Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
File:                     uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json)
Hash identifier:          csmkYjy1FFCjcVlSJA5pma7KLkKhvwZ8Al7/3/F4YyE=
Subject key identifier:   E0:31:68:32:52:2E:3F:D5:50:20:CC:20:4E:F0:FA:E5:90:FE:AF:CE
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       018F32F4D775D1B49C940BAC5B8691F99BE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
Manifest number:          1178
Signing time:             Wed 01 May 2024 07:00:57 +0000
Manifest this update:     Wed 01 May 2024 07:00:57 +0000
Manifest next update:     Thu 02 May 2024 07:00:57 +0000
Files and hashes:         1: 9y3Rgel4mqZS2K3AdCH8YKWUE8M.roa (hash: lJWcdffitapF6lTbN+0mH5m+bI9avA1xzxdZgX3uqEQ=)
                          2: Cc8kDTTGCvTk9PhKqknQ1q92X7U.roa (hash: bmsp44cRsC89hB7tbHLMlzhVddTSqdlYUipX09gklvk=)
                          3: L0C8LPGvt6hkfSwQ9ldQ6NGxlkg.roa (hash: fU/BqriVpSb/44EdONNjo43Obe8GMI74xsNrnzbhNOU=)
                          4: Z40_jrM1VyJ4YgAnbGrPEaDLbVM.roa (hash: +S35anUb3aTvjXFwLa+QUSE7BTidfnfd8HPnx4RiU2o=)
                          5: cp3RqJOTi4_npd0Ep9c0Pe2QK3E.roa (hash: Fd6YGYo8Ed3iORY+YveqJhgJC9f0A4/IA+BvDb4IA7M=)
                          6: dng2uDh6lJXR5He8xuv-L2VXlo0.roa (hash: HUyAFB/bD/HxDe6bs8xZwm/6K8YNamvKlhmEqmirgjY=)
                          7: lBC-69ALZDrbcimKLccUStO1ECU.roa (hash: Rv2m9DcOnCbDM+79JRzc9AXF2cB0WPWex+i+9xTEiFE=)
                          8: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: e4VkdvOOufcGLbTxquDDRoDdgj1t6Upo/ZIw/MFJ9/s=)
                          9: xGHmqqAvpgXtnn70CJjn_6vcRxI.roa (hash: WiIiY4NxE690Si1r20xhsYIziF00otOrMB4gMiSxDz4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:f4:d7:75:d1:b4:9c:94:0b:ac:5b:86:91:f9:9b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: May  1 07:00:57 2024 GMT
            Not After : May  2 07:00:57 2024 GMT
        Subject: CN=e0316832522e3fd55020cc204ef0fae590feafce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:c9:5e:3d:93:be:2a:b8:f4:72:91:da:85:
                    64:dc:02:35:45:2e:15:1e:a8:6f:30:d3:9f:46:9d:
                    f7:15:d1:19:21:e5:51:5e:ee:93:3f:50:52:c8:f5:
                    8b:c9:24:61:88:ee:79:53:95:b9:df:a6:4b:27:f9:
                    be:5f:ea:f0:58:4b:29:80:0c:03:96:80:c7:04:97:
                    e0:d1:5e:ac:40:05:83:67:8f:58:c7:d7:14:c7:65:
                    cc:62:70:9c:25:d9:51:39:4f:e5:44:65:c3:db:9f:
                    61:21:cd:ca:d6:38:42:ca:f1:f6:53:53:d4:7e:52:
                    82:d8:ca:ab:d8:60:53:f4:76:31:20:12:ea:b7:a6:
                    61:5e:c3:68:9f:e1:d2:98:f4:b1:cb:d2:8a:90:ff:
                    0a:bb:c6:ad:ac:48:e6:eb:73:08:68:69:a7:84:5c:
                    01:ad:66:4a:a8:8c:24:70:57:1c:8c:11:a5:9b:8c:
                    0d:e0:d8:9c:2b:00:db:b3:a3:9c:aa:49:37:b8:10:
                    48:f5:bf:39:b7:c0:88:87:c0:88:f2:2a:31:6a:5a:
                    a1:74:59:c8:eb:c2:db:ec:9f:22:bc:ff:80:ac:3a:
                    04:eb:46:50:99:53:a3:48:e3:19:1d:fc:1b:9e:16:
                    4d:d1:02:7d:e5:87:82:9b:a0:7d:74:41:45:86:d1:
                    25:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:31:68:32:52:2E:3F:D5:50:20:CC:20:4E:F0:FA:E5:90:FE:AF:CE
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:d6:b8:53:09:ea:dd:74:ff:97:15:29:48:cc:78:7a:05:9a:
         c6:e6:fa:fc:31:0d:44:19:c6:ab:fd:7e:c6:86:03:12:cb:5c:
         78:bd:0e:83:1d:3f:a1:e2:7f:69:f4:ab:45:d6:24:7f:e6:cc:
         17:ef:6e:bb:0f:ba:bf:0a:03:08:1b:01:d9:ef:a2:28:04:e5:
         74:f8:8a:e4:ae:c3:9f:68:c5:bc:37:93:66:03:63:64:c7:18:
         0d:39:33:bb:da:6f:1e:48:c9:d8:f5:25:64:a5:9a:64:44:c2:
         cf:f6:00:81:df:dd:de:99:01:54:ce:59:d0:38:b4:95:53:04:
         88:5d:28:a8:b3:dd:12:b4:6f:d6:4c:12:47:92:b8:10:96:fb:
         a1:19:db:13:08:df:dc:57:35:57:be:31:95:e9:0d:d0:8e:90:
         dc:93:b9:43:75:75:fe:f5:8a:7e:4f:b9:4f:95:01:ea:64:57:
         dc:f0:2e:b8:82:f9:e8:e0:b5:fe:cd:36:81:80:f4:59:6e:01:
         4f:59:0f:b7:1a:72:81:d1:f4:d1:81:ed:21:59:0c:28:69:e7:
         b0:b3:d5:fd:02:eb:87:5a:c7:89:a4:f5:f5:88:18:52:b7:7e:
         78:fb:ff:43:21:c6:d6:ee:78:67:f4:fa:bc:38:da:02:2d:12:
         ec:71:7e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 11:00:25 2024 by rpki-client on console-fra.rpki-client.org