Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File:                     cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier:          oG1zACP5pUYB1loOKRVLxZxq8t5CaBSdECZtgnFWwUg=
Subject key identifier:   78:6A:AB:98:69:53:D1:04:B7:A6:8A:0B:7A:FE:4F:5D:27:4B:E6:1A
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       018F87B6AE69922221CE5F58AC6FA33473A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number:          0D8B
Signing time:             Fri 17 May 2024 18:00:47 +0000
Manifest this update:     Fri 17 May 2024 18:00:47 +0000
Manifest next update:     Sat 18 May 2024 18:00:47 +0000
Files and hashes:         1: 1-XzzBE1ue9PBAiO0y3DncE-FqQQ.roa (hash: +ubeeYwRsnNgGeOTpVxbhi6xUirKjUN51QlJ/8/KzyA=)
                          2: LNCbGchNKPtwOhviLPoASnFwEo8.roa (hash: IHq4gDF+CqJbmE9++HSJT2YEOHN4ch9pToMNvPtYy7c=)
                          3: OA3WKmsXMdwZYnWfkQW2P5YjgEU.roa (hash: GUP2P5syUDTJIfwl/A6jhF6oN1sxTd1TetS4GTdjoIc=)
                          4: PcXbbPXlIItmJA3JM8MVUc0vXzs.roa (hash: R2PCxNT4m6wYdpbhogq5go76MVBXJtQZ8sywwvkDHG8=)
                          5: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: OgDnHMWjXHPE6QgK+/WXug0jHhySOaKm9n7sqK1NsQc=)
                          6: mfdXD-p1mOuMpD-3nigvl-pIoNo.roa (hash: Fza+O21uXfNjK+m/0DHD2ALefnNpWiNcHa4rMYPUQz4=)
                          7: qcabB6BNdX0OT8QGSzQMsPf_pQ0.roa (hash: N8vt9SDB/MwNr7TS+TIwJMU2xkiHtesho91mF5R1zFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:ae:69:92:22:21:ce:5f:58:ac:6f:a3:34:73:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: May 17 18:00:47 2024 GMT
            Not After : May 18 18:00:47 2024 GMT
        Subject: CN=786aab986953d104b7a68a0b7afe4f5d274be61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:dd:c3:0a:7b:d3:5c:f6:19:3b:26:dd:2a:
                    7a:dd:5e:00:ab:8e:bf:f1:0d:00:6a:cd:15:b7:95:
                    65:40:5c:1a:24:b8:b0:82:72:98:2e:34:77:6a:3c:
                    c6:58:26:67:0b:0c:f9:48:2f:6c:41:54:b7:4e:1f:
                    14:1f:83:28:9e:b6:00:2d:f1:5f:34:fd:3d:3b:36:
                    94:f2:c6:9e:40:30:dc:9e:f8:75:23:40:37:fa:7e:
                    12:cd:fd:62:bc:44:ab:8c:05:a1:f3:08:49:07:2d:
                    f6:1f:2d:32:bb:07:68:7c:ab:e2:08:a6:6b:ed:ce:
                    17:c8:6e:0e:9e:7c:0b:18:b5:a2:9f:7b:d3:21:f2:
                    a0:18:94:98:84:36:4c:3d:39:66:c2:91:bd:74:ab:
                    24:66:5f:43:62:d6:8d:34:cd:3c:30:e5:5f:ac:31:
                    0c:68:60:c1:80:73:94:a0:cc:64:dc:eb:1e:79:1a:
                    0d:51:20:c8:b0:94:ab:d7:66:39:02:ac:28:2e:d3:
                    0e:b6:71:87:c9:bd:ab:26:f9:25:38:3b:ff:15:a0:
                    d1:97:74:96:fa:2d:24:54:0d:a0:8a:07:6b:cb:54:
                    ca:dc:92:52:38:c8:bd:9f:34:ae:92:d5:92:23:9a:
                    44:a7:83:0f:3b:94:5b:d6:5d:fa:67:b0:2e:db:8c:
                    c8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6A:AB:98:69:53:D1:04:B7:A6:8A:0B:7A:FE:4F:5D:27:4B:E6:1A
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:13:48:33:bb:3a:bd:92:4b:89:bd:48:c9:5f:11:a2:62:
         b5:8f:b4:98:7f:88:c8:ef:f4:9e:f4:91:8d:8b:e4:88:7a:8a:
         48:6c:a5:d5:a6:38:07:61:ff:10:95:7c:12:a0:bf:53:1f:e3:
         ce:e8:99:47:22:d2:cb:26:69:5c:5b:3b:08:bd:c0:e5:8c:6c:
         9e:72:40:dd:64:76:31:94:a6:f0:53:89:f7:8a:57:fe:34:ca:
         51:c2:5f:27:a2:77:e5:46:fd:fa:52:82:13:b1:44:09:3c:75:
         99:27:c9:fc:81:f6:c5:32:b4:ba:00:f7:58:2f:15:ac:b2:6f:
         41:49:47:6a:3a:4e:0a:a9:fd:d5:f3:9f:f6:89:db:5f:67:06:
         b4:9e:fe:c8:92:62:18:86:be:99:97:19:bf:41:89:92:f6:96:
         fa:96:e4:c6:8c:df:69:8b:45:8d:af:ba:2f:64:89:d5:6d:be:
         fa:f8:be:aa:7b:25:e1:1a:65:75:28:bb:af:57:6b:44:00:e1:
         02:fe:0a:f2:59:68:c9:3b:6c:5c:06:9c:35:58:b9:ad:08:e4:
         8b:63:d8:dc:dc:f9:7f:b5:f9:6d:59:ab:e7:ff:05:23:a4:a8:
         fd:08:e5:10:89:45:f0:c8:4a:65:24:ae:83:6e:e2:d2:2a:6a:
         d2:76:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:07:18 2024 by rpki-client on console-ams.rpki-client.org