Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File:                     mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier:          G0zSrSkq49uuoRSp+q/8kIafhBDInzZGp9iNIZdaixA=
Subject key identifier:   9C:B4:31:D6:87:C7:10:C6:75:E7:F1:4D:87:B2:6C:52:2E:8F:03:B4
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       018F8F38D9A1D329C873DAE484A28737BCEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number:          0B79
Signing time:             Sun 19 May 2024 05:00:18 +0000
Manifest this update:     Sun 19 May 2024 05:00:18 +0000
Manifest next update:     Mon 20 May 2024 05:00:18 +0000
Files and hashes:         1: 0GVAsOQ4BkcUx-BBVoiTGi1mZ4U.roa (hash: JmZyA9s7pYiFUdzwgvykJObPj+B60McJN3SDBwMu8Qw=)
                          2: 7zVc7wmUZnjAPdAtLO46mzekulE.roa (hash: Ayi3lpkHD04ZTNGDvAY6GkZuUDnwqVYMAqpx0EOO/qE=)
                          3: CoIYpy3VLhMQV8g7pJcwywCQLGk.roa (hash: dkcbFCYYFVDK6Brd0cU1w+sLxHPq6T3LWZ6PjqnmcSE=)
                          4: CrVIolPEotg8qGsn9w-GvWNCquc.roa (hash: UsUA7AJ66WIrMfMj4+hz+dvj1foKCK4LDHLDz8+PJ6Y=)
                          5: DnxsQzpPQwAnw5uab7H64Rl5O2s.roa (hash: a4lMFiuy5JgmrdTVD1f1bCaHQRxea3op3RWpTWQuMSg=)
                          6: EVdaAJISdVmosuzILhlOI6T3nRs.roa (hash: QZNKovN2Ky9v2hyaEh8It7MLleCAQnxdVeHVy01Uaq4=)
                          7: EYShRPlXmJWhgb18KbC7VHOz-8s.roa (hash: p4ETAsk/Jr0PEAPHa3UXBY/73Bvs+QNCOIAvajvwJpw=)
                          8: FFhkc3DwswkRPKHQC-FORjK2Pas.roa (hash: Hol8LO4KXLXuuc8LOrkh8GLEeb1+8kYJiuD9TO3gzY0=)
                          9: TOiM9GkAgxqTKnzgGaK1mWQ_HN8.roa (hash: 3ykgbYpyXbdMbruyEv308riwOH+ZVQWezMxYasWJpfQ=)
                          10: Yr9cS6aCn5m-fuVWUB1GoA1PzVA.roa (hash: o3hn48UKGemH/EAdaXizsjOSOVz9DyWl8XxLdB4iehg=)
                          11: Zn-0KNo23XFZDb_LOZgl_wZp6Uk.roa (hash: JtjzhWRIabRXCm/SECM9nYC/NKvBvBBwWrzCIBlBWaQ=)
                          12: io3oWFLFcE18lhokaWMUKOaMeWM.roa (hash: hC1liZ4zdbzKgsvg1C7alyZvEaXycuVKKq2V70Ue4Ls=)
                          13: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: tNEnN9XuKAY2DSoxwTUYBb4K3EI9uMd7sNOs3QO0wQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:38:d9:a1:d3:29:c8:73:da:e4:84:a2:87:37:bc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: May 19 05:00:18 2024 GMT
            Not After : May 20 05:00:18 2024 GMT
        Subject: CN=9cb431d687c710c675e7f14d87b26c522e8f03b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:51:06:88:08:20:41:55:f5:b0:11:1f:56:
                    61:0e:7f:56:9c:7f:71:dd:ae:93:13:f7:9a:ea:88:
                    b0:80:6c:5a:e4:44:d5:15:5d:73:e1:ad:76:46:70:
                    12:6f:20:02:b6:2d:ea:43:4d:9f:ca:ac:3f:6a:ca:
                    7a:21:3e:20:3d:d9:e6:91:aa:de:3f:47:b5:dd:3e:
                    a1:fa:a3:79:ab:a3:d5:70:08:ad:30:6a:5f:ab:6c:
                    17:51:e3:1e:b6:0f:49:fc:73:b2:25:ee:b1:ba:36:
                    b5:24:7d:c0:86:de:ab:2d:c2:3f:77:48:de:a9:5a:
                    ad:e1:b2:e4:02:8e:88:ea:cc:c7:1a:9b:be:7a:98:
                    5f:a8:16:a3:48:e2:46:dc:b4:65:17:dc:eb:f6:2b:
                    05:4a:1b:a6:a5:25:70:0c:f5:d8:1d:0d:86:2c:94:
                    28:90:73:99:83:9a:18:86:b7:0d:60:7e:35:01:a8:
                    15:0e:c5:90:38:09:b2:ec:2d:23:b8:6d:84:a6:50:
                    d9:46:6d:26:c0:19:b8:ab:16:c1:c5:ef:10:5b:2a:
                    02:df:07:a6:57:3f:87:df:49:c7:86:ef:95:ca:d5:
                    ac:4b:59:bd:9e:14:d3:36:25:2c:7c:54:56:46:45:
                    cc:45:e1:a6:44:e3:71:05:a5:00:19:06:c8:cb:0a:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B4:31:D6:87:C7:10:C6:75:E7:F1:4D:87:B2:6C:52:2E:8F:03:B4
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7d:d5:3d:00:3f:9c:4a:ef:7b:66:5e:26:ca:f2:8a:f9:51:
         e0:8c:3c:42:71:46:47:41:c5:88:95:7e:04:c7:8a:3b:bf:a9:
         68:a5:ea:ea:52:07:26:d5:e6:0a:31:af:05:07:6b:a9:43:20:
         9d:f7:68:10:72:24:4d:bb:02:87:ec:78:f1:6a:3d:7b:70:e1:
         5a:3e:7f:2b:1a:c8:4c:64:4a:04:e4:8b:8e:b5:41:25:ff:6b:
         ee:ab:fb:3f:2c:d5:9a:d0:2e:29:1a:3d:af:f0:45:4c:cf:fb:
         87:63:03:b5:c6:bb:2e:fd:40:68:59:d4:f2:d3:e1:8b:01:12:
         51:b1:cd:85:b1:43:68:fa:a9:ac:c3:db:df:72:01:9d:7e:ff:
         72:a3:c5:82:24:94:7e:28:98:09:85:03:de:cc:ba:43:72:be:
         33:03:bc:3f:c2:b4:89:d8:b0:ac:d7:2c:bf:52:74:da:95:1c:
         34:dc:35:f7:2f:e5:7f:18:79:9c:1b:b6:2e:05:38:97:22:6d:
         93:42:80:d9:b4:22:a8:67:57:7b:4a:53:4d:a3:ad:c1:c8:4a:
         c2:da:89:95:80:ff:90:bc:20:e9:7e:5a:08:50:76:c3:1f:e7:
         40:71:24:32:8e:b8:e3:61:91:df:21:02:ab:98:04:c3:ad:17:
         94:4f:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:57:26 2024 by rpki-client on console-ams.rpki-client.org