Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          x6HRcrEuvooTCi+of3R3ZIXOMYswZVhgQe+PQRvUFd8=
Subject key identifier:   EB:99:80:F6:E1:62:37:3C:2A:6B:94:70:51:EB:E6:45:91:94:E9:D2
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       018F36D1995FC3E1C53A6D76C68096A50352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          1165
Signing time:             Thu 02 May 2024 01:00:56 +0000
Manifest this update:     Thu 02 May 2024 01:00:56 +0000
Manifest next update:     Fri 03 May 2024 01:00:56 +0000
Files and hashes:         1: 98iPjzwSmaUqRgvwqgEFBTIDU8Y.roa (hash: UP7ScV1Z7NYgOMOMyxdemP8a4q38jNqxR18iXZh0LRA=)
                          2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: g/8EPn/6+wABj0KWTCcEG8lJmiBdmezS4+Ae46G/t3o=)
                          3: EKl2Gw8wREjzw7PwrnW2975zz9I.roa (hash: 1lDpp4oVvBWVxjD37VoA7DBIY0G7iwOGHDXEMDsNtcI=)
                          4: HLe3tI3KEjbCDWao0SLYMY63aG8.roa (hash: 2X5sPmLh5NU8g/rUarXKczSELtRwSII5Z64zB7ZTCss=)
                          5: JTYzoUufBfvwtyyNYjZdQhaQQr0.roa (hash: 6nNHEetH+mmuscC7l9+cBKKVrwmktSqL72lLJGaof40=)
                          6: UrVumc67ZfQQxY4cDqDEw5D5G_Y.roa (hash: UjAEKDI5xzL1nuMOj1BOWTOHlorYkoDFIfG4jVJdnHU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:d1:99:5f:c3:e1:c5:3a:6d:76:c6:80:96:a5:03:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: May  2 01:00:56 2024 GMT
            Not After : May  3 01:00:56 2024 GMT
        Subject: CN=eb9980f6e162373c2a6b947051ebe6459194e9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a5:2a:fd:bb:60:ab:dc:21:db:94:80:53:6b:
                    25:1b:f7:b8:b3:35:22:24:0a:07:26:b3:e5:9a:2e:
                    e7:49:e0:f3:c1:12:8e:76:a0:e4:44:43:95:45:f6:
                    69:23:9b:cf:39:83:46:b9:d5:63:64:c8:6d:c5:4f:
                    61:eb:46:08:a9:bf:6f:39:f2:5d:58:36:e2:ca:1a:
                    a6:5c:23:18:29:fc:b8:b9:5a:aa:42:51:bc:d7:5b:
                    54:aa:a5:1f:cd:6a:b3:0b:f1:b9:cc:bc:9c:9c:b9:
                    c7:d6:f9:04:9b:44:81:1d:c6:97:b1:24:ef:b0:a5:
                    cd:05:38:66:a4:cc:d5:6f:38:05:e5:bb:91:72:42:
                    ee:5f:2e:0e:77:2b:96:e7:76:10:cd:12:1b:ee:41:
                    3d:d0:9a:62:d5:27:07:83:4b:b1:2c:57:52:b9:5b:
                    82:21:b5:f4:bb:ed:11:8a:94:e8:a0:3a:e9:70:25:
                    30:0e:6e:4d:8a:db:cc:03:6c:de:0e:cb:d7:6f:23:
                    99:80:d2:69:56:41:20:c8:95:6a:32:2a:2f:70:66:
                    92:bf:c2:ac:92:b4:dd:dc:16:1e:4e:c4:07:c3:8c:
                    c7:98:16:35:68:6d:55:aa:fc:2d:4c:a3:be:49:cd:
                    83:a7:ee:a8:04:ac:16:d5:e8:7b:dc:c0:22:df:04:
                    13:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:99:80:F6:E1:62:37:3C:2A:6B:94:70:51:EB:E6:45:91:94:E9:D2
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2f:09:bf:d9:e7:15:ae:ec:bf:9b:40:00:d7:56:47:f9:ab:
         73:a9:d3:b1:00:0f:60:76:4a:10:98:11:93:bd:60:65:af:92:
         a5:5f:03:92:87:fc:8a:51:b5:4c:9c:05:36:62:5e:75:03:b2:
         34:4a:39:20:9c:8c:93:d2:bc:63:56:f1:ce:4d:29:0b:f8:e5:
         fa:07:cb:3d:12:85:b2:c6:04:be:c3:66:fb:4e:8d:58:04:a3:
         85:86:1b:5c:57:32:53:c6:f5:83:1b:c7:ef:49:ad:ea:36:9c:
         42:c1:32:c1:fd:e2:a7:7d:a3:16:78:82:8d:77:3f:dc:e3:2a:
         46:02:fa:cd:16:6e:14:2a:0e:13:c9:7f:0d:90:c0:77:de:53:
         96:a0:39:dc:e8:31:8f:0c:1f:b8:cd:f1:64:aa:c6:44:a5:b5:
         b9:00:36:51:3c:c7:7a:43:6b:9a:51:12:c9:d2:d7:d5:be:1a:
         4c:1e:34:fb:b5:18:70:f5:73:e3:b1:3b:a4:0c:a2:a0:9e:f8:
         2f:39:78:fc:65:85:90:96:f0:0b:42:42:ed:f4:2f:bc:42:70:
         95:8f:32:fe:e4:8d:ec:aa:9a:66:71:92:09:dc:7b:2a:03:50:
         02:df:19:d8:d2:88:8d:4d:d7:e5:1d:80:e8:9b:21:42:79:16:
         0a:13:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:17:23 2024 by rpki-client on console-fra.rpki-client.org