Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File:                     29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier:          Y2t4wyhHjgfU1wOKG4Gave671z1tKn4XciJVX9L6gu8=
Subject key identifier:   B7:55:60:64:06:15:0B:33:67:9F:75:CB:C9:F2:F3:E7:14:1E:89:82
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer:       /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial:       018F595E6562CCB6869EC63966B53166D2EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number:          1164
Signing time:             Wed 08 May 2024 18:01:49 +0000
Manifest this update:     Wed 08 May 2024 18:01:49 +0000
Manifest next update:     Thu 09 May 2024 18:01:49 +0000
Files and hashes:         1: 1-bYgAy5TYsC5UZhJBCC1TpcXKDo.roa (hash: iifGIe8YWAN7NHeYP6H6Pc1WK1QCo2atmAIMCq/KnSU=)
                          2: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: cK1894FNOTXm/c7b9Us0hWAvk4F7kgI4w+dDySx+XNM=)
                          3: YQ5n8l55IgCcKZEVQwgCXFunMEg.roa (hash: bEjdNXxFSG4dDWbbASoqfQRrOv4ljH6ak+g2OmCON5M=)
                          4: sNPKcHnt1JKw1AUvog3dXJMq_CM.roa (hash: etTK3jaF4towcjGQiAc4a8lBObndpqO+VMh+DpUbmxc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:5e:65:62:cc:b6:86:9e:c6:39:66:b5:31:66:d2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
        Validity
            Not Before: May  8 18:01:49 2024 GMT
            Not After : May  9 18:01:49 2024 GMT
        Subject: CN=b755606406150b33679f75cbc9f2f3e7141e8982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:df:cc:85:4f:15:e7:53:10:d9:ea:d2:dd:3f:
                    7c:da:b4:45:8f:5c:5d:61:8f:cb:60:0a:d9:2a:de:
                    20:c9:e9:87:1e:d5:ce:bb:50:c9:a1:69:61:10:67:
                    df:f9:c2:ae:77:1d:54:c1:19:2d:e0:63:99:12:63:
                    9d:f5:9a:f3:94:76:4b:4b:21:1f:bc:77:9e:da:c9:
                    00:90:26:27:bd:78:38:0b:17:2b:25:ad:10:75:85:
                    c4:39:44:b8:ba:25:b6:1d:e2:ca:34:c9:83:4c:ca:
                    14:6a:6d:c2:2b:35:15:0e:ea:9a:53:2a:e7:44:99:
                    7b:c8:55:38:19:76:80:33:2f:73:28:a1:63:35:8e:
                    ff:e6:2e:2d:53:8b:3c:55:4a:f7:ba:cd:26:a9:16:
                    22:62:d4:fc:0d:68:04:36:fa:77:66:8c:8b:67:c8:
                    4c:4b:d2:67:a8:60:fa:41:85:02:9a:37:16:d3:00:
                    00:f7:d9:5f:8a:d4:1a:36:28:cf:7d:fd:b8:12:0e:
                    92:19:08:bf:44:0f:c5:b0:85:d3:78:4d:39:80:0d:
                    f6:05:58:de:aa:3e:d9:15:ef:96:ce:ae:5c:c8:e4:
                    66:37:24:99:46:20:e8:84:61:61:29:6a:24:36:8b:
                    0c:de:1c:78:9b:38:11:fd:b5:18:98:60:fa:9d:dd:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:55:60:64:06:15:0B:33:67:9F:75:CB:C9:F2:F3:E7:14:1E:89:82
            X509v3 Authority Key Identifier:
                keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:a7:f1:52:34:e2:7a:d0:d3:37:be:22:56:a5:b9:74:ca:
         3a:54:54:74:fa:ae:52:34:f3:92:0f:af:61:47:b2:4a:01:75:
         67:cc:f9:ed:4b:70:8b:47:4f:2c:41:97:9c:11:98:36:19:c2:
         a9:a0:66:0e:f6:55:37:ad:11:d4:1d:25:f2:81:78:3a:f2:e0:
         0f:99:37:08:11:2b:07:86:fd:b1:cb:03:27:0d:b1:56:92:9f:
         b1:56:55:60:3f:b8:e5:91:c6:d3:96:25:f9:98:31:f1:31:3b:
         e4:05:dc:69:19:2c:d4:1f:47:b3:ea:5c:03:8a:82:05:c0:ab:
         43:8f:80:58:f6:2c:2e:b4:61:6f:ef:56:2d:d0:f0:85:46:72:
         ec:23:46:a5:71:85:a2:6c:7a:c2:cb:a2:77:be:57:8c:80:5f:
         83:ac:35:6b:d0:65:ba:0b:fd:3d:70:ab:0e:27:ba:b3:5a:0c:
         8f:85:58:0e:c9:c9:99:1a:c9:07:7b:0d:ae:66:0b:82:1d:d9:
         2c:f6:b6:67:8e:e3:c7:5a:d6:65:88:67:dc:91:04:79:9a:59:
         e7:1f:ca:8e:35:bf:17:a3:77:ac:c7:49:29:4e:bf:e6:6c:fd:
         e2:0c:d4:4d:74:f2:08:65:62:9b:bc:9f:ea:49:32:ea:13:11:
         6c:30:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:26:29 2024 by rpki-client on console-fra.rpki-client.org