Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
File:                     hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json)
Hash identifier:          EFQ+uhALAfSr0ktEhZOzl74NDdqYS/4R65hieQrv58U=
Subject key identifier:   5D:89:53:63:EA:5C:65:43:B4:6D:BD:61:A1:49:1E:6B:83:BC:03:55
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       01873740BDBA0D0229A027C10B486A5CE75C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
Manifest Number:          0AB5
Signing time:             Fri 31 Mar 2023 10:40:02 +0000
Manifest this update:     Fri 31 Mar 2023 10:40:02 +0000
Manifest next update:     Sat 01 Apr 2023 10:40:02 +0000
Files and hashes:         1: 0wRv8dN_FJ8rwK_JEo9yZrAYJT8.roa (hash: P/SXjLWWh0BAm8WfomdMqFMoJ1BoPjl/I3LJTrJ7sz4=)
                          2: 4M4h2Zjnt2Qeu2LdeClRy2P31Ac.roa (hash: Vsu9AvFwxWqHA04iTbtiyPjB2k0cLi1upctlpU4gTPU=)
                          3: NBw3dD1wG08VC3_YtOHnjMjjiLE.roa (hash: kf7FyTLyNYdE2Fy25w8QgMha9E0W8fCirDy21aGd9PM=)
                          4: Pgr0IMg0Qb_5lPwuIcQQOBKm1og.roa (hash: 0aNfzxFJ4O0dyn5x7nl1kZ06LDgYk6sRhXFTdK+Yjc4=)
                          5: YPBbJ82YlLJzVOg6wqXHDQ4XtN4.roa (hash: upHzlO6oYERtyHodB4ZoyXIsIGBpbVGEOn0yPKFqx+w=)
                          6: auHP1IqGlP_GXBy90FuPboz2L_c.roa (hash: Av3e7jpbIvaJ+Vf6OWQDZ9VJ+myYbBFmtKdoiahkBaY=)
                          7: goIfki_aq9mu2k_sdHR0NaY-GMg.roa (hash: 47EY6AcR0FROPwmiUXDafvi5dd+vbMbA2JWTx8Pshhg=)
                          8: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: J2JIP8tLeJheOmTb8HT3jCMf5wK5xLATDkJ0jCJjLRM=)
                          9: j_m8-GqklspDtwRkezKmEJg7vns.roa (hash: 764AEu6BpYRlFNny2bK43noC6fSWJRIZhJkBLZ0T1oQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Apr 2023 07:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:37:40:bd:ba:0d:02:29:a0:27:c1:0b:48:6a:5c:e7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Mar 31 10:40:02 2023 GMT
            Not After : Apr  1 10:40:02 2023 GMT
        Subject: CN=5d895363ea5c6543b46dbd61a1491e6b83bc0355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:10:e3:b1:82:62:ee:46:2a:94:c8:d8:51:0f:
                    4a:cd:9c:6b:fb:41:dd:a9:42:6e:67:f1:c0:d5:3e:
                    6a:88:f8:82:ae:b8:64:bf:4c:cf:4a:a2:fb:1d:b1:
                    f5:ed:24:38:0f:37:fc:da:34:88:12:15:b6:52:e2:
                    06:7d:3f:eb:85:2e:1a:09:67:0e:db:06:77:34:c3:
                    6f:42:87:03:f3:2c:ff:e9:e7:9c:2b:f5:5a:d3:c3:
                    6a:6c:05:80:15:45:0d:a1:fc:98:ce:79:56:88:87:
                    a7:8c:6b:18:bf:2d:ae:d9:44:4e:c3:47:c5:c7:2f:
                    8b:61:b4:9c:c3:72:97:38:b8:3b:4b:45:b5:86:45:
                    97:9e:f1:59:26:9b:37:3d:94:2c:ad:ae:4a:6b:f3:
                    a1:be:a9:2d:02:31:6f:9a:c8:6e:e0:36:37:b0:3c:
                    ed:7e:e1:fa:c9:ae:cd:a4:20:38:c1:17:81:5c:ec:
                    09:b9:1c:ea:78:e9:f5:a9:05:93:7a:8b:61:5d:49:
                    4d:08:3e:5b:01:fa:b6:ba:05:ea:3a:47:1b:97:7b:
                    a8:d1:71:e3:16:83:9f:ad:b5:8c:11:46:bc:08:c4:
                    27:6f:4b:86:c7:2d:5e:17:94:b2:bd:35:36:78:0e:
                    ed:c0:cc:9c:06:39:ec:70:80:fb:ca:60:f7:85:4a:
                    60:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5D:89:53:63:EA:5C:65:43:B4:6D:BD:61:A1:49:1E:6B:83:BC:03:55
            X509v3 Authority Key Identifier: 
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7f:09:98:d0:3b:a2:34:16:27:bc:0b:78:58:31:45:2e:ce:
         0f:b1:27:9c:b0:bc:13:7f:d4:f7:d8:f0:80:a9:ba:30:5c:bc:
         89:d6:79:cd:e0:00:c7:0e:41:8e:4a:f1:25:0d:0e:44:27:b5:
         66:31:71:a7:9b:a9:ba:0b:9f:d6:ac:42:88:ce:2e:59:ac:5b:
         44:0e:77:7f:40:39:fb:34:c5:c4:66:cc:07:59:4c:29:76:20:
         5e:63:a1:52:fd:4b:e3:49:c9:b6:68:fa:ca:67:58:ac:6a:1a:
         5a:1e:36:71:18:1c:bd:07:79:27:3a:10:39:0e:ee:f8:8e:15:
         00:fc:00:3a:db:55:5b:70:d4:bf:48:f3:c8:89:77:8c:3d:e0:
         79:1d:da:77:e4:53:0f:83:40:b5:c6:ba:61:2c:3b:3e:e6:1a:
         3d:ec:d7:6b:65:1c:49:81:ad:b4:f6:74:d6:98:9c:3f:2f:18:
         5a:61:e0:da:c7:f4:66:88:4c:4d:8b:cc:da:da:51:c4:a5:7c:
         55:e9:f0:90:d7:24:1b:53:20:83:45:7a:3f:22:a0:dc:42:44:
         74:88:ac:00:5a:a3:95:29:d8:53:82:c6:04:86:a3:c1:91:e6:
         00:90:b9:a8:7e:af:9b:82:67:e7:2e:92:76:6f:71:42:6e:e9:
         0c:7d:a2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 31 11:15:24 2023 by rpki-client on console-fra.rpki-client.org