Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          cnFXIUaa55wrr+8Q3cS85dsSFeOQhUzpTlXFYuuSqU4=
Subject key identifier:   63:06:4B:94:9E:0B:65:F6:01:51:EA:1D:8A:72:3C:4D:E0:0D:91:7C
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       018F3C2EEFECD307C2FDA066A8023414443B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1162
Signing time:             Fri 03 May 2024 02:01:00 +0000
Manifest this update:     Fri 03 May 2024 02:01:00 +0000
Manifest next update:     Sat 04 May 2024 02:01:00 +0000
Files and hashes:         1: 9PtaBYfTDTsLZ0nM4lGzRGZ22Bc.roa (hash: YokKOvUBxeb5qB1louMnbCUJShjRY8D33JM/JJxcXvg=)
                          2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: GFZLZVbqTjzlcJIF9gpQVkRt5+KokmGqxNrrgC9/mNk=)
                          3: MFRcFvhMposZqHWMt4lsFYFFZz4.roa (hash: PUlSdynjA6lIzAozzLnq/sY+umpxfm+lHlHC+TOUzy0=)
                          4: hKhvH0gYFip_D3EtryZt3OGoR_E.roa (hash: 0KwsowhRJD57SELQRFOdBEcWZBnm7BBTsvnfac8JcRU=)
                          5: j5HfVQMSo9_4OsLMFkUHu0LQqyM.roa (hash: nykwO0FnLdpcE68ukqaEBA3CrYWnJ9S/RBgTv69Pmdk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:2e:ef:ec:d3:07:c2:fd:a0:66:a8:02:34:14:44:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: May  3 02:01:00 2024 GMT
            Not After : May  4 02:01:00 2024 GMT
        Subject: CN=63064b949e0b65f60151ea1d8a723c4de00d917c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:f9:dc:d3:77:3d:68:31:72:a9:f8:f2:fd:
                    02:fa:d3:ae:c4:23:0e:35:7c:fc:5f:c5:e7:26:e7:
                    58:38:eb:aa:1b:10:8d:6e:58:bf:9c:d7:8e:55:7c:
                    1d:00:7a:2a:e0:02:f0:f8:b1:5f:a3:d0:41:84:50:
                    2d:e8:06:3b:03:9a:94:57:63:ac:08:a4:83:fb:4c:
                    3b:be:42:be:05:6e:28:cc:f9:73:83:95:50:79:7f:
                    35:1f:0c:66:dd:12:0d:2b:18:50:47:1b:a8:6b:49:
                    bd:64:5a:07:4b:c5:51:2b:38:8f:a7:20:36:49:67:
                    6a:af:91:b5:40:8c:8b:7c:2f:30:0c:a6:50:18:41:
                    fa:a0:61:46:4d:67:4e:72:f0:43:a1:e9:af:a3:4d:
                    2b:69:ce:99:cb:4f:1d:46:3c:20:f2:d1:3e:8c:b4:
                    73:f0:0f:e4:37:bf:65:ea:b5:54:95:23:a3:3b:5d:
                    8e:6a:6d:d7:76:eb:1c:c1:5b:cd:03:c3:b7:e9:a1:
                    08:65:70:c9:70:4b:eb:dc:0a:a8:65:45:b1:f2:cc:
                    89:3f:5b:b5:09:2b:62:19:b6:f3:7c:2a:1f:53:9b:
                    c7:cf:63:cb:b2:f6:98:38:19:22:49:1e:57:c0:81:
                    b5:59:85:e4:89:6b:71:21:cb:f4:8e:f7:eb:5a:fb:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:06:4B:94:9E:0B:65:F6:01:51:EA:1D:8A:72:3C:4D:E0:0D:91:7C
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d7:31:0d:1e:fb:58:0d:73:90:b7:ce:90:71:4f:6c:79:9e:
         21:b8:f3:65:39:06:f5:a1:27:a3:26:94:7e:1a:d4:9a:37:54:
         5e:32:d7:e7:47:49:a1:31:a9:86:12:c2:2e:87:51:70:8a:c0:
         46:52:58:7c:9b:45:ce:a8:b4:2c:4b:8d:c9:a6:51:7f:22:e7:
         c7:0e:8e:e7:7a:34:41:d8:65:a5:85:d2:68:c3:e4:19:3e:1e:
         10:9a:6b:fc:d3:4d:cb:e1:a9:2c:d3:93:00:e1:e3:76:2b:68:
         3d:f4:80:77:32:c4:c6:0a:c3:b3:fd:aa:20:17:5d:cf:61:ff:
         70:e2:b9:08:8e:40:c9:1e:bd:99:c3:3b:4e:05:71:6c:2c:d8:
         04:cc:40:35:10:eb:c6:29:33:e5:41:f0:77:fa:07:0f:f6:d6:
         97:dd:3d:20:98:ed:7b:55:ab:7e:58:55:04:23:56:19:0d:db:
         1e:50:ed:11:4b:46:12:e1:33:4c:08:50:63:bf:65:c0:64:3d:
         89:aa:a4:9c:9c:4c:58:c1:b4:e6:0a:06:3f:e4:e8:38:0b:9a:
         73:11:42:d9:5c:57:c4:a1:8b:d1:1b:b2:5e:74:8e:89:89:42:
         22:0d:b3:4b:3a:19:9e:46:52:11:e7:a1:9f:4b:3d:2f:26:2b:
         64:3b:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:14:43 2024 by rpki-client on console-fra.rpki-client.org