Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File:                     pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier:          ZKYxuGrZMHL4TeHM8P1sSvUSpjs00mB9gaxI+vEsh8M=
Subject key identifier:   17:BD:CE:6B:02:9F:E4:8A:9F:CF:86:0A:88:15:F6:F7:4E:F7:C2:EC
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer:       /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial:       018F87B63FD189987B991EA2CFEA407FCDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number:          1124
Signing time:             Fri 17 May 2024 18:00:19 +0000
Manifest this update:     Fri 17 May 2024 18:00:19 +0000
Manifest next update:     Sat 18 May 2024 18:00:19 +0000
Files and hashes:         1: 1-gC2Y9IZs3wzINqalHgmM7FHjLQ.roa (hash: wPh78olFSg+DC9182Id/4W5kSmywsh7SfbCleolVrPc=)
                          2: hYoEXk29qymZH3IflPywBEOwFHY.roa (hash: hLf2fX1NPyzj2MQLtn8oenJAnsjdJUYXsN8nm2n0B80=)
                          3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: 5BjZPo58j131LQm2ugYZ2Mv4PwOk2uhYkD4U8DXhJoM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:3f:d1:89:98:7b:99:1e:a2:cf:ea:40:7f:cd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
        Validity
            Not Before: May 17 18:00:19 2024 GMT
            Not After : May 18 18:00:19 2024 GMT
        Subject: CN=17bdce6b029fe48a9fcf860a8815f6f74ef7c2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:5c:1d:28:f1:d6:37:55:ee:07:80:a2:2b:
                    cb:af:29:50:98:59:ba:68:bf:eb:46:30:bf:09:5c:
                    c5:e0:65:fb:ea:1b:e4:72:a8:0b:42:5f:34:2b:0a:
                    63:ce:09:d2:da:c4:55:7f:31:19:54:aa:a3:cf:20:
                    07:ea:1e:d4:23:ee:7a:74:63:34:9a:04:53:07:25:
                    a5:42:15:b0:e6:cc:6a:03:4f:c4:16:18:c6:00:b7:
                    ed:64:52:f8:ef:fd:03:3b:23:97:db:66:85:32:21:
                    30:b4:e8:56:28:ca:f0:21:e3:eb:e2:a4:cd:b2:65:
                    ce:d7:fb:5e:28:56:4e:29:61:8c:7f:45:42:ac:41:
                    18:16:75:ce:58:30:a6:eb:42:5a:31:1e:63:75:06:
                    a6:08:bd:30:38:2a:2e:43:e3:ce:fe:7b:f4:b8:1f:
                    73:ee:4a:ea:4c:c2:18:42:be:ce:7e:ac:39:43:62:
                    3e:92:77:fb:44:6b:bd:94:62:e0:b9:41:8f:c9:a5:
                    66:39:a5:8d:80:c7:01:9a:af:cf:36:1c:fd:4d:80:
                    17:fa:60:b3:2f:19:3b:22:4c:07:70:8a:de:09:90:
                    7f:23:a5:f5:c9:b9:56:f1:e9:b2:a5:3a:58:09:cb:
                    d7:f8:cf:6c:cc:f1:a9:7d:42:66:5f:d2:8f:92:05:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BD:CE:6B:02:9F:E4:8A:9F:CF:86:0A:88:15:F6:F7:4E:F7:C2:EC
            X509v3 Authority Key Identifier:
                keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e0:4d:e3:a0:f0:c1:73:fb:06:f0:94:2d:86:0d:43:6f:7c:
         fc:3b:89:25:f0:7c:d5:2b:fa:51:02:ce:a4:a9:5a:56:e9:ae:
         bb:04:7e:9b:dc:ad:61:60:1e:12:8d:1e:43:06:ca:f3:3c:0d:
         0d:b6:d5:92:7d:da:08:a4:8d:db:3e:ad:d3:73:60:db:86:d6:
         d4:a8:20:dd:6e:60:9d:5d:fc:77:f7:53:ed:f5:a2:f7:bf:5e:
         19:c4:1f:80:be:f3:6a:d4:4c:1a:48:cb:f7:12:b8:86:f4:05:
         be:97:f9:da:76:c9:65:ef:69:72:40:14:d9:d4:6a:e2:8e:8c:
         84:6f:db:fc:8f:d8:cf:da:86:f6:3d:d1:79:0f:8c:54:47:6b:
         f5:48:d9:88:fa:df:50:6a:18:59:7c:0e:ff:98:6e:9f:a9:b4:
         d3:09:7d:31:b7:e5:93:d2:df:53:f5:93:0e:34:e2:82:6f:4b:
         ee:fa:10:5a:ff:ab:a5:2a:29:ca:6f:2d:17:a3:8c:f2:9c:91:
         79:f8:ae:f3:f2:81:15:fc:cf:2d:31:3c:1e:b9:3c:93:63:7e:
         61:90:10:f3:e1:ed:ca:01:9d:bd:d4:9c:04:45:29:69:53:3a:
         55:8c:b0:df:d8:e1:f9:07:fc:30:d7:0d:5e:10:c7:bb:48:98:
         2e:42:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:40:21 2024 by rpki-client on console-fra.rpki-client.org