Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File:                     CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier:          q4qn9xyZJX3XjZlvDgi63BVlt2+luasMpZmHpSsamZ8=
Subject key identifier:   47:C0:6F:0A:8D:26:AA:9E:A4:BB:BD:21:6A:B4:92:11:B6:1B:04:B9
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer:       /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial:       018F215C022527A673E04F5E93F77EDE0771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number:          1144
Signing time:             Sat 27 Apr 2024 21:00:28 +0000
Manifest this update:     Sat 27 Apr 2024 21:00:28 +0000
Manifest next update:     Sun 28 Apr 2024 21:00:28 +0000
Files and hashes:         1: 139ETW_lKXrnJsaVw0MZPf56WYI.roa (hash: L4v9vf+siLhaBIpEqD+lqBXzsQjcK/4zAnEA/tlwnkg=)
                          2: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: J/SJ96XVCWaSuuqFSF0UPicALXWyrLKj2SQXsSHor6A=)
                          3: GCmGy5m34xuNqt0Q3rFpUBu2D2w.roa (hash: b2gejejeo7uPwDM2UedqIHeAzedMIoDLJqLr+rUd2v8=)
                          4: RJqvHryWITPbcumIkzOpCbdNV00.roa (hash: CWcE0zspbOCy4+9yWZ0enJf+xTJOS73qdtIKyRrQ4XQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:5c:02:25:27:a6:73:e0:4f:5e:93:f7:7e:de:07:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
        Validity
            Not Before: Apr 27 21:00:28 2024 GMT
            Not After : Apr 28 21:00:28 2024 GMT
        Subject: CN=47c06f0a8d26aa9ea4bbbd216ab49211b61b04b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:e8:88:3c:01:d1:29:42:38:09:a2:27:1c:
                    81:21:e1:e8:ba:4f:64:08:06:bf:5b:5a:9e:b9:d7:
                    ec:5a:19:f7:12:90:cc:9a:ae:f9:f0:ec:2f:f4:34:
                    7f:40:2a:66:78:c4:e3:0c:5d:e5:7a:a3:45:63:89:
                    3c:4c:02:05:85:25:21:9b:30:46:49:8a:d8:10:af:
                    44:f7:d9:5e:ef:4a:8d:cc:46:5f:d0:f3:11:23:14:
                    ef:8c:07:7b:b0:59:e8:f6:86:9d:8e:85:8a:e7:6c:
                    ba:d3:97:6f:84:76:20:d9:99:b3:f8:e3:e7:5e:32:
                    83:f0:c9:2a:5d:42:09:82:f3:c7:de:32:ba:47:48:
                    f7:05:64:f5:e8:29:11:e9:d0:7d:cf:35:05:48:3a:
                    12:ec:a0:1b:f8:68:d9:6a:91:48:a7:08:0a:8f:be:
                    ee:85:b7:ed:6b:d1:97:92:eb:06:c5:53:f6:c8:32:
                    dd:c7:0f:b6:8f:f0:63:05:43:41:fb:6a:b9:f7:bf:
                    9c:de:b5:a1:19:42:1d:f2:16:99:c8:b5:03:81:21:
                    8d:c6:5e:8e:d0:c4:09:16:08:c5:e0:14:ca:81:7c:
                    ef:e3:74:8b:ac:ab:16:8a:01:32:1f:08:77:73:1c:
                    ad:a4:fd:9b:1f:32:b4:8b:be:ae:19:f8:f2:e0:88:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C0:6F:0A:8D:26:AA:9E:A4:BB:BD:21:6A:B4:92:11:B6:1B:04:B9
            X509v3 Authority Key Identifier:
                keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:be:b9:3f:fa:da:9f:90:ba:49:63:d7:54:72:30:b3:22:0b:
         ed:35:50:a9:83:c2:f5:0c:da:c1:44:11:12:16:0f:81:8c:61:
         3b:6c:95:d7:d0:1a:dd:3f:cf:bb:3b:22:31:32:61:96:03:a0:
         cf:d8:00:51:66:16:7c:48:98:a9:2b:43:f4:3d:a3:04:1c:f2:
         c7:4a:8c:b5:69:3c:0a:66:18:bd:23:7b:15:57:41:78:a1:5e:
         86:0f:da:22:b1:0f:0c:ac:f5:9a:e8:66:d8:f3:18:c3:dc:74:
         74:71:19:53:0a:37:21:92:fa:22:fe:78:5c:f3:da:14:8b:de:
         c9:62:3f:44:6d:51:08:ac:3a:b6:c2:82:fd:8f:83:b0:cf:53:
         5f:f1:a7:68:ae:27:f7:41:be:3c:9a:dd:17:b5:f7:b1:1d:2c:
         81:5b:2c:79:7a:6a:fd:46:1d:d5:c7:44:91:f2:49:86:c3:41:
         7e:32:30:6e:3c:46:5a:f6:2e:2a:ce:a4:e6:dd:1d:f1:c7:95:
         46:f7:3c:f4:bb:fa:ec:33:ee:07:58:cf:56:ef:9e:8e:e3:9b:
         7e:87:9b:eb:a3:e2:74:74:e3:ac:04:fc:ec:a0:b1:5b:8f:41:
         96:9c:d0:3b:f3:bf:3a:ca:f4:9d:c3:83:7d:8c:18:28:ae:f6:
         e9:98:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 01:17:04 2024 by rpki-client on console-ams.rpki-client.org