Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
File:                     XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json)
Hash identifier:          ZO028nub6zGuJQNtUrXr74OwjdzG5Eh6KttlHSloEr0=
Subject key identifier:   BA:DA:A7:17:73:7B:D5:C7:E0:BA:87:4A:D6:7A:B3:15:4F:7D:C2:D5
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Certificate issuer:       /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial:       018F874ACF2750DCAB70B4AE8E3AB1FAD39D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
Manifest number:          1053
Signing time:             Fri 17 May 2024 16:02:57 +0000
Manifest this update:     Fri 17 May 2024 16:02:57 +0000
Manifest next update:     Sat 18 May 2024 16:02:57 +0000
Files and hashes:         1: 0FTv0TFzeSPB6XsWJ_1soEExa3k.roa (hash: HN05YlBsenw1LPrpQRSb7zI9ERU6APzKx/NzUyZum34=)
                          2: HqvqAZYNTgGxWwoiMVdYxxuX9pQ.roa (hash: Cs67dHOFuoe++nsazMemr6V8dp4xFyclX2264pXkuC0=)
                          3: MTEb-aObky_GvuQPAkeqYsNXKN4.roa (hash: 5nKKuDkgKFHRLDuN+19Yi8MCFJaTdcCtwLJ9MjAqzpU=)
                          4: QbZAqeXoqmYpLtoJzoXfF9QVpIg.roa (hash: HkLyY5OKnW3IYRsHNkaSHTMiw2oVviyyeG3N27CBiNQ=)
                          5: TC8GeTJF6booBA8vWHSvib0nyUc.roa (hash: cH9M6gHcjTckRFqEhryLFaUlqy3lGUR11VQrbZK4Uos=)
                          6: WePpKk3Ag2FsM-i8gFqo1fgY0s4.roa (hash: gZW0nDr/VfHRSeHDnwIB1ygTMzq5AX5KEpMkXg2h9NE=)
                          7: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: spfo6H7Y/BytO9/08wH1jRbrziiPwuSjdhTf4aPFdzE=)
                          8: lxSP2u88ktM5ASaTylBEa8rTjAs.roa (hash: m4ttu9AnTo1GPo0lpMAowxIx/glx5wcmo1zf5dzxWFs=)
                          9: pniKW695NM7NteQJ4yBeqsGaOxc.roa (hash: BHO6Fa9hKUazn4B3MeCRllqvTYxwlCDuWW4NHmwgjag=)
                          10: uMBmt7uqqPCSC4JV4QFzY5ueIxc.roa (hash: j1qZatLHPMSCIQmRbFV5k+lgSfy2PQCD38LTJvGtsJ4=)
                          11: vze_7ZF0qDUXFxvy_W7ig197NUw.roa (hash: 3vfzE8iGKY7yU9JEpgX2jWjfNuoxwohdkmsMjcomNgU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:cf:27:50:dc:ab:70:b4:ae:8e:3a:b1:fa:d3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
        Validity
            Not Before: May 17 16:02:57 2024 GMT
            Not After : May 18 16:02:57 2024 GMT
        Subject: CN=badaa717737bd5c7e0ba874ad67ab3154f7dc2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8f:9e:75:a6:44:15:d7:9b:b6:a4:ab:91:ca:
                    c2:48:17:79:de:80:08:c3:b8:38:dc:10:42:93:e8:
                    53:ea:6a:6a:7b:b8:34:39:0f:10:64:d3:9d:4f:7a:
                    ee:f8:46:bf:54:93:d7:d7:bc:4b:b4:b9:b3:10:7c:
                    85:05:2b:15:f6:8c:38:45:71:83:66:23:39:73:79:
                    f6:06:52:52:76:15:d0:3c:d7:16:b5:ca:2b:a1:6c:
                    f0:c8:a5:bc:0f:81:04:d0:02:08:ef:7e:0c:de:03:
                    bd:8d:f9:75:9e:2b:c7:8c:84:e5:a2:fe:1d:72:11:
                    b8:17:be:f9:4d:ee:8e:8e:27:8d:f6:f8:7a:46:a1:
                    5d:75:d1:9a:ea:94:0f:96:43:7e:19:ba:b4:d2:8e:
                    ea:bf:5a:68:18:97:d0:18:22:db:e4:bb:43:86:df:
                    3b:91:0e:36:8d:91:e2:60:b1:5b:6a:1d:5b:d8:06:
                    da:af:d1:cb:90:76:03:3f:e6:ba:3c:78:ee:bc:5d:
                    22:18:d3:5a:97:bc:7d:81:96:01:9d:13:8a:80:fa:
                    24:c5:f1:19:22:7f:01:13:2f:67:9b:c1:d8:b0:76:
                    c0:3a:6e:2b:26:7a:20:b3:26:1e:28:7c:b9:f8:06:
                    d9:45:39:57:9a:e0:bb:9e:7b:ef:df:7f:aa:80:03:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DA:A7:17:73:7B:D5:C7:E0:BA:87:4A:D6:7A:B3:15:4F:7D:C2:D5
            X509v3 Authority Key Identifier:
                keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:11:2f:0b:c1:0b:20:39:19:24:13:47:39:ce:5f:da:d4:47:
         f9:34:1b:83:4e:3d:f1:90:23:62:d4:a7:50:03:05:bf:3d:f4:
         42:22:e7:2e:b6:e4:68:32:67:4f:17:94:c7:b3:be:8e:6f:a9:
         2c:e3:83:c8:c8:4a:83:4f:0a:0b:e5:be:6c:1b:65:4c:cd:e9:
         52:d8:95:7e:0d:75:f0:fd:87:d2:27:e1:b3:71:58:cd:db:83:
         dd:0a:40:5b:15:88:7a:27:7f:4e:d4:1f:8f:e8:e1:d4:52:23:
         d8:47:05:0f:33:d8:f9:a3:cf:d4:18:b3:ca:30:99:82:2f:d3:
         33:bb:ce:a1:f1:19:73:3b:18:ca:f9:79:14:42:26:d0:4a:37:
         37:c4:29:ac:73:16:6c:e4:a5:ce:96:e8:8f:ce:c7:05:5f:be:
         9a:f8:9a:12:96:75:e8:33:4d:96:aa:b5:16:05:84:0f:ce:56:
         00:2a:f0:6d:42:30:44:5d:2b:e9:6d:82:19:31:82:9a:8c:a8:
         a0:a5:19:c3:9a:aa:46:03:42:1f:42:e3:d9:e7:64:c5:0f:9c:
         0b:6d:e4:66:a1:a4:d5:33:58:9a:d3:e6:72:98:5a:80:bc:40:
         b0:52:5d:cc:2e:0a:ba:2b:15:ed:c6:31:fd:2c:e7:5c:5f:26:
         96:2e:a1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:30 2024 by rpki-client on console-fra.rpki-client.org