Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File:                     iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier:          5s/B50+O5Hey7bCSNUtoxnJzRTWnQYBYCzDzV6ATsng=
Subject key identifier:   79:A2:A0:3B:4B:89:32:CB:7D:66:B5:5E:81:86:A3:3D:34:40:97:55
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer:       /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial:       018F188FD27C739842D07DE4879D9DEA933E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number:          0E5D
Signing time:             Fri 26 Apr 2024 04:00:29 +0000
Manifest this update:     Fri 26 Apr 2024 04:00:29 +0000
Manifest next update:     Sat 27 Apr 2024 04:00:29 +0000
Files and hashes:         1: 5giKIzoqLUmTk5bpB-Fzzyjho3o.roa (hash: vbowB622CUsW8a9ZGsN5Pb1PGv5O+KJ2eQsC40IVbn0=)
                          2: SR1ogs_58eZMtn8adnkfVmiSrOY.roa (hash: U7+/cdUDelkCVfdRNuHE1cDLqDSJD7+us6p+pymAyCs=)
                          3: aKjim_7ahj4hbf1P1ypzGhFr4Z0.roa (hash: m7suhL4bs9zEnJufYLU5vVkixe7Wo8zkDsBrR9f2nj0=)
                          4: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: Ur34WDtBmlDwiB00S2wq1klvMS5MT7r0zxc3h4nG6F0=)
                          5: ocSaT8oDsygPLanuB-H1O7lCF4k.roa (hash: NSBv1AkN8vJZ6r3GHhYFBX2TvwSUy+fx895aO0NiRKc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:18:8f:d2:7c:73:98:42:d0:7d:e4:87:9d:9d:ea:93:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
        Validity
            Not Before: Apr 26 04:00:29 2024 GMT
            Not After : Apr 27 04:00:29 2024 GMT
        Subject: CN=79a2a03b4b8932cb7d66b55e8186a33d34409755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:0b:f5:df:a3:79:16:ad:fa:50:8a:56:03:
                    27:a6:f5:bf:45:3d:25:6b:a7:e7:3b:3f:25:b1:18:
                    e8:1c:b6:6a:aa:21:29:cb:5a:a5:08:45:cb:fd:c6:
                    63:1a:91:e7:b4:23:aa:73:04:6e:df:5b:28:de:c8:
                    ad:38:7f:e7:08:1b:ec:27:5a:99:e6:62:78:c4:91:
                    e2:77:f5:b5:0c:b6:77:34:e0:9f:2d:f8:be:03:46:
                    e3:20:97:a1:52:b0:18:64:ea:7c:1f:a1:0a:4a:6c:
                    64:ce:1c:32:fe:0e:c5:15:93:07:25:31:3d:8a:c4:
                    4b:69:04:32:59:12:d7:41:b7:56:2b:ea:eb:72:f2:
                    d3:33:68:cb:92:8b:90:ea:3f:28:cd:e2:1c:54:b7:
                    f0:17:c8:f7:4c:05:74:f0:4f:09:73:20:83:13:46:
                    c9:13:2d:c5:04:a6:87:53:57:b0:bd:f4:0f:4b:54:
                    81:a4:a3:01:df:dc:92:0c:53:6b:86:b4:a8:09:f1:
                    43:79:b2:35:69:59:b4:38:0a:d2:c0:d7:c6:59:04:
                    c5:fe:ca:4a:25:19:c2:82:63:e9:10:0e:0f:69:97:
                    49:ef:f4:7b:32:6f:30:94:79:f3:da:01:5a:19:2b:
                    02:49:bd:ad:d5:6a:0c:da:d8:95:19:f7:17:de:73:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A2:A0:3B:4B:89:32:CB:7D:66:B5:5E:81:86:A3:3D:34:40:97:55
            X509v3 Authority Key Identifier:
                keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:99:96:52:d9:4d:52:c8:b9:7b:50:17:61:ba:d9:32:b4:eb:
         95:3d:aa:eb:aa:91:61:14:08:87:5e:0c:9f:39:c7:5c:8c:0d:
         76:f9:b7:6a:8e:3d:f6:63:04:b2:33:51:f4:71:66:2d:70:ba:
         4a:2c:e4:db:11:02:7d:18:a4:23:8a:d5:4c:89:b2:ac:b8:39:
         96:58:d3:8c:07:65:7b:7b:44:69:f0:49:14:b4:f3:2f:87:e5:
         44:6b:8c:c2:e9:4d:91:d5:7c:38:cf:cd:cc:6a:b8:99:4c:f9:
         7d:0f:f8:7d:45:3c:3e:aa:be:54:c8:d7:ec:93:bf:a7:93:07:
         c5:7e:08:0c:66:5f:ba:fd:1f:96:68:a6:55:85:7b:0e:7a:76:
         9a:a8:a6:5c:ca:af:2b:f5:f2:2e:c7:47:5a:f5:43:31:d7:35:
         bc:36:cb:dd:9a:e3:4b:a7:fc:70:16:f5:cf:d4:12:e2:d4:8a:
         7f:ef:ef:ad:6d:da:1d:6d:b4:5c:89:69:62:98:1d:3a:58:4a:
         7b:82:cd:8f:ab:72:8e:60:8a:f3:47:6e:e5:71:f5:6e:3a:49:
         a0:b6:22:35:81:b9:5f:8c:c0:e0:44:2c:5e:d0:aa:da:06:07:
         ef:f8:3b:6a:44:d8:10:d1:05:c0:3b:fc:89:90:12:c6:4a:6d:
         24:25:a5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:22:48 2024 by rpki-client on console-ams.rpki-client.org