Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          yyymMiu8w5m00BGDBbi9cvmpVBkbx+zdbNHOmqif3Nw=
Subject key identifier:   3A:97:C5:A9:49:D4:58:B5:AA:61:9E:2E:F2:E9:D5:51:F2:2C:6B:90
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       018F90B92DBF7FD7892FE313A62B6297A05B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          1198
Signing time:             Sun 19 May 2024 12:00:05 +0000
Manifest this update:     Sun 19 May 2024 12:00:05 +0000
Manifest next update:     Mon 20 May 2024 12:00:05 +0000
Files and hashes:         1: 1IrHoCnh7EO4eGQnBCxSiUBr1hw.roa (hash: TPZkuDlDjktt6HelCHAGmjm/2vU1R+GI2rgEssWaQOU=)
                          2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: 67H1wy6x16aoYsYYtT2myEBywm4SEO2yBgi1YFpHImU=)
                          3: 8MaXvUfyuaLuULVEjSbKjcaVrTk.roa (hash: i0TGzXaaB+jGndKWm8vvHYZkRfXsyfcy6iXz1Tlm494=)
                          4: 8XOiDIJ8drK3nCBvRuKwN2I9cYc.roa (hash: vqRANNIzF4wlCZ6eUdmz3vpaE+SdXgMIJpj3rNWJtgg=)
                          5: GL3biAgwLybBwj0cGljZT84rGSk.roa (hash: 2UqyhpQ2LSGy0Q0IgdwD63Tg/XcYUtP0s6gCJ/Up4I8=)
                          6: HLclWPzkjjK6TLDTkxP7IXqPhOI.roa (hash: ycnVcsVzUbRkcn0RFBta++o9B0+wlbAm0deoECTIa0M=)
                          7: KtQfEbjEkvI9-TJ29U3XBm5FIIY.roa (hash: QAi82OazuMtpKKkZqrmCmOD5NnM1h5Dlbq9iPwCxu7M=)
                          8: _ugq4K177Y9HJkTpyJYUub5p6OY.roa (hash: FEVR2O86Iku2J8AKHIoawPwgt2ucSupEXZueKpz3IiM=)
                          9: aQ7kWw-zQ8wa8-Oi5QtiXI85emc.roa (hash: fsuVQdrsvsdVTo68zIzKws5KfqRf0ASYdBaFusQquBM=)
                          10: eNwIFdF3H_dMpRNYi_q2Nl6rlok.roa (hash: ZuOICR7vYPDdrqA0N9zZfyHROTBU81YOP4pc9HMXIE8=)
                          11: qe7lrCsm-aCPjRzjZZvceOA5oys.roa (hash: RrfzJOzmtYK+m79b1dLLacbaLWk/HpMczsWznSVNa8w=)
                          12: t4iSYxFp0jYc0JpGFFCPx104yMY.roa (hash: jlEZSkmZTqPUfKt8Qcns5PGyPgwUb1tpcI3qfTJeMy4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:b9:2d:bf:7f:d7:89:2f:e3:13:a6:2b:62:97:a0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: May 19 12:00:05 2024 GMT
            Not After : May 20 12:00:05 2024 GMT
        Subject: CN=3a97c5a949d458b5aa619e2ef2e9d551f22c6b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:49:25:f3:b2:92:d3:51:6a:93:89:07:1b:b9:
                    e0:b0:b5:2d:d9:7f:f6:61:6b:e4:db:2d:1e:46:c6:
                    13:48:6b:02:76:59:6c:2a:5e:5f:61:91:7e:69:ef:
                    82:93:dc:33:26:dd:83:70:3a:49:13:6a:43:f1:24:
                    b2:fd:d0:4e:78:72:e4:63:c3:d0:0f:6e:cd:8d:e0:
                    22:f8:c9:23:81:ba:10:db:c9:13:ce:56:d0:a2:fc:
                    3f:73:91:17:bc:9f:02:24:1b:5e:fc:99:0d:59:01:
                    03:a4:38:e8:2b:4d:ae:1a:6d:96:a9:35:c5:8b:89:
                    f8:93:2d:42:b3:3c:7b:b0:d6:e9:dc:22:f4:54:1d:
                    db:f4:18:c5:87:95:c8:9f:d5:f9:32:ed:17:42:32:
                    42:6a:ea:df:d0:04:eb:f7:14:74:75:94:bb:f5:c1:
                    95:8d:35:9d:04:1b:4c:e9:8e:7d:79:92:aa:ee:fb:
                    09:b1:af:d7:ff:7f:cb:d3:01:1c:38:b2:a9:90:56:
                    40:f4:cc:21:a0:7f:db:eb:97:48:f2:f9:98:d8:2b:
                    b7:dc:18:a1:54:11:53:ce:8b:81:ee:bf:09:56:0c:
                    27:82:64:18:bf:cd:44:da:4a:ef:3a:94:bf:5d:42:
                    59:ab:bb:0b:6a:59:29:a1:05:68:e0:0d:dc:d6:89:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:97:C5:A9:49:D4:58:B5:AA:61:9E:2E:F2:E9:D5:51:F2:2C:6B:90
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:ac:2e:cb:f5:63:18:c1:38:a3:ee:de:9e:b9:90:58:31:
         ef:e3:2d:82:50:c4:d8:c3:12:9d:30:28:02:f4:be:58:d5:78:
         fe:7c:8d:6e:7e:9c:3a:e0:13:c1:05:bc:88:f5:ff:2f:c1:ce:
         05:94:ad:29:fa:68:3e:a7:84:f5:36:d7:f3:8f:64:d3:b5:e1:
         f9:b1:9f:f8:24:67:2f:1a:89:c7:11:6b:ed:c3:fc:f4:8f:ea:
         c2:f5:11:f9:1d:22:3e:c8:f4:5f:59:12:b0:b8:72:7f:f1:d4:
         af:fe:fb:1c:33:c9:b3:10:83:8a:42:ab:89:a5:17:ae:25:8e:
         f3:d7:12:bc:1b:66:7a:c9:ef:5e:10:96:3a:e2:4e:b3:60:09:
         bc:4b:7b:61:97:22:a4:16:3d:be:b1:2e:42:3e:46:db:b4:e6:
         39:73:56:c7:ed:16:eb:f5:e8:ad:c6:ce:cc:14:3c:bb:c7:90:
         68:db:a7:e5:ce:70:6c:6b:ac:4e:2b:f0:cd:44:51:c0:1f:bf:
         43:7c:dc:ff:6b:78:fe:bf:bb:ae:ad:91:18:1d:51:cb:75:c6:
         f8:2e:de:93:7b:0e:86:c0:3f:35:7b:f3:e7:5b:8d:7e:83:3e:
         53:b1:50:00:d5:67:ed:7a:2c:d9:85:ec:66:82:dc:a0:60:62:
         0c:c3:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:56:13 2024 by rpki-client on console-fra.rpki-client.org