Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File:                     9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier:          4jXueplorPAG1Ll2zwcBG4urVPb3XBfeEz5OfzKaKIw=
Subject key identifier:   96:E7:91:91:AC:09:5D:D6:39:7C:2C:E4:F5:1E:FB:52:4C:30:1F:80
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer:       /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial:       018F46453AA1D14A2E1FCCFA48F5D3E389FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number:          1160
Signing time:             Sun 05 May 2024 01:01:33 +0000
Manifest this update:     Sun 05 May 2024 01:01:33 +0000
Manifest next update:     Mon 06 May 2024 01:01:33 +0000
Files and hashes:         1: 6mtbwnqqMdIVKLnH-8XNwF-2Mmk.roa (hash: PGGjzu893/Jfmc9YUUzVNZHJDH+7efyd7GnCEh1q3gM=)
                          2: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: 39AelVsu75W1E81NTS7GiEqtlyroGUntb5A8q/mFlVo=)
                          3: GevYcVSJ8-BBlQzeDFXslA2jiNk.roa (hash: 8I7LhfiF4ZjOQaoexMRMKwDWKct8Wwb4wQQsFDwXf+s=)
                          4: m7H66mgYgF2oMhoWkfKtA_7uTxg.roa (hash: t8HKsRxM3lLQvrYKbN0jlaGCPawKtBvquq9bY9ncZvo=)
                          5: pTeulQvFFNnjqRjeTfnPDhTn3PQ.roa (hash: JgjxNVAOso4SOrPDiFH/aQ+UTiz4hGmE9gcDE35bYKY=)
                          6: yyA4SEGCEngBOBrLBB9zix-j7kM.roa (hash: 4cG4MoDKHXZHpxBC275ZgBWP8XPFI9pMEn7PFJ/8Tgs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 01:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:45:3a:a1:d1:4a:2e:1f:cc:fa:48:f5:d3:e3:89:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
        Validity
            Not Before: May  5 01:01:33 2024 GMT
            Not After : May  6 01:01:33 2024 GMT
        Subject: CN=96e79191ac095dd6397c2ce4f51efb524c301f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:60:36:99:16:90:a5:29:9e:ec:ce:e9:03:
                    9f:02:5c:c5:e0:a0:31:58:7d:47:38:57:df:28:a4:
                    d9:98:43:29:a0:89:a2:9b:19:10:ab:98:82:0a:88:
                    6c:7c:02:bf:52:ce:16:f7:b1:24:bb:b9:f4:bd:b4:
                    0f:a8:ca:b1:fe:6c:2a:1f:12:60:eb:90:e5:3c:ee:
                    be:53:42:fe:f9:ee:7d:3d:f0:97:39:d7:cb:f0:4b:
                    7b:e7:6d:ad:81:fa:21:92:2d:c1:88:dd:1f:81:85:
                    2b:1a:f4:61:36:ea:18:aa:d0:77:3e:ff:2f:42:0f:
                    65:9a:e8:d8:fa:e0:f0:8e:d2:d1:a5:86:3d:a4:14:
                    48:bb:66:37:56:3a:f8:44:61:66:53:9d:a9:5d:35:
                    9b:e4:c5:7d:4c:b8:0c:ce:2f:34:f5:a8:2d:dd:94:
                    a9:b9:48:3b:3c:d2:ef:8e:bb:40:b8:e9:53:ad:03:
                    d9:ac:10:f5:f5:a6:5f:fc:0f:da:63:96:b9:97:5c:
                    bc:f5:84:9a:65:b7:c3:6e:05:4b:5e:9e:a1:f3:16:
                    3b:98:96:8a:29:00:ee:c2:46:d9:3e:55:9e:22:ca:
                    4b:03:6d:af:8f:cd:30:72:ca:7f:7e:b6:81:99:24:
                    eb:e0:76:b6:07:dc:13:41:6a:c5:03:ae:34:f1:40:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:91:91:AC:09:5D:D6:39:7C:2C:E4:F5:1E:FB:52:4C:30:1F:80
            X509v3 Authority Key Identifier:
                keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9b:65:7c:f5:22:69:be:a3:70:ad:61:3e:a2:7f:a8:66:19:
         29:2e:16:a1:d0:0c:a8:99:4e:14:32:47:fc:26:0b:e8:a5:c2:
         e6:8b:68:eb:d4:d4:2d:40:5a:bb:68:cc:f2:c8:6d:44:1c:0d:
         5f:9b:b0:d6:36:f3:40:ff:cb:b0:2c:13:f8:90:e5:66:31:8b:
         72:11:fc:08:e3:6b:59:aa:7a:e0:90:94:e6:c3:6c:6d:1e:5a:
         e1:4e:e8:70:24:b2:81:f3:df:c1:69:d6:70:86:b7:d4:9a:e3:
         9c:01:1f:05:9d:42:a1:3b:32:4e:a5:01:61:5c:b2:ed:d5:64:
         ea:1f:b4:21:7c:6d:be:29:46:1e:4c:a3:b6:50:b9:24:0e:3b:
         35:72:1c:18:28:f0:2f:d7:86:c3:8b:39:13:72:22:2f:f9:aa:
         cb:7e:26:1d:1e:9e:07:79:88:13:54:f2:3b:94:d4:41:4c:41:
         c6:ac:60:57:6a:0e:10:45:2a:e6:ed:16:d0:b7:63:64:bb:12:
         85:0f:74:87:ec:a9:6f:9c:d5:39:52:fa:a8:10:f8:e1:be:f1:
         76:2f:8a:55:69:81:e0:3b:4a:5f:ac:ba:8a:8c:b3:0a:5d:5a:
         b5:ce:cf:23:a7:47:ee:71:b1:76:5a:22:72:d9:2d:f0:60:2d:
         df:a5:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:02:30 2024 by rpki-client on console-fra.rpki-client.org