Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File:                     HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier:          pOt9nw6gwslyRD/Wvh1LfOhVexlSRvoYpnaxfd0Zbm0=
Subject key identifier:   DF:EC:6F:80:5E:86:54:11:06:1B:DA:ED:B5:53:4D:13:D1:8F:46:C1
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer:       /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial:       018F3D0AAF60A9D3B2B38F46F708546F9C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number:          1153
Signing time:             Fri 03 May 2024 06:01:01 +0000
Manifest this update:     Fri 03 May 2024 06:01:01 +0000
Manifest next update:     Sat 04 May 2024 06:01:01 +0000
Files and hashes:         1: 0xAZv2IVXjAgHkUloAAoLxfhuyA.roa (hash: lhj8nUjJCaeL5SXp3QWYiYfocU/U/BehwDTiRkknZ4c=)
                          2: Bo5i4c9lr1jWjkeryqokpiSB1wA.roa (hash: n0LpFneeUAphnNuGN6iqPxkOsuKwVKjp40SZ9wceoFg=)
                          3: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: glNdH6OSg+OwTJkDLLfkL58V9XRSudjuU1puVSTepsw=)
                          4: SS6qD5hBHFZ8XKrXwxjOwAyw4eE.roa (hash: 37OtCU7A1BccKYEfilvoTJixDGeyzRpxrLAnzsQ3+dU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:0a:af:60:a9:d3:b2:b3:8f:46:f7:08:54:6f:9c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
        Validity
            Not Before: May  3 06:01:01 2024 GMT
            Not After : May  4 06:01:01 2024 GMT
        Subject: CN=dfec6f805e865411061bdaedb5534d13d18f46c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:7a:57:b1:a0:7d:4d:39:d5:e8:78:ec:b9:
                    e7:51:5b:2f:2d:20:94:1e:42:d9:5c:c9:3e:77:a6:
                    91:11:09:d4:64:35:e3:ad:a7:f0:f9:9e:f8:66:17:
                    f8:74:ed:5d:b2:65:01:69:1e:8d:6a:9a:e0:1a:ba:
                    f6:16:54:b4:b4:52:b6:41:fa:1c:f6:3f:1b:f9:a1:
                    a6:ba:57:6f:90:ca:6c:59:1b:69:1e:78:01:16:f5:
                    a2:11:15:31:27:8e:8c:4b:c5:68:2a:bf:03:75:72:
                    32:2c:76:69:2c:00:51:28:92:f3:a7:aa:45:f5:c7:
                    ca:29:96:65:49:83:9b:bb:61:7d:8a:63:8f:20:3f:
                    a0:4e:9a:03:51:25:e1:0b:e6:cd:ae:40:0b:5e:ec:
                    ae:ad:9f:f8:50:e9:63:a0:14:18:54:09:91:86:49:
                    7b:a2:98:f3:f4:0d:66:97:3e:01:94:75:53:0f:20:
                    52:92:90:21:b0:0d:c6:34:c5:da:15:0d:05:f8:b5:
                    19:69:60:3e:fe:81:90:d3:85:7e:65:15:2f:1a:24:
                    b5:b7:ab:7a:0a:aa:09:89:f7:14:82:46:ea:d9:16:
                    f8:4c:7f:4f:49:cd:16:57:96:38:40:d4:94:b2:42:
                    35:a7:fb:8d:84:cc:a9:8b:50:99:7b:4f:75:43:e3:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EC:6F:80:5E:86:54:11:06:1B:DA:ED:B5:53:4D:13:D1:8F:46:C1
            X509v3 Authority Key Identifier:
                keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:f3:9b:a1:ff:e3:b8:fa:95:28:24:4b:1d:cf:43:43:4b:
         d6:53:45:f1:3c:ca:97:cd:5c:db:10:d7:85:f3:8a:40:19:33:
         ef:92:aa:24:01:5b:85:2b:4e:b3:7a:89:60:8d:7b:a7:4e:d3:
         f9:2e:f3:f9:ea:d4:a9:7f:2c:aa:22:55:b1:3e:e5:d7:d6:85:
         a9:38:7c:15:ec:ec:c9:ce:f1:fc:34:92:3f:63:93:84:a1:d7:
         0a:65:86:9b:89:81:a9:b8:2d:ca:95:f9:ca:92:50:77:b0:5f:
         94:39:82:ef:3e:39:cc:d6:86:32:e6:84:ad:61:5d:3d:1e:cd:
         50:91:5f:42:01:1c:08:bc:bf:e0:9e:c3:93:f0:af:69:89:41:
         57:5e:b0:55:70:6d:c7:ca:95:14:94:4e:e3:01:7e:e6:c2:ab:
         3b:20:6a:f1:82:a3:69:ec:4e:02:84:c2:19:fe:e8:62:22:1a:
         df:5a:f2:05:c1:3d:d4:85:3f:98:ee:8b:8b:2f:25:b4:1c:73:
         2a:cb:ed:5e:2f:a3:4e:16:a0:fc:40:0b:69:18:fb:96:8e:fa:
         5f:62:fe:a1:7c:38:08:b3:8f:9e:e1:de:37:96:ee:0f:25:b3:
         8d:11:d5:b4:d7:80:0b:69:eb:a7:a0:06:d7:9d:55:13:7d:66:
         dc:79:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:25:53 2024 by rpki-client on console-ams.rpki-client.org