Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          iqyKukkytJoI1+dVn89Ol5RHsnJEK3h/jgKCSIPgp4w=
Subject key identifier:   D2:D4:F5:53:9B:8D:A3:F6:02:CE:36:A7:47:D9:A0:4A:8D:3C:84:60
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       018F3440D5D1781E603157848B9945728AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          114B
Signing time:             Wed 01 May 2024 13:03:35 +0000
Manifest this update:     Wed 01 May 2024 13:03:35 +0000
Manifest next update:     Thu 02 May 2024 13:03:35 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: 3IGysB03iKROG/LRtgu56jR8BpgyJdyPrlHTEV3wGi4=)
                          2: C73J8CW86S-V3s54I-lVfgyIKbo.roa (hash: 22SvsroMb+DNtrI4AdcNF+UBGk2oM+/nB8dyhB6wRAw=)
                          3: HVMwvoqiQxnWp1sWSOHVQE0zxNg.roa (hash: d7SKnCW8ku4fGrlZ7xr3HJS4+umCvsIcXc5uSkZlzas=)
                          4: JT5nYGykUQ24zAs75PBCm6hvjMI.roa (hash: L/SGQx0E6hjlNQpLGW6pGHpx3Y7VaSUiiEgz416DWqE=)
                          5: aTxlaFN4mu5w3B9fPU0VoYRZ8rw.roa (hash: DRxaaJ5dblHp3qqZiPB9qyOZJ+pEdC20JKMWpEOqrgQ=)
                          6: y3w4ETTqstMaPLA6xy2xBvSIRiM.roa (hash: X9y/3aqIJ54xW0YOCEY0N2uzFAM2RD+9jafi4raTwds=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 13:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:34:40:d5:d1:78:1e:60:31:57:84:8b:99:45:72:8a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: May  1 13:03:35 2024 GMT
            Not After : May  2 13:03:35 2024 GMT
        Subject: CN=d2d4f5539b8da3f602ce36a747d9a04a8d3c8460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:49:6c:80:d5:07:51:ab:78:79:e6:ff:c1:
                    b5:d6:16:85:fd:4b:9b:8f:19:51:67:fc:3a:ee:99:
                    50:7f:cf:3c:43:54:22:d2:3c:bd:42:48:3e:35:63:
                    52:18:2b:9f:02:67:26:f8:c8:4e:b5:70:16:4a:f0:
                    79:26:62:0c:cc:a6:99:5f:3d:fe:5b:b5:88:7d:86:
                    16:e1:f0:1f:08:0b:5e:b5:97:80:a2:d1:94:df:fa:
                    6e:4b:45:78:76:2c:bd:16:33:d2:ab:8a:38:d4:37:
                    02:9e:43:72:8b:9b:4e:b1:52:54:cb:19:06:1e:d3:
                    4c:98:d4:05:69:05:e4:11:6c:93:1b:68:66:bf:8a:
                    1e:5e:5e:91:f9:44:33:bd:82:2e:7f:00:b4:2b:26:
                    5d:2d:24:4f:20:2b:40:36:04:97:06:1f:fa:74:b3:
                    c1:ec:9a:c5:07:f2:8c:7d:62:8b:4a:68:a4:dc:e1:
                    33:6a:59:99:4d:fa:a9:2c:b1:a9:84:b2:8d:ad:70:
                    3f:2d:5a:52:8c:e7:29:26:7d:e1:3c:d1:9b:2b:1e:
                    7e:41:41:4c:82:a6:76:0b:4b:5d:a6:81:f6:6f:76:
                    6f:49:fd:ac:f3:10:12:f8:c8:6e:24:aa:b9:7a:36:
                    ac:90:d0:e4:e2:ed:c5:19:ba:74:f3:92:5f:e9:c8:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D4:F5:53:9B:8D:A3:F6:02:CE:36:A7:47:D9:A0:4A:8D:3C:84:60
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:df:62:ec:a4:6c:e4:79:db:fa:c3:44:43:25:05:7e:e5:
         1d:74:9f:78:5e:6e:e5:37:84:71:a4:ef:96:ea:f9:53:47:6d:
         73:59:4c:bb:68:4a:9f:db:c0:97:8b:86:ab:57:bd:a1:ee:94:
         96:66:d5:7d:e9:c2:1b:1b:66:a5:49:01:5d:dd:97:d5:b8:e2:
         b4:70:cf:d9:88:0a:7e:9f:fd:02:d2:e4:be:bd:9e:17:a1:97:
         e5:56:53:13:08:3a:d1:b2:b6:d2:65:bd:89:ea:6f:96:57:3e:
         2e:bd:90:97:42:36:9a:24:98:74:20:c3:16:52:15:da:94:0f:
         c7:59:5e:ec:7e:36:0d:e8:0f:64:90:13:87:9e:e8:f8:42:a1:
         d5:96:e9:d6:95:12:27:9c:c3:a2:c4:fc:4c:6a:9f:e0:5d:bf:
         4d:f6:a1:89:a1:f2:bf:58:ed:12:e4:c7:b6:15:a3:4f:dd:c4:
         74:9f:14:3d:b7:28:26:8f:7e:27:26:e4:ad:73:ea:ef:1e:5c:
         1f:c7:ef:3d:9e:3b:67:51:7f:6a:ed:73:10:0b:3b:4a:7b:d9:
         16:cd:21:6d:92:c4:d4:04:58:92:b5:49:f9:5b:15:53:fe:8b:
         91:62:67:f4:25:9b:46:76:63:ea:10:07:29:4a:55:f1:d6:5b:
         0e:97:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:28:13 2024 by rpki-client on console-ams.rpki-client.org