Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          73tPcaLAvXZJcPVdfB/6fvBqJwMqV58HYLYFZlhczmk=
Subject key identifier:   EA:90:ED:89:CB:95:FE:CD:1C:8D:02:6B:8F:F1:09:06:69:3A:66:B0
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       018F381DBF632F63CDB9E95F59F365D65F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          0ECC
Signing time:             Thu 02 May 2024 07:03:44 +0000
Manifest this update:     Thu 02 May 2024 07:03:44 +0000
Manifest next update:     Fri 03 May 2024 07:03:44 +0000
Files and hashes:         1: 3BNH5IEXaq9-7zGNXK2rPTQGPNE.roa (hash: OTIkEQu5REolNTG2Ilw35d28N7J3Lnf9Un8dFroargA=)
                          2: 3Bg3PVo5TWcwPOtLlvv7PbmByOg.roa (hash: K3dfdrJYjGLFTEtllyvGsxdAZD6gD5zP69CH5tmr9Ic=)
                          3: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: 6L5VsAck6Lgssdrb/f/rmYcxTsQ7YLd4OXpQe6tCj4I=)
                          4: Bl75VAjXE1iZ4vb5si1QZGMYDq0.roa (hash: jD7WRZRLwPF7N6iiLqk1vqZ8lGL4tDiT3EA0RC3CwOI=)
                          5: DAZZ70kyHQ4fmQYlrltvrKqFVFc.roa (hash: L5V/qK1dsmS3PJOOJrRXeTpjoB/eMclziqjIxjMndMk=)
                          6: Ltotk8i7HZHvN-uRlGopNS5FUNY.roa (hash: Ck0Ln9+nNsOq0PIGXWusqOo59vgbe0EfZCv4ROvPI4Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:bf:63:2f:63:cd:b9:e9:5f:59:f3:65:d6:5f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: May  2 07:03:44 2024 GMT
            Not After : May  3 07:03:44 2024 GMT
        Subject: CN=ea90ed89cb95fecd1c8d026b8ff10906693a66b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:c0:48:5a:bf:67:5f:7b:3c:67:26:85:4a:
                    d6:d7:c4:38:5d:f8:58:eb:89:91:be:f8:66:7f:49:
                    fe:67:b6:4d:32:e4:f6:8f:93:13:ee:dc:83:a2:46:
                    ee:fc:5e:ab:ea:a6:bc:67:94:61:b5:80:13:d8:45:
                    79:04:a3:6d:5d:eb:c7:a4:01:8f:4a:74:43:49:b8:
                    74:b3:9b:e0:a0:4a:83:e2:15:d3:5a:4a:cc:f5:4b:
                    bd:a6:ae:79:21:88:d6:ef:44:b2:92:a7:b6:50:8f:
                    8c:44:cc:ba:81:27:b2:34:86:a0:bd:a0:38:93:7a:
                    4c:57:2e:21:82:72:6c:d0:99:83:d9:6e:0e:df:b1:
                    52:89:4e:9b:80:06:73:03:d6:ba:00:3d:f3:fc:15:
                    d4:e7:89:b3:ab:fa:a0:97:ef:10:c1:4d:29:78:07:
                    9f:84:e2:e7:dd:89:f0:27:5a:16:36:6d:7e:68:c8:
                    fa:12:fd:ee:bc:ad:bd:46:10:4a:bb:2d:4b:16:0a:
                    3d:8c:11:b3:93:c4:1e:8e:30:9e:53:fd:0d:83:5b:
                    f8:84:5e:b7:c9:9c:27:46:98:8b:9e:68:dd:11:9f:
                    be:ac:d7:47:07:a1:8a:aa:81:44:a1:31:55:6f:9d:
                    f8:15:86:07:e8:3b:e0:39:ac:b7:a5:77:2d:e8:99:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:90:ED:89:CB:95:FE:CD:1C:8D:02:6B:8F:F1:09:06:69:3A:66:B0
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:b6:cb:3c:63:66:95:27:13:c9:b9:f5:51:e7:bf:67:5f:
         d0:70:3e:1e:09:12:0f:e8:2a:f9:0d:1b:5d:3d:f7:a9:3e:a5:
         eb:9a:dc:0e:39:d9:5f:d1:0c:54:27:88:de:b1:b9:70:90:9e:
         9d:ad:68:c8:56:39:bf:3e:86:e0:76:28:62:e0:c1:55:cc:01:
         73:9c:4e:71:6c:77:b8:fe:11:f4:cc:69:2d:85:14:20:f1:bc:
         4c:ae:bf:98:52:dc:17:71:13:59:9c:5f:18:24:e2:ee:69:57:
         ac:cb:77:83:93:f2:15:31:0f:40:51:33:17:e1:b6:eb:94:0e:
         15:d0:2b:cb:79:68:dd:a5:6d:ec:d8:c5:9b:e9:2c:0a:a8:ad:
         9a:53:26:df:a6:3d:94:f7:db:d8:6d:38:2e:2d:04:9e:91:3e:
         74:73:18:16:ca:8f:72:3d:01:86:75:02:bb:41:82:11:34:91:
         6d:e9:10:77:f5:14:33:24:43:74:cf:4b:23:81:4b:81:fc:b0:
         d9:80:37:b8:90:0f:b5:73:33:62:32:37:fb:a6:87:1f:d1:80:
         17:5c:4b:75:0c:14:b5:de:dc:73:6d:04:0a:cf:83:8b:a5:13:
         e0:51:ec:da:66:a9:02:89:99:98:e8:c4:a2:48:23:54:5e:92:
         7f:8b:81:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:10:38 2024 by rpki-client on console-fra.rpki-client.org