Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File:                     H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier:          KyXs9orywDlnIiKl8e79BqBj4/tqta1JwG2+/kgdfew=
Subject key identifier:   47:78:7C:F5:01:CB:0D:AD:E0:48:16:D8:60:D5:9D:B4:9A:DB:A6:6B
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer:       /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial:       018F3BF8B0A51DDB5FAFFF59367561EAC4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number:          0842
Signing time:             Fri 03 May 2024 01:01:44 +0000
Manifest this update:     Fri 03 May 2024 01:01:44 +0000
Manifest next update:     Sat 04 May 2024 01:01:44 +0000
Files and hashes:         1: 1-hXvtz1Lj7NBKVN4pTXdrNGBMZ4.roa (hash: TVN8Ou6VwU/WLku8R7NNgNmOq+30VvurRAmj7/GPxq8=)
                          2: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: TolcbkAFjhCU1o0ikIeuLKf8Vtb+YuBFFPs52lQAgEc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:b0:a5:1d:db:5f:af:ff:59:36:75:61:ea:c4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
        Validity
            Not Before: May  3 01:01:44 2024 GMT
            Not After : May  4 01:01:44 2024 GMT
        Subject: CN=47787cf501cb0dade04816d860d59db49adba66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:c1:e5:31:1d:66:1c:ad:c4:cb:0e:40:36:
                    f6:55:b8:77:e1:e4:97:e0:90:ae:6f:e6:2e:10:4c:
                    25:55:06:26:a1:3b:03:89:fa:09:ff:82:82:1f:d2:
                    0c:45:e1:9a:cd:41:db:b6:0b:39:b6:b1:7b:30:82:
                    49:b6:0f:b3:89:e3:6c:61:4b:50:d3:f8:e5:6a:e7:
                    d2:8b:ff:2a:db:ca:3d:49:38:cd:96:13:71:0e:65:
                    1a:d5:fc:82:ae:28:76:e3:1a:5d:e6:78:ef:81:61:
                    d7:d1:c3:d9:b5:b9:84:c3:eb:b2:16:f9:d0:98:0d:
                    bc:d5:99:00:d9:18:d5:90:33:8f:55:a2:44:00:b4:
                    4c:b3:99:d8:13:4f:c8:fe:7d:ba:f6:31:59:a0:1b:
                    ce:fa:02:21:7e:0b:da:0f:62:3b:d4:44:3b:7a:10:
                    a0:e9:d8:e8:39:70:ab:d8:2b:b4:48:04:55:57:30:
                    71:16:f6:fb:d0:25:89:dd:f3:e2:27:02:f1:f2:dc:
                    7a:38:63:97:5d:66:a9:90:36:4a:08:b8:d4:7b:94:
                    01:f3:5a:cd:ed:77:95:0b:46:32:af:dd:33:e0:58:
                    53:ae:c0:38:c6:a9:e9:16:27:bd:37:ca:27:f3:29:
                    3c:83:61:4b:84:0d:90:2f:56:81:b5:c7:6f:a0:85:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:78:7C:F5:01:CB:0D:AD:E0:48:16:D8:60:D5:9D:B4:9A:DB:A6:6B
            X509v3 Authority Key Identifier:
                keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:5c:9c:04:8e:c7:2f:b9:33:0e:2b:60:2f:89:db:aa:75:6f:
         b4:76:84:ab:73:b7:f1:83:d7:a0:ab:45:54:1d:d5:c1:40:9b:
         f6:78:24:d4:fd:45:a9:34:47:10:72:e9:66:93:fd:07:0c:81:
         c0:2e:81:ca:80:8f:ec:3c:9b:2a:90:9a:03:00:c0:2e:22:12:
         51:d7:cc:70:b2:1f:64:81:7c:7a:24:75:53:2a:24:9e:da:a4:
         d4:73:9a:f8:b1:c0:50:7a:ce:c0:8b:3c:1d:49:a9:4e:4a:fc:
         e0:54:d8:e5:a4:96:f8:a6:3a:c2:a2:b1:e5:66:5a:f6:10:25:
         12:b7:ac:d9:70:79:01:ea:e5:9a:21:21:0e:45:8b:83:4f:66:
         80:76:65:20:2c:95:63:31:35:2d:60:7b:12:12:01:0f:b8:8a:
         bf:6a:88:33:14:07:c8:bb:75:d8:3a:3f:58:d7:d5:02:1f:50:
         24:01:38:d0:5a:6c:f8:78:94:e3:d6:3a:cd:91:44:ea:e1:cf:
         36:63:c7:cf:8c:88:26:0e:a9:40:87:08:7e:05:18:d9:18:d2:
         d9:c6:17:4d:d9:0c:a9:46:10:0b:57:08:93:6d:9a:13:ec:3b:
         5d:ff:61:b2:d5:74:8f:a0:4f:ce:f8:ee:b8:b6:41:d4:9c:a3:
         45:5c:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:30:02 2024 by rpki-client on console-ams.rpki-client.org