number:          1185
Signing time:             Sun 19 May 2024 16:00:39 +0000
Manifest this update:     Sun 19 May 2024 16:00:39 +0000
Manifest next update:     Mon 20 May 2024 16:00:39 +0000
Files and hashes:         1: 0AtOMx3GMp8OKbd0zDtyhgNvnMI.roa (hash: XntkTQYx6zbxMxgEUFM5FghV6Ex6L9BfGOqifyM6IRg=)
                          2: 5t56b3Sui8opDor2qpOSpC7lFeA.roa (hash: hJ7FUYTVqVwIJYo7T62Rv81+FZ6uzPezO1YHIN8inwg=)
                          3: JRmyJvjV9zY3qW53hCmK-0O4Ppk.roa (hash: 4X/INGAPkC3yVtoG+zshxMbswXYxmkp2vBzXzr+Ly50=)
                          4: Nm65lGuUUymkpXTTQTZB0fRUNIw.roa (hash: atTIaYltxI4gXCLGOZMdrfMhtlurFnFIu6Ede1esEiE=)
                          5: SgJoq_JXOHPPXgkWUOkCz5gPk6s.roa (hash: NmF/AVtyev/GKo60w0bXclZSZOH5Rh7lY3L7fhrCVbw=)
                          6: V2lIHOSX_UHMP4MYhy90IIkq82E.roa (hash: slNJo+fYcENqUvWvCsT1GuH/FBOUrw1jQu9fQYBMg9E=)
                          7: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: pZ1OOok3X8xE3kFTu02zQOKwZKs+QUORhSVNPFmcX/U=)
                          8: nKFRdFKHdKrcHgMrXWnjKTW47GQ.roa (hash: e9o2f/UUy+WppCIS2bjxtBejfsTc2krGHi/DdTGwtTQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:91:95:6a:66:b8:b6:11:c5:62:23:d8:5b:48:8d:d5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
        Validity
            Not Before: May 19 16:00:39 2024 GMT
            Not After : May 20 16:00:39 2024 GMT
        Subject: CN=811fb6a8972457d04c822c78fd1da99350767446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:44:4a:80:04:da:5c:49:65:b3:d9:67:9b:
                    12:33:e3:39:b5:ea:27:8f:e8:a5:28:67:83:1d:c2:
                    90:ae:c5:ce:6d:8c:aa:0b:e0:ff:e6:1e:dd:9c:2d:
                    56:93:f3:04:e8:dc:92:38:1c:4e:ab:8b:fe:82:0d:
                    be:e7:9c:2c:2d:5f:1e:00:55:e6:d7:9e:e1:15:ae:
                    73:56:c3:e4:84:f6:58:61:d2:63:17:f0:22:16:f1:
                    07:a4:53:60:5e:23:7b:82:62:bb:bf:13:3a:81:5d:
                    d0:12:3c:c6:a4:9b:86:0d:e3:53:f2:4d:75:98:2d:
                    2e:ef:bd:13:98:df:ba:b1:a0:71:bf:1d:e6:84:8d:
                    4d:b0:8c:5e:51:dd:3f:85:01:d0:83:38:3e:a7:75:
                    16:96:32:96:45:0a:90:42:a4:71:72:c1:b4:98:4f:
                    0e:11:ec:97:82:57:7f:9e:21:29:20:dd:30:09:66:
                    5b:47:98:25:98:fd:9c:98:d6:e4:09:e8:84:3d:c6:
                    f5:e2:97:23:7c:cd:6a:5a:b5:45:16:b8:73:df:30:
                    bd:f4:f1:91:90:b0:d7:59:24:df:9b:e2:da:02:60:
                    07:c3:60:eb:87:e6:cf:c2:72:18:b6:86:13:f2:09:
                    d9:09:ed:f5:cf:e4:c5:1b:06:d4:cf:3a:b9:49:db:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1F:B6:A8:97:24:57:D0:4C:82:2C:78:FD:1D:A9:93:50:76:74:46
            X509v3 Authority Key Identifier:
                keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:99:32:9b:95:e8:a0:e4:6a:6a:1c:f9:39:72:f8:6c:db:be:
         cd:46:ae:11:53:b2:21:40:10:31:da:81:04:1f:cd:7d:48:6f:
         51:f0:59:5a:b1:6c:13:44:02:63:cf:4a:c2:b6:2b:72:50:21:
         23:23:62:1f:aa:65:2d:70:b8:cf:c7:80:68:b9:81:fa:7b:7e:
         0e:9c:a3:c9:da:bf:dc:dd:cc:fe:1f:6f:34:17:a5:af:81:5e:
         a3:d6:ae:95:12:95:d2:36:9a:6f:7a:df:94:3a:11:10:67:cb:
         ed:2e:93:ed:6d:eb:3d:f5:2d:3e:07:55:59:a7:8b:1b:c7:b2:
         20:3a:ce:5a:c1:b7:0f:f8:de:a4:c6:c7:cc:55:e5:ca:bc:5d:
         1b:93:b1:c1:88:69:dc:3d:d6:56:71:db:a1:a9:43:f7:4b:9d:
         fb:d1:79:d0:95:d5:c3:3f:f9:47:61:85:99:25:27:3b:4a:7a:
         c3:45:6e:6e:72:b9:85:c3:20:1b:f1:f7:3e:a4:89:21:e2:0a:
         e4:3a:4d:71:c1:99:39:9f:4c:2b:8b:7c:c1:2f:0a:41:70:08:
         93:c5:56:02:bb:71:56:b3:e5:22:30:b6:d3:b8:8d:5a:c7:71:
         5d:18:33:cc:27:49:da:b7:f1:5b:64:d5:bc:08:4c:2e:3a:53:
         e4:52:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:33:47 2024 by rpki-client on console-ams.rpki-client.org