Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
File:                     hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft (raw, json)
Hash identifier:          TfPJ0A3ydMWWgs+uydwBpkckCk5oB1r+fEymt376Jlo=
Subject key identifier:   13:22:F4:CA:EF:68:17:A0:8E:F9:13:48:1F:B1:4C:85:AC:E7:60:0A
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Certificate issuer:       /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial:       018F877F4C938DCD6658C9635D7D4E0D4A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
Manifest number:          1182
Signing time:             Fri 17 May 2024 17:00:17 +0000
Manifest this update:     Fri 17 May 2024 17:00:17 +0000
Manifest next update:     Sat 18 May 2024 17:00:17 +0000
Files and hashes:         1: FPEFXkOfFuvpl1yl-8vq03dhvl8.roa (hash: Yu45Y/BzRQFLqrP55U+8hubE7MFm+ulcWwC/2yfYawE=)
                          2: FxWIRDLB6fvTv-llIk-6DsM_ulo.roa (hash: i/e6xVHhHq/WGcqGyracNMUagmnzz3eqOcb+CKJfpUQ=)
                          3: _WBT9S5VbTP_n4MhENCltAzcwH0.roa (hash: 1LpCVRf4hKkyw8RSXemMpfmFlRj6pNSr2hgNJDe9VTg=)
                          4: hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl (hash: ZWCtKVtYzjtg6cQZefwPjvET/QQTx1rNCu9mcKnyuyk=)
                          5: sKepPRIXv2ElpUgS9Wrv1cdjxIU.roa (hash: 87ewesBXuJaujR/JbSr8Kp7rmEpRCFG4xqYzLYpt3RU=)
                          6: sqcQoTUU_ab4IcxVpprTeK7xCJA.roa (hash: sALrTTPdDVsBfO54ImYytesqq+mRpR6Cp9BM9d+3qS8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:4c:93:8d:cd:66:58:c9:63:5d:7d:4e:0d:4a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
        Validity
            Not Before: May 17 17:00:17 2024 GMT
            Not After : May 18 17:00:17 2024 GMT
        Subject: CN=1322f4caef6817a08ef913481fb14c85ace7600a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:ca:dd:e3:27:cc:3d:ce:d3:ab:1c:27:46:
                    19:9d:9e:d9:2d:13:1c:31:59:82:24:56:8f:7d:93:
                    be:5d:e6:3a:fe:63:94:7c:26:ac:89:24:4c:f2:eb:
                    f9:af:b4:3e:fa:06:14:6b:85:53:21:99:72:9b:63:
                    a4:2f:0b:e7:da:ed:45:19:11:65:46:f5:ae:3d:36:
                    1b:01:7e:ae:00:bd:51:55:1e:6a:15:1a:89:c2:4d:
                    88:99:cc:c0:78:19:36:f9:02:2f:7c:83:ed:49:4e:
                    ae:42:77:71:93:36:4c:d4:fe:44:d5:ac:3d:49:3b:
                    47:81:2f:69:5e:26:64:5c:2c:01:65:83:a3:1a:0e:
                    1c:02:d2:f1:b5:d1:a9:1e:e7:c5:03:81:2a:45:a5:
                    04:e5:51:a5:a6:07:56:cd:01:4d:bb:2d:a1:e2:29:
                    fd:a1:b6:77:58:4e:13:65:da:1b:30:57:28:81:8e:
                    5d:9f:4b:88:3f:e2:c7:6d:82:fd:4b:d3:53:f3:85:
                    07:b4:b0:20:08:56:7b:c7:b1:32:4d:70:0a:2a:04:
                    95:60:3e:6d:d9:31:31:2c:2d:d8:d6:54:08:eb:a2:
                    a8:84:ca:7c:ec:67:fe:81:02:91:d5:12:8f:90:7c:
                    4d:25:1f:2d:80:27:b1:ee:da:f7:e1:f6:20:ec:01:
                    c1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:22:F4:CA:EF:68:17:A0:8E:F9:13:48:1F:B1:4C:85:AC:E7:60:0A
            X509v3 Authority Key Identifier:
                keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:28:c7:3e:0d:f4:20:e7:0b:f4:ab:71:48:33:e9:d9:6d:dd:
         5b:e2:d3:e5:4a:1b:e9:4e:ff:fd:94:8e:de:ab:6e:e8:e8:ef:
         ba:47:68:12:63:4d:7f:a6:b9:e8:ad:09:39:74:0e:3c:0b:43:
         c3:8a:78:cd:99:af:44:9f:31:06:21:5a:cc:99:ee:60:77:d3:
         c0:d2:ce:c1:d9:ec:a5:0c:a1:f0:c5:ce:2a:16:79:e4:8d:71:
         a8:00:fa:4a:1e:f0:58:83:85:a6:37:15:eb:c6:c0:4f:50:94:
         ba:42:df:2f:a4:37:6d:12:29:76:e3:16:e8:79:ef:6d:69:0d:
         d8:4d:5b:0a:64:49:3b:ed:ac:ed:2c:36:d1:47:13:b2:3e:69:
         15:86:e8:62:25:92:44:60:31:de:a5:72:23:f7:4c:09:57:8e:
         81:50:1c:57:34:63:b2:2f:b9:92:bb:fd:97:5a:bf:b3:21:be:
         e8:35:06:5b:77:01:52:5a:40:27:96:5e:47:eb:40:cd:d0:f8:
         bf:01:bf:14:62:28:9d:94:81:04:8c:98:a2:f5:2b:69:c5:2f:
         3e:2a:ef:c2:7b:95:e9:3d:3b:dc:90:c9:cc:60:09:b2:1f:79:
         e0:a2:43:5b:54:1b:df:60:65:01:08:a7:50:99:58:2b:d6:b3:
         1b:8e:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:11:42 2024 by rpki-client on console-ams.rpki-client.org