Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File:                     1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier:          G946wu9mXU2Aj2UXzE59IpfqRI8DJiJW+yPxHcwVSMo=
Subject key identifier:   38:8E:24:03:A3:AA:88:B9:38:91:02:AA:65:96:FA:13:BE:BB:A7:96
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer:       /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial:       018F362E85AC1053255301483E7B9DDA9500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number:          0AFF
Signing time:             Wed 01 May 2024 22:02:49 +0000
Manifest this update:     Wed 01 May 2024 22:02:49 +0000
Manifest next update:     Thu 02 May 2024 22:02:49 +0000
Files and hashes:         1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: r68DhMNiEo685VwKTp0/3NrmjrTP+0b1rkci2AkimZ8=)
                          2: 1bdOMIbvc5hhMjSg5FBRCCJdq84.roa (hash: apFkPc8WYsDfO0FkcCAoY3zvmqEfPCWdIk9DyjZ+04k=)
                          3: 9ZZSOafnhooqrJjUuJki28vifKs.roa (hash: SgXHiFjZAu+q7kSfMbvWeItINzJKTdexMW7FLmsdV9Y=)
                          4: PsdjzA_VaxK0TCCIrw3v0M11o6g.roa (hash: pVgKRYFtLEwQh0LY8M7cv/v4JwEbMlpwF95+Ztt/OLI=)
                          5: g_tftySCpNo-PiGj0lAqlZC1ISA.roa (hash: 5sm4SXMjTP1FfBuITzJLMiufIGrtJAppPShZtmEY8+A=)
                          6: pu3FV2HN9lYJR88Ww1-K-r9MyvM.roa (hash: prYgRr/gg5AkKKdndwb9a90EXVnq/3UrJ4udgYUXp7k=)
                          7: ssXsmg0FRqriCEyhlZz4g0dEwNM.roa (hash: OwWEPi1aqola22Nw81lXiOpoKP8Oabru4A1aOn20CFU=)
                          8: u2dXA72zZ-FYk_eNcsIR1xEwf_I.roa (hash: Wz/r4XiXtFhZrQPehQLnM32GhwcH9CicQOCNV1cc7hk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2e:85:ac:10:53:25:53:01:48:3e:7b:9d:da:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
        Validity
            Not Before: May  1 22:02:49 2024 GMT
            Not After : May  2 22:02:49 2024 GMT
        Subject: CN=388e2403a3aa88b9389102aa6596fa13bebba796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:32:cf:36:2e:26:75:06:a3:26:59:b6:ae:ad:
                    d8:9f:44:3d:6a:74:e1:a1:cc:bd:98:df:08:14:26:
                    77:f4:52:a7:fd:ba:6b:e2:3a:9a:67:85:01:0d:30:
                    ea:af:17:d8:57:6a:b0:07:01:2a:bb:80:fa:97:96:
                    b5:79:0a:b2:bd:e2:31:4a:6c:d9:db:9f:9d:0d:38:
                    fe:a0:15:1b:7f:9f:4c:a2:27:d5:be:20:98:5b:4e:
                    31:ed:da:e8:82:04:cf:ee:50:74:ff:0f:71:69:bb:
                    e5:ca:ad:f0:64:5b:d5:33:fc:99:7f:fa:2a:5b:d4:
                    47:8b:3b:94:d4:08:2f:17:41:ae:b4:08:81:67:79:
                    d9:f6:4c:8e:ce:6b:02:9c:c7:1e:ff:aa:50:48:a8:
                    8e:2a:3a:29:d5:c8:38:44:13:d4:0d:da:d2:9f:2d:
                    47:36:a6:df:cf:a0:79:fd:0a:02:59:ab:cc:ec:08:
                    51:a4:6d:b7:da:e1:49:ed:66:e1:f8:99:3a:10:c8:
                    92:06:1e:e3:c2:a7:ab:32:7a:65:43:7d:cf:44:82:
                    2e:c9:60:34:0c:4a:17:f7:18:51:91:e7:08:55:0c:
                    00:a3:ec:f8:f6:ff:b4:0b:21:11:55:2b:14:69:b2:
                    62:6b:6a:bc:44:95:bc:e4:44:16:9b:90:60:ab:88:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8E:24:03:A3:AA:88:B9:38:91:02:AA:65:96:FA:13:BE:BB:A7:96
            X509v3 Authority Key Identifier:
                keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:eb:d9:65:7e:36:43:aa:3b:9d:81:f0:93:d1:99:7d:55:aa:
         74:dd:29:66:e1:92:15:60:14:77:3b:55:dc:79:0f:e4:25:7e:
         27:ea:1c:8e:73:76:a3:00:0e:78:90:48:83:87:fe:f1:17:27:
         b4:f9:a8:00:3c:fa:96:3d:e4:86:76:51:a1:00:28:50:b6:44:
         60:fe:07:88:35:76:61:7d:7d:8e:c5:9e:cf:06:e3:47:30:f1:
         9e:1b:52:74:97:9e:0d:cf:8a:14:29:6b:8d:e1:90:91:00:92:
         75:a8:b5:d9:66:32:d5:dd:e1:b9:39:0a:05:3d:69:8e:bb:e4:
         2a:97:ea:9c:3a:f1:68:f5:74:fd:3b:af:06:5b:90:17:b2:e8:
         9e:06:5a:d5:88:84:9d:8c:25:ea:63:2d:44:9a:05:8c:ee:5b:
         52:7a:03:83:6c:20:1a:a8:59:ac:c1:c0:4a:d6:95:a0:aa:03:
         ac:14:3e:0b:87:e9:77:58:29:b9:ee:dd:21:2d:79:70:69:65:
         c4:28:78:3d:98:6e:88:42:1b:8f:21:8b:65:ac:5a:33:67:cd:
         16:54:15:d7:8b:42:38:96:c1:58:e6:92:e6:aa:19:66:1f:49:
         52:c1:92:74:e9:c6:2b:39:e8:45:67:28:12:c7:a6:fc:ea:dd:
         2b:e1:50:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:35:41 2024 by rpki-client on console-fra.rpki-client.org