Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File:                     paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier:          J1k5Ev6l7oI+ojXwp0+dnfeU1jXPJOmJZ1Thb6sWJ0U=
Subject key identifier:   D3:93:94:9F:49:2C:E8:F7:A5:1A:82:F8:94:57:EF:31:6D:EC:01:8B
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer:       /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial:       018F87ED84488F53E8C9C0B5A2B6B6340408
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:40 +0000
Manifest this update:     Fri 17 May 2024 19:00:40 +0000
Manifest next update:     Sat 18 May 2024 19:00:40 +0000
Files and hashes:         1: KdCqUGyIyCtb6BU-2DJngF5sAtg.roa (hash: Obe3428r3w+UG/xbSpY9dwkqjrD6gNTag6/FtrTepKM=)
                          2: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: rI63FxrJMCZilYvhztTuNvz3zgmLOePk4RM527BH1OQ=)
                          3: ua2D3DZ_yFjqLtiaonk0Ekn2xWw.roa (hash: QJ9Ho0jYdXTiLzW+Tmdnr+5RyxpgnT1FVAg0oVraMeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:84:48:8f:53:e8:c9:c0:b5:a2:b6:b6:34:04:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
        Validity
            Not Before: May 17 19:00:40 2024 GMT
            Not After : May 18 19:00:40 2024 GMT
        Subject: CN=d393949f492ce8f7a51a82f89457ef316dec018b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d5:8f:db:e3:86:ea:22:69:3c:52:12:6e:38:
                    fb:0c:ff:8c:36:70:59:91:2f:6d:11:4f:30:27:a6:
                    3a:f9:42:d2:88:06:5a:69:6b:e1:c5:a0:4e:2f:8d:
                    32:c8:72:b2:91:96:9e:30:cc:34:64:85:30:58:66:
                    94:c9:c9:97:f9:83:d6:1d:68:67:6c:4a:16:1b:3b:
                    2b:4b:28:b3:90:f9:8e:f3:13:e3:9f:1a:09:fc:94:
                    be:21:ce:79:a4:d9:29:28:9b:59:29:b0:31:eb:9c:
                    a6:ef:ad:be:d3:24:dd:38:86:4a:81:77:5f:cf:61:
                    dc:ee:85:be:48:52:75:a1:65:85:66:ff:a3:f6:c9:
                    91:9d:4c:d0:0f:da:38:a1:da:6e:3d:96:72:26:96:
                    fd:7b:ff:bc:4c:a3:1c:74:8e:d1:55:3b:37:00:6b:
                    58:1a:6f:a9:e3:2e:15:14:6a:2c:ab:d4:4a:f4:1b:
                    02:5b:e7:0e:38:ad:f7:e7:df:b8:da:11:f5:73:56:
                    96:10:bd:59:ba:e6:bc:2e:0d:6d:5d:95:4f:02:3d:
                    4b:80:2d:e6:4e:98:4f:ec:ee:5c:af:2b:38:64:3b:
                    ad:29:b4:f8:85:6c:15:9d:bd:ce:1a:b6:76:9c:c1:
                    e1:53:cd:2a:4d:cb:4b:67:a5:92:6a:df:30:db:4c:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:93:94:9F:49:2C:E8:F7:A5:1A:82:F8:94:57:EF:31:6D:EC:01:8B
            X509v3 Authority Key Identifier:
                keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:71:d9:ae:02:16:b7:c7:30:0f:6c:b5:c5:bf:27:9e:a1:7a:
         4d:a8:65:14:37:69:51:21:29:85:1f:6b:34:a1:d2:ab:fe:54:
         b4:c7:99:bb:21:c0:5e:13:bd:0d:12:65:87:54:e2:fe:86:17:
         d5:f1:67:63:08:fa:3e:93:7f:ce:95:84:99:25:de:67:b9:45:
         59:31:f4:db:ab:1b:d2:e8:ff:85:07:c5:27:93:ce:35:93:4d:
         74:f4:26:7f:24:5b:1b:c2:9b:99:5c:5c:ca:e5:f2:0b:d2:58:
         3f:a6:81:6f:05:e3:17:c8:9b:1f:68:d0:68:7e:9e:62:36:a1:
         0f:04:11:8d:65:26:85:7d:c5:87:52:74:ec:7e:94:30:24:9f:
         5c:f5:a4:39:fd:37:2d:b6:e2:81:d0:4e:22:7f:a2:9a:93:c0:
         45:85:34:b0:52:23:99:8f:30:8d:41:b4:e5:66:a8:7d:53:72:
         69:54:10:e9:9b:73:17:a4:7e:68:5b:bd:fa:14:65:80:c8:ff:
         5c:1c:db:7a:32:26:13:a2:ed:1b:af:20:df:5f:b7:8a:68:f8:
         47:62:30:d3:f9:a6:1a:51:3b:97:54:ff:8e:d7:8d:e1:93:bf:
         54:52:ad:ec:d4:12:76:6b:e0:ed:ec:11:cb:39:d3:66:52:2b:
         fa:f7:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:58 2024 by rpki-client on console-ams.rpki-client.org