Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
File:                     IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json)
Hash identifier:          8pPjh4H0gwP+kSWogzB2o3dfzNBBd0pkDrmGbEyLVl0=
Subject key identifier:   AA:30:6C:A9:CC:65:8D:40:B0:D9:9A:22:77:57:8B:F7:A2:D5:0B:D2
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Certificate issuer:       /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial:       018FA32E049F4276F0B21FD812862405F671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
Manifest number:          1170
Signing time:             Thu 23 May 2024 02:00:53 +0000
Manifest this update:     Thu 23 May 2024 02:00:53 +0000
Manifest next update:     Fri 24 May 2024 02:00:53 +0000
Files and hashes:         1: 069gnVVGs35yMFqXK1V1WAbyBxY.roa (hash: oOxG9165Qzv4iIYaYCogemNlpeWwgNHfFul3TXbsGQI=)
                          2: HaNLVUNjmjJ7tAk1U7_k7yvr5zc.roa (hash: R7EhoacM7f2hB2P7/c07FgCX4tb/uPa/nm4YjR6OtMY=)
                          3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: IPZK68at5Fh7qAE9gs/QYAeJcz1x48MZRT4b+uvCJ0A=)
                          4: OnG_85qZ_RDQ9ORu2mVxfXdwmJg.roa (hash: CJRr2euPa/WAO4BqY17DvKNHQb9/4Nux36kXat8Z2qQ=)
                          5: UIhshyHc1VeJ_7E_M0zgEAzy6Do.roa (hash: VWcsJTyqN1Bh0xMkW3/Pqkuo3zU1VOGAY9Ur2DyOIWs=)
                          6: UOARW4Efpe67MVYGYqC65cBcvgQ.roa (hash: uXGJha5kym3X1jfPWm5oA+SLDwTOihE+rxJJxHVcjk0=)
                          7: pKlLqWb2Ec1GyNRt9KcLMlb3Rag.roa (hash: wYG3XUL9wT/eynISQ1e9jVe9GC6n0zL3AkldjWzXobE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a3:2e:04:9f:42:76:f0:b2:1f:d8:12:86:24:05:f6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
        Validity
            Not Before: May 23 02:00:53 2024 GMT
            Not After : May 24 02:00:53 2024 GMT
        Subject: CN=aa306ca9cc658d40b0d99a2277578bf7a2d50bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:9d:0e:9a:96:e7:da:3c:02:56:21:9a:13:
                    85:c7:f0:79:72:7d:75:48:34:4f:03:4f:45:74:73:
                    09:69:a9:9c:d8:ba:04:df:7c:d8:6c:4b:22:69:8f:
                    fc:b8:be:16:11:1c:7c:9f:a5:cd:4a:3b:6f:1a:31:
                    77:0d:f3:9a:28:b3:23:ca:4b:34:c3:24:88:41:9c:
                    fb:b6:bc:8b:ab:e9:2f:70:a1:f1:f2:64:88:74:85:
                    d7:19:54:a2:4e:a5:a2:04:b5:3b:b7:37:4b:dd:42:
                    37:9f:56:65:44:79:8e:61:ea:a7:8b:72:93:7e:88:
                    ac:f3:cb:e2:ee:fc:04:aa:28:01:70:60:25:df:e0:
                    ea:f0:7d:78:b6:48:12:aa:93:b1:f7:cc:8b:77:8a:
                    62:37:94:4a:e9:6b:24:80:40:e3:e8:94:a9:19:2f:
                    01:ce:3d:a6:f4:62:aa:14:51:e9:a0:4d:25:bc:ad:
                    92:d3:22:31:6c:5e:ff:26:92:84:a0:f4:f0:b6:a6:
                    e4:1f:01:af:79:bf:30:b9:be:74:23:5d:46:b1:23:
                    ba:e9:0f:4c:12:9b:64:eb:fb:63:84:53:74:a7:96:
                    6c:94:4e:ec:78:c6:11:3e:06:4f:4f:a2:c5:32:4a:
                    99:07:c4:8c:6b:e7:61:1b:32:54:85:bb:93:82:0f:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:30:6C:A9:CC:65:8D:40:B0:D9:9A:22:77:57:8B:F7:A2:D5:0B:D2
            X509v3 Authority Key Identifier:
                keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:00:5a:1c:de:a5:40:27:31:71:26:62:23:cd:f0:a0:53:9a:
         9d:ae:f1:99:e9:94:5f:a7:0c:97:74:72:e3:4d:dc:59:7f:c9:
         4a:47:51:94:55:60:0e:83:7a:2b:e1:ae:4d:55:39:5a:6e:2b:
         ad:66:8c:d7:25:4f:c2:ad:74:ee:f1:c0:7d:0d:2c:c1:ca:83:
         be:a1:86:15:63:a8:a5:93:81:21:3b:05:28:3e:b7:0a:a1:2b:
         07:81:5c:fb:43:af:62:ff:b5:ac:b4:d4:f8:1d:f3:d9:2d:e0:
         df:93:ab:01:98:fa:a6:92:be:b5:49:50:09:c8:23:8f:25:5c:
         af:e0:72:9b:11:9d:7a:b9:bd:d5:e4:5f:c7:d6:c1:ca:ba:30:
         0c:5b:10:dd:a3:8b:a2:f4:51:f3:58:e4:d2:16:24:df:b9:ab:
         0b:cb:e1:4b:16:08:e3:17:f3:84:49:e2:10:87:34:05:f6:da:
         2e:f1:cf:d6:80:2c:5e:c6:e1:8a:dd:02:66:c9:03:3c:45:f2:
         39:a5:58:57:4e:e6:52:58:ba:c0:ed:bf:68:84:6d:e1:52:06:
         2a:fc:64:40:ad:71:b3:77:98:db:bd:3d:08:cb:c0:d9:96:38:
         3c:5e:58:d9:2e:7f:b6:6a:8c:69:ef:76:d2:bb:5d:42:b4:6d:
         5f:a1:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:31:28 2024 by rpki-client on console-ams.rpki-client.org