Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File:                     Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier:          X4iJbuxhqDG41+UsOO0IqRzjxj0gFKQ0bsVDO9rz7U8=
Subject key identifier:   10:8E:E5:E2:95:61:EA:42:5F:44:BF:94:BC:CD:43:B8:F2:AC:66:28
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer:       /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial:       01946EFCA36378C60ADA3BE337E2AAFFCEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number:          1417
Signing time:             Thu 16 Jan 2025 12:00:38 +0000
Manifest this update:     Thu 16 Jan 2025 12:00:38 +0000
Manifest next update:     Fri 17 Jan 2025 12:00:38 +0000
Files and hashes:         1: 42NnB3jW5n3RbWWrHMDd_7NubAY.roa (hash: bZyySLXxgMQfpoBtEuXSmgHgMgLKQxBjV3IqMenXg0E=)
                          2: EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa (hash: GstL7gwAEgcyBOR5WEEQ3UJ45LkAklqubcGaSv86PEM=)
                          3: U3GEel-_AheBYgIYIVYL9mt_5dg.roa (hash: qjeuuOD21NigMG6GkIxT7OwP2vU0izG4cg6tV2NDSPY=)
                          4: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: hB3E2pVLuDNw7cnkSVeP6gzA0grUVIgh3YsHswj3UG0=)
                          5: hMxFbe2_woNux6m3JkElwux-E5g.roa (hash: nrSIsPwWOsAGq4mrEG8bp4vhnLrScT5iVl2b8ClElOk=)
                          6: olCZzHEOZSOjj4yqtahX2zJkhMQ.roa (hash: aXtBhSkmw714xAy5wT1PAT7ELEpsc4omuqROu4g4WE8=)
                          7: r39ohg_NZTgE7vtYFVHPRToAzuA.roa (hash: 4FTLuNfEgCKiNNKOFBDQPOMSv9rbnZNd+FbSRU1rmMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Jan 2025 09:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:6e:fc:a3:63:78:c6:0a:da:3b:e3:37:e2:aa:ff:ce:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
        Validity
            Not Before: Jan 16 12:00:38 2025 GMT
            Not After : Jan 17 12:00:38 2025 GMT
        Subject: CN=108ee5e29561ea425f44bf94bccd43b8f2ac6628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:ee:17:38:a1:23:51:33:40:fd:f4:e5:f3:
                    3f:d3:c8:8c:aa:48:3a:c3:c5:2d:fa:69:94:0a:ab:
                    b5:87:51:f6:17:84:19:52:f2:48:1a:b4:bb:d2:16:
                    dc:d5:5f:74:28:8d:1e:44:61:b9:a6:98:9e:9b:97:
                    21:55:a5:e8:12:b5:32:38:c5:4d:4f:78:3a:4f:00:
                    15:13:a7:6b:73:66:92:0f:a3:df:d0:2a:e0:3d:2d:
                    d0:77:c5:3d:85:91:8b:f8:fc:d0:ad:20:2f:b4:79:
                    74:48:8b:ca:0a:e1:cb:47:50:c4:7a:52:be:58:42:
                    3d:33:e0:2a:39:87:8c:a8:cb:15:4c:b3:ba:3c:25:
                    81:65:4f:11:8b:ec:4f:ce:88:cd:6f:f4:f7:fb:c9:
                    1e:a4:0e:80:30:d8:d2:a3:f2:6d:c8:b2:a2:31:3e:
                    04:bc:7d:d2:ff:41:ba:92:c0:d1:44:e4:ce:ae:16:
                    ae:19:76:8f:2c:fd:3a:e2:e2:14:76:74:49:b9:80:
                    e2:80:25:28:69:8a:d2:95:a1:c7:94:1a:ce:03:5c:
                    c9:a1:f3:50:5e:32:73:72:52:4a:dc:ec:e2:cd:d8:
                    b8:50:06:7c:8c:2a:30:4e:f0:2f:15:83:06:d1:b5:
                    66:7d:14:df:23:7b:7d:3d:6e:8a:45:83:8b:8b:77:
                    79:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8E:E5:E2:95:61:EA:42:5F:44:BF:94:BC:CD:43:B8:F2:AC:66:28
            X509v3 Authority Key Identifier:
                keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:27:93:2d:fc:56:0f:be:e7:f7:45:16:d6:e4:07:68:28:44:
         bd:f9:45:c9:5f:a4:14:9f:cb:39:84:fc:4d:a1:4d:45:d8:f8:
         fe:3c:63:e7:d8:b8:2a:30:07:8a:fa:04:59:78:c9:c8:1d:07:
         5a:60:e2:ed:79:5a:5b:a8:32:a6:45:54:2f:39:cf:f3:8d:10:
         b0:3e:fa:7e:b6:83:5d:fc:52:c5:72:0f:c5:f7:66:3f:3e:72:
         b0:49:d4:60:fa:65:0b:7c:20:5a:e3:49:0e:23:7b:18:f7:2c:
         44:53:f5:a6:12:c1:1a:d3:2e:e9:fd:5b:38:b6:d8:9f:c7:c1:
         bb:1c:f7:95:c1:68:91:a5:0d:6f:b5:ae:0e:88:05:e7:b6:17:
         ca:3a:e7:f7:72:5e:fd:82:49:eb:76:4b:58:30:97:f0:67:d3:
         1a:dd:99:c1:fb:74:c6:74:e7:06:33:75:a7:e9:a6:76:27:1e:
         e5:28:7b:67:b9:74:91:10:38:b7:86:91:61:f7:27:c0:8f:45:
         c9:69:96:5b:64:5d:be:1e:7e:cc:10:2b:05:35:56:ad:1a:6f:
         24:aa:bb:b4:f8:a2:ca:26:67:2f:59:86:6f:ec:b7:19:19:d9:
         a4:52:9d:49:92:4b:d7:3b:38:9c:87:f7:b7:75:54:f7:17:00:
         75:e4:a3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 14:07:01 2025 by rpki-client on console-ams.rpki-client.org