Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          BmCum1AFICuMx2DlP6u241F64+IDBe44N1vHbNkkQ6I=
Subject key identifier:   4A:05:96:E6:9D:50:C1:14:E7:04:14:41:C2:F8:C0:E7:E7:17:B2:AA
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       018FB3B3D6279BF0164052166F9451F79A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          1194
Signing time:             Sun 26 May 2024 07:00:58 +0000
Manifest this update:     Sun 26 May 2024 07:00:58 +0000
Manifest next update:     Mon 27 May 2024 07:00:58 +0000
Files and hashes:         1: 0cqXSzv4VuB4JQ8P-APOgsdsK60.roa (hash: +3Wtw2XldcQSODQELpOWPEK0CGjmX4KNsKkI3rn48yU=)
                          2: KmvCujp4Pt1IxsQkXfaZO0sgRGE.roa (hash: 1l6nh3pmp1X8hN7FRlSqevA9WAotoCNKU2lVjgLlD+Q=)
                          3: Qqg9eqagY2OCtlh4W2g7NHT_CAw.roa (hash: nt7GYXL/R0kwwbVoVGaPkCkNTAlz1ruqIXPwoIsAnQI=)
                          4: h3cjrnnyjkjwyjmhtVLlegmIBQE.roa (hash: whXU63yyr3uhzXyagf9PqR/a17+WxE/Iov/bfVlv6Kg=)
                          5: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: BNROcVuQRx4A37nWKEsOOwwxwQGGkLEuT0cj3tgL0ow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b3:d6:27:9b:f0:16:40:52:16:6f:94:51:f7:9a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: May 26 07:00:58 2024 GMT
            Not After : May 27 07:00:58 2024 GMT
        Subject: CN=4a0596e69d50c114e7041441c2f8c0e7e717b2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:ce:ed:5a:a5:74:39:b8:c6:c6:bc:61:a6:
                    30:34:a1:a7:b1:38:d5:0a:0c:fb:a5:7e:47:8e:ea:
                    ad:13:ca:c6:94:f3:e6:9f:b9:f1:06:d1:bc:38:2b:
                    dc:60:1e:5c:26:be:fa:a1:8a:23:4b:1b:4f:44:4e:
                    7c:02:a2:22:0d:65:05:6f:a2:6d:7d:e7:a0:0a:47:
                    1c:82:ad:10:4e:57:77:db:0e:b7:78:cc:0c:4c:71:
                    05:ba:97:8e:38:c4:e6:3b:3d:6e:0a:af:20:2b:2a:
                    64:7e:25:03:1f:e6:39:6a:1d:d0:f7:48:c9:ad:71:
                    97:6f:d5:bc:75:e6:9f:07:9d:57:18:66:03:44:8f:
                    a5:ac:af:5f:44:93:0b:fc:b3:94:e3:42:ea:3d:32:
                    c6:3b:83:a5:fe:39:44:2a:38:47:f6:88:8f:be:b4:
                    50:7e:07:38:04:96:63:07:f1:99:5e:d0:3d:35:27:
                    9f:55:32:9e:96:af:e4:d6:b8:91:fd:0b:d5:0b:3e:
                    68:80:d3:33:b1:78:63:7e:1a:4d:44:79:c5:0b:60:
                    1e:08:5d:78:41:b5:32:a6:43:ee:3c:95:d1:38:15:
                    00:40:75:6f:92:17:13:2c:6a:66:dc:48:4b:85:44:
                    08:00:a2:f2:46:86:6e:f7:0c:30:cb:17:9e:0e:30:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:05:96:E6:9D:50:C1:14:E7:04:14:41:C2:F8:C0:E7:E7:17:B2:AA
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7c:78:e6:63:22:0a:fd:e9:13:d3:70:82:8a:76:a2:28:d6:
         2b:70:74:68:48:7d:a6:06:75:2c:fa:2a:97:40:21:71:d0:be:
         56:34:50:fc:d6:aa:c7:27:78:a8:46:35:86:47:e1:3f:b5:9c:
         5a:f6:8b:fe:f7:75:a9:2b:cc:a2:fd:e8:01:90:f6:9a:fd:55:
         39:cd:e6:f3:ea:37:c5:a4:67:8b:3b:ea:da:cf:bf:b7:53:61:
         b6:a9:49:1c:f1:1c:f0:68:c4:5c:d3:c3:8a:ce:1a:89:1e:d6:
         91:8a:3e:83:28:93:c0:b1:d2:1a:0f:6b:a2:be:bb:f8:8a:21:
         c7:4c:51:a8:8d:0d:5a:dc:1b:e5:40:d4:82:f4:49:3e:1b:5a:
         3b:35:b6:e0:2f:99:c1:e1:39:14:24:69:b0:46:e6:73:d7:f4:
         98:87:17:89:14:80:62:f9:b6:e4:b6:83:76:0d:7e:bb:df:03:
         b7:5d:42:69:7d:cd:aa:83:f1:e8:e4:3f:9f:0a:d5:90:2a:95:
         50:9a:99:b2:88:44:63:e1:81:27:16:34:ec:65:35:69:4e:0b:
         c7:60:82:f2:9d:fb:7e:81:de:e6:f0:4c:79:c6:3b:9b:01:d3:
         fa:25:03:b6:63:e1:1b:fb:18:9e:c0:e7:b2:9b:1b:ea:9b:b4:
         0c:db:06:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:03:21 2024 by rpki-client on console-ams.rpki-client.org