Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File:                     6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier:          uFCHthRXm24rerQIfW3NBSPtTIXhINg8KgNcVLy7E/A=
Subject key identifier:   3F:27:73:74:3F:2A:F8:0B:B1:A5:B9:C1:E9:9D:B1:3B:99:82:70:C8
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer:       /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial:       018F41554761483106C7A783BE2D464C3C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number:          1167
Signing time:             Sat 04 May 2024 02:00:58 +0000
Manifest this update:     Sat 04 May 2024 02:00:58 +0000
Manifest next update:     Sun 05 May 2024 02:00:58 +0000
Files and hashes:         1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: eRy+thHT0dRvGBnEWsiybyXn17ftZRDCXeHXq3UYp9c=)
                          2: Igs5TdqaUw4wOhzpa63_yAyEf4M.roa (hash: d5PM42NDgeUJBLw1Q/+VlhShMcZYD0tyxc1F1JEd3yo=)
                          3: KFIpV08GkG2N3DuahmV3gexQmh8.roa (hash: cfQEvhVtq/YwwXNW4hoUia7pCf8ryl9sVC9DGwYC/QQ=)
                          4: vJvR3ykXBsEjdEoH2lRr-DRPhcY.roa (hash: P6ufEsipT3QNPJEsGhVvE9/khyP2HJHfWJkPY7JjoD8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:55:47:61:48:31:06:c7:a7:83:be:2d:46:4c:3c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
        Validity
            Not Before: May  4 02:00:58 2024 GMT
            Not After : May  5 02:00:58 2024 GMT
        Subject: CN=3f2773743f2af80bb1a5b9c1e99db13b998270c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:2d:6c:03:ce:29:83:2f:92:fd:1e:94:bc:
                    cb:27:d5:42:5b:91:12:aa:cb:db:76:8e:3e:8c:d8:
                    3e:1a:02:59:29:0a:43:6f:46:1d:aa:12:12:cd:a2:
                    65:49:9b:30:c6:64:07:c2:e9:19:5e:f3:f6:ce:1b:
                    24:4d:31:c3:1c:a7:0d:c1:18:c4:f3:0b:2b:48:2f:
                    c7:60:eb:f9:ea:4e:8a:83:2c:17:d9:d3:bd:ed:b7:
                    68:f6:56:07:b2:28:41:43:90:6b:5c:c1:12:cc:ad:
                    93:11:7f:7f:98:96:f0:cd:b5:93:69:96:e4:76:01:
                    61:4b:5a:b0:21:c6:1d:39:1d:9f:94:ae:95:c5:89:
                    42:7f:4e:ec:a4:ae:ce:7c:b3:33:89:ae:9d:f0:4b:
                    1e:e5:6c:e4:13:b2:bb:93:e4:10:d9:aa:b7:6e:34:
                    37:40:83:97:65:db:b1:7a:2f:91:8f:00:ac:c4:d8:
                    e9:01:ec:b1:8b:33:f8:91:da:0e:13:29:8b:42:2a:
                    d8:fc:38:20:b8:1f:4d:7e:92:dc:cb:b8:c9:b5:dd:
                    4a:3d:c4:39:f1:f2:7e:a6:28:df:45:42:83:7a:f9:
                    67:d3:7f:6a:d0:ad:1e:04:8b:19:e8:33:15:e2:a3:
                    0c:a5:75:c2:aa:58:2c:57:e8:f4:42:49:27:f6:d8:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:73:74:3F:2A:F8:0B:B1:A5:B9:C1:E9:9D:B1:3B:99:82:70:C8
            X509v3 Authority Key Identifier:
                keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8e:8d:bd:b6:15:fd:74:d3:82:2a:af:45:b2:09:2b:48:aa:
         34:83:26:f0:5e:81:05:24:c7:d7:43:95:d4:40:9d:0c:26:67:
         2f:70:a0:28:fd:40:75:ad:fa:a2:5f:b6:ff:b4:f6:fd:71:12:
         23:56:55:25:0b:05:fa:10:de:33:d1:f7:b4:eb:bd:c3:33:21:
         01:4d:9a:af:b6:e3:70:52:25:0d:0f:06:75:49:c1:a5:1d:c0:
         e9:1d:97:1f:9a:04:8d:65:d1:5a:da:d2:18:27:39:17:da:9c:
         37:b5:aa:ae:f8:e1:37:fd:b0:42:39:35:1a:54:32:9b:99:14:
         c5:46:d5:0d:e2:a4:14:86:f0:1d:2a:30:03:c1:af:5f:19:c1:
         37:01:5a:ec:d5:02:f9:71:22:f5:45:63:3c:5a:0b:b4:f7:8d:
         9a:e3:93:ae:cc:83:52:71:ba:0c:e0:d3:86:cb:8b:d9:e6:e0:
         80:69:6e:9f:c5:3e:cb:a3:6f:5a:11:15:54:81:da:34:5f:51:
         86:3c:74:de:e0:a5:65:25:ef:59:56:e2:0b:2d:c6:77:97:17:
         f1:6b:7a:30:e5:bd:75:1e:fa:db:3d:79:cb:27:89:4f:cb:87:
         ea:f5:ab:ff:48:f5:16:2e:24:79:8e:eb:08:69:d1:69:48:75:
         e8:77:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:54:21 2024 by rpki-client on console-fra.rpki-client.org