Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File:                     IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier:          YvElaYFGH8Y5dXIFm/gwJWDVG4TeuAXibcVH42k7NuU=
Subject key identifier:   D4:EE:CF:DC:28:4A:CF:FF:47:81:9C:66:49:A1:59:90:EA:64:E5:34
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer:       /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial:       018F8FDDACF148DD5219AF766204C79F9873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number:          0528
Signing time:             Sun 19 May 2024 08:00:20 +0000
Manifest this update:     Sun 19 May 2024 08:00:20 +0000
Manifest next update:     Mon 20 May 2024 08:00:20 +0000
Files and hashes:         1: 6O23vnLv_8v6I4ezbgtrh04M2Fo.roa (hash: B+zN20XJfaCN3vCj0iFGb7SfEPZ+3u0DQSrgTDI7XeM=)
                          2: 8AMVYkX9N7fa6Jc7DUjo6WZQz6s.roa (hash: sp9NjbcC2Cy9C9tw5TL0He1ikDdbJYTA/Q47GjWbJy0=)
                          3: 8mgyKL5JdoezY5GwhUoH5TtVQ6Y.roa (hash: rXB6GN58t8t0MO4+LXQp+0ETWMNh+LdAWiBythcI/iw=)
                          4: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: xlfexJ7gKSMiFGVHqFLzupJSRi0ghs/Xt5KmMn4ULLM=)
                          5: jz5vBvgC6HuleZ6VUaz3tzuT9lM.roa (hash: TWLgCGfAGrYQphka8eJdJMEqxRBpB1E9IE2GJjgf6AI=)
                          6: nBJnCjb07SiLfyU-5Le2Qt5OZRg.roa (hash: aRBKEcYDkCTClqUioLLJzALVwX0+5wv4FLfe61OcUFQ=)
                          7: roGzy9Hh3diM6nB74033mpvoFU0.roa (hash: 3bgXUeRKM+BmH6+/kZBTTLiMoDlqx70jhCXZL96syqs=)
                          8: tLiRdZP522eC3NYuIzRy2QoF5H4.roa (hash: trzTZz+yqegl2GvHbTH4XX/ON0hrHMW62DxevK5rVsw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:dd:ac:f1:48:dd:52:19:af:76:62:04:c7:9f:98:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
        Validity
            Not Before: May 19 08:00:20 2024 GMT
            Not After : May 20 08:00:20 2024 GMT
        Subject: CN=d4eecfdc284acfff47819c6649a15990ea64e534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:ec:05:d0:61:6e:a1:6a:d3:c5:ea:76:c1:
                    8f:2a:12:5a:92:17:f9:f8:1d:e3:3f:db:77:04:7a:
                    eb:fa:c9:29:ab:c3:06:ec:dc:1b:ce:80:ad:32:f3:
                    4f:13:b9:15:c2:2c:70:5e:a3:41:f4:7f:e9:3b:6f:
                    d3:b8:7a:c4:a4:7c:65:ca:da:f3:0b:9f:15:fd:20:
                    ce:78:54:fb:a1:72:3e:52:9c:5a:b7:fd:5f:cc:76:
                    f9:bf:75:0c:77:96:4d:92:90:c8:9b:c9:9f:73:1b:
                    43:62:a1:d3:f8:b2:a3:18:30:24:13:33:c8:4f:7d:
                    27:26:05:ab:4c:45:eb:50:10:f6:65:16:a1:48:3d:
                    45:31:f9:a5:23:46:4b:3e:5e:55:7f:09:68:e2:d4:
                    28:0c:8b:25:32:60:d0:f9:ed:62:a4:66:33:27:c6:
                    3f:be:b0:7a:c3:c4:4b:59:15:2d:fe:62:a6:eb:9c:
                    f7:cf:96:2a:8e:3e:2b:f5:42:d3:b0:95:a3:8d:b0:
                    cb:16:b0:87:02:35:15:08:84:81:36:c2:e6:ee:74:
                    a7:78:42:b8:34:06:97:53:65:0a:fe:bd:fc:d5:f1:
                    03:3b:e8:67:c1:52:b9:26:8d:f2:26:38:d5:71:e7:
                    30:b6:a4:a5:79:98:fa:c8:19:61:b4:f7:3d:e4:44:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EE:CF:DC:28:4A:CF:FF:47:81:9C:66:49:A1:59:90:EA:64:E5:34
            X509v3 Authority Key Identifier:
                keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:09:4b:33:e0:db:af:14:da:98:aa:7a:48:f7:12:d4:e5:38:
         c4:36:fe:6b:89:ee:92:f2:39:5d:59:82:38:a1:27:eb:ab:79:
         79:8d:f0:09:33:1f:04:ba:1b:49:17:1d:d5:05:94:0d:e1:ff:
         ad:b6:c3:7f:af:21:91:03:d8:54:8b:65:fc:00:72:51:23:4b:
         20:f7:7f:74:90:1b:7b:11:18:64:32:3f:af:e9:86:fc:d6:8c:
         07:f6:11:50:21:33:b5:96:c9:03:c6:2a:e7:ef:db:63:ca:e2:
         6d:28:f0:3d:a3:58:49:76:ab:18:33:83:3a:45:27:fb:dc:7e:
         6c:34:8c:54:c1:f2:b5:e9:f9:51:b1:2e:06:0f:c2:3d:cd:3c:
         fa:92:20:07:85:e8:86:53:f7:f7:90:c5:35:62:bf:32:46:11:
         a2:5f:61:9f:5e:f8:f2:0d:42:c6:b0:30:2e:53:4d:df:66:83:
         1d:dc:0e:b8:7c:da:b2:63:7c:79:5d:21:91:bf:3c:95:0c:d4:
         5b:29:1d:26:3b:03:7c:84:c9:3d:8c:7f:e2:1b:bd:0a:07:3d:
         fc:e8:7b:a1:6f:ff:63:7d:e7:8f:79:c3:b3:ae:48:14:3a:87:
         9c:87:01:5f:57:ac:4a:3d:a0:03:20:37:37:a8:44:8a:ce:31:
         21:00:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:51:57 2024 by rpki-client on console-fra.rpki-client.org