Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          UpP3W0ivmkPFdXxzUjJ3ErrcuufJm1n0Zm5SvjtcRFQ=
Subject key identifier:   38:A2:9F:A5:EE:C2:33:FD:43:96:2C:47:42:F0:4D:0E:16:66:53:AE
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       018F877F4F1E576AD228FD1E28070222A6CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          01AE
Signing time:             Fri 17 May 2024 17:00:18 +0000
Manifest this update:     Fri 17 May 2024 17:00:18 +0000
Manifest next update:     Sat 18 May 2024 17:00:18 +0000
Files and hashes:         1: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: 9uRKnbKTVZ4/KoJTx8+ZNoSlZ+0++pC+sfExZwPcHMU=)
                          2: ArC_ookRtGptDq-wixK5yg1hYWE.roa (hash: efs4IlCG87zYsSdepieX+HVwidhnIQ+i5W+pwF8T9fg=)
                          3: BC87XYMU3Vf03Nlscg7F9q166Dk.roa (hash: IAHIUqj0wb+aHvrvzANmxNWWzZl/niP5qrs98Ur9p14=)
                          4: CrLVpC0mj22DIo6dIwNnwW8l22M.roa (hash: aPRsqFYqYRDDS9J9vbOPUX7TPF5/yAQNQj5mPVvJwbU=)
                          5: Qb51Vg-6AWlPXKob1Oz0z6PuCAc.roa (hash: +M4N6yV7LawYP7jStkyyTVkdxi76hfERFo18JsK0J7c=)
                          6: VbmmV2yyE6vmCUd0455mxv-BNZM.roa (hash: bTMZwtQMQLleItplOcfnRUg74wJYpXzNP9ssN/LiDm0=)
                          7: WrG176JARKx2lNeRwEYFMnF7INo.roa (hash: BBN4/FpILNKTyaQtDtbGJgtX6V27XRqAI2rdFu/9S2Y=)
                          8: ZmiPBbQ7mvpf9gPfZPAXTszOFE0.roa (hash: CZRYOLTDL/UpVvaNEMji7H5wPlyfdbEgDDVSmi4pTA4=)
                          9: jqoxpIIdFCLXL2OSG9NpUwlEj-Y.roa (hash: 8KLYxHqCD+LR3VFdf41thJoo4BrhedqBfRekdStrOLg=)
                          10: mW8VQal48w2oErTZzy-GbeM_wZI.roa (hash: m32I+p1hqH6oohP1RMzGhIwqG/IE4A7WNZqOOc9S8W4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4f:1e:57:6a:d2:28:fd:1e:28:07:02:22:a6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: May 17 17:00:18 2024 GMT
            Not After : May 18 17:00:18 2024 GMT
        Subject: CN=38a29fa5eec233fd43962c4742f04d0e166653ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:5f:7c:f3:13:85:1f:d5:81:c8:81:df:21:
                    f4:2b:ff:61:46:54:a1:53:d4:5f:a3:12:18:86:df:
                    9f:6e:3f:8f:35:53:2f:ee:4f:db:75:d8:6b:81:2f:
                    c8:d7:68:21:48:07:56:fd:f9:0b:87:ec:19:cd:bf:
                    95:17:5f:a6:29:4b:bf:d2:ca:42:de:c9:8d:ca:cb:
                    f3:7d:17:9c:7a:6a:fa:b4:a8:33:93:a1:70:bc:f8:
                    66:2d:2c:51:6b:82:62:2d:9e:24:a7:24:d7:65:32:
                    39:ff:b9:b1:1f:54:fa:97:19:b1:3f:7a:4b:55:b9:
                    bf:4f:1a:d0:f4:ad:a7:e4:37:f7:ea:6c:8f:27:74:
                    f4:3e:24:8d:67:e4:2e:70:ab:0d:ea:d2:04:5f:0f:
                    ad:3a:ef:1c:35:11:96:a0:24:f6:ee:c6:33:c9:16:
                    db:ec:2f:c2:f1:f1:47:7e:a0:1f:64:95:51:f2:ac:
                    f4:00:d4:9d:ca:49:6c:37:bc:e5:96:a2:96:9f:3b:
                    fd:01:7e:86:bd:62:48:54:06:b6:a6:ec:fe:d4:42:
                    a0:6c:da:25:f4:45:a9:91:70:63:e7:44:12:f6:e9:
                    c4:45:ed:ba:70:06:40:5c:1c:51:3c:86:b7:6a:91:
                    20:a3:35:b6:55:8e:46:d9:4d:66:2f:21:d9:a2:b0:
                    93:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A2:9F:A5:EE:C2:33:FD:43:96:2C:47:42:F0:4D:0E:16:66:53:AE
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f8:33:88:2e:d9:57:c2:df:81:54:d2:6b:74:d9:15:e3:ba:
         5a:4e:fe:e0:5c:ae:a4:98:90:b3:45:33:12:01:ae:1a:2c:70:
         8c:58:a6:e4:74:ef:94:57:c4:38:9c:52:4f:42:51:80:63:1d:
         f8:8a:b8:4f:84:fd:ad:c0:4f:a0:3e:8b:24:96:91:df:02:bb:
         91:f5:e7:fe:96:68:c7:c1:70:cc:f0:26:f1:ac:3a:c7:08:f0:
         bb:5d:44:6b:ed:fe:80:6a:f8:82:d2:d5:5e:0e:bd:bd:e1:05:
         9e:6c:20:83:f0:90:4c:6e:1c:c3:14:48:6d:82:b3:b5:4a:72:
         24:bf:2a:42:77:da:13:71:c7:cd:ba:b7:64:a4:6f:ae:7c:14:
         20:e4:92:a4:1d:03:61:f9:c8:74:11:d6:f7:b5:d5:23:79:c7:
         1e:06:92:e6:91:3e:13:ba:1c:9a:86:e3:74:07:8b:1c:72:c3:
         fa:ed:f7:1e:30:9d:5f:69:61:c6:16:dd:bf:00:9b:e5:7e:5c:
         a8:98:99:55:d8:ef:92:f9:a9:bc:04:79:b5:70:31:2b:46:31:
         b7:c5:d0:c6:01:66:05:b3:9d:3d:6c:6f:14:a2:7d:d1:1d:0c:
         c6:23:4b:43:1c:18:b3:1f:40:75:c7:d3:b9:db:52:49:f1:c1:
         eb:87:6a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:44 2024 by rpki-client on console-fra.rpki-client.org