Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File:                     IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier:          SLx9sLaBdIDbQteCbxaiw3qgqnJppz6ASFkeX3q+8CY=
Subject key identifier:   F7:7A:50:54:CC:C3:33:97:83:93:12:87:F1:05:B1:11:94:5F:0B:ED
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer:       /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial:       018F369B00A6D0FDEECA93DAF28424ADBF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number:          114F
Signing time:             Thu 02 May 2024 00:01:18 +0000
Manifest this update:     Thu 02 May 2024 00:01:18 +0000
Manifest next update:     Fri 03 May 2024 00:01:18 +0000
Files and hashes:         1: 00KltQLCw3b1regGPrgMFa8rcxY.roa (hash: k1vAJCU4i9X14XvPn6z2ZrUu0g4pBcJXURe19Bhc7AI=)
                          2: 8r_-oPPYFgyhxcTrA_qmAus1LVw.roa (hash: 1p8suR5Kqhc6tf+WBmCYHJ+pFpuzFSM2g5uoTEYiuK0=)
                          3: A3S91QNT1z97Ljxe3kxj-h8Tmb4.roa (hash: BHTjeFyuinoreGMs0mvKN8JTnQDJYEAqkN+jLT6c5IA=)
                          4: GlM62mEOSdYO40DMKPj3VAd9BmQ.roa (hash: nx16zy9qz3Ea5GvMXEPBqyjemRfdzbT0aC3uFXBkuw8=)
                          5: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: oYZmPhDmTEEdOFCOStPcGeFVOttTQ8TJXrrrUXJv80U=)
                          6: R9CPhtTfRwALuTn-k-gZZU_BQsU.roa (hash: fAKnXqTRlI9u8078WVfh4ukH15bWigYpVYWs9c0Afak=)
                          7: lIprtdIcb6RGjBu_7Fb4hvqb0-Y.roa (hash: 6W7WCd1n+XCFbm2SXFAvlw2vbyFj+YpL+rmqDrIILRA=)
                          8: ncs9X-Zk4JZHNYtt8t2uBnQX9oY.roa (hash: 5guFCGGvbqU6swNIKFCNo5soWWJ6rvnCUmstTheCrgU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:9b:00:a6:d0:fd:ee:ca:93:da:f2:84:24:ad:bf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
        Validity
            Not Before: May  2 00:01:18 2024 GMT
            Not After : May  3 00:01:18 2024 GMT
        Subject: CN=f77a5054ccc3339783931287f105b111945f0bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:92:83:9f:47:75:91:bc:62:06:f2:c8:bf:
                    4d:f1:30:23:8b:d9:29:59:d3:6f:47:a4:59:16:91:
                    82:1b:8d:d8:61:c8:27:0e:f0:47:8c:b9:67:74:94:
                    a4:24:86:db:26:67:34:9d:94:7a:8c:33:a8:95:7e:
                    68:1b:0c:77:f8:97:0e:a2:76:4a:27:db:f2:df:2b:
                    72:ba:6b:27:dd:91:10:c9:63:dd:3f:9c:26:e1:17:
                    b4:a2:d6:9e:28:67:8d:28:b2:58:09:ba:29:1f:41:
                    2a:10:ae:07:1b:75:07:e8:bc:54:73:61:17:98:c5:
                    03:09:29:43:15:96:d4:3d:23:ed:75:c9:f7:90:fd:
                    39:c4:7a:be:28:89:ca:bb:97:4a:c7:7e:8b:f1:a9:
                    00:47:6a:53:93:e4:c2:66:24:a2:4d:ee:f4:cf:7e:
                    f9:51:1e:5f:29:5a:eb:87:db:f0:65:07:6a:81:ef:
                    22:ca:98:0d:e8:55:09:23:a3:cf:e1:5f:85:bc:bc:
                    6c:f7:53:9c:03:8b:02:ef:56:19:92:40:71:6a:ed:
                    73:23:53:03:eb:df:91:1a:b4:4b:c1:73:a9:d5:14:
                    6c:8b:9a:6e:9c:48:76:78:88:f5:a8:a4:1d:50:df:
                    90:66:b4:10:8c:9e:36:9c:8b:90:77:0c:40:b5:b6:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7A:50:54:CC:C3:33:97:83:93:12:87:F1:05:B1:11:94:5F:0B:ED
            X509v3 Authority Key Identifier:
                keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8e:d5:f3:29:ac:bc:9e:da:07:37:91:3d:78:71:82:a7:0d:
         5d:bd:d2:07:8b:5b:59:f4:f7:1a:31:19:b2:9f:1b:92:46:33:
         d1:65:48:fc:ce:af:07:5a:3f:81:fb:b0:42:32:6e:1b:aa:61:
         2d:5f:ac:fb:b3:ad:32:e3:0d:d0:9a:83:9d:d9:92:b6:62:29:
         96:68:ad:e1:38:9e:cb:3a:7f:20:9a:48:67:09:02:66:6a:0c:
         ac:be:73:2b:43:b4:1a:c5:b0:fb:63:3e:b4:aa:14:4e:2f:fe:
         7a:4f:8f:69:e4:6c:2e:7e:77:ce:3e:c2:20:27:b6:b4:40:a6:
         30:99:eb:cc:d5:28:34:a6:02:c6:b7:d2:89:4c:aa:27:af:06:
         a3:60:26:04:0e:29:d6:8a:eb:dc:45:36:04:6b:48:d3:5a:ad:
         d8:14:39:0d:25:df:58:61:86:1e:80:98:26:b7:76:f0:c3:18:
         a0:f5:ac:94:1e:28:f2:cf:d1:3c:fd:1d:01:88:d6:4a:fd:c6:
         2c:4f:83:72:e2:96:44:59:72:fa:37:74:c9:55:e0:b2:7d:6f:
         c3:a8:ca:e1:a3:25:d2:53:f8:3f:36:fa:f0:9a:b6:8d:3e:d2:
         92:c0:a9:59:29:01:21:e6:6b:1d:ce:3d:d3:bb:0d:f5:66:5e:
         b6:66:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:22:04 2024 by rpki-client on console-ams.rpki-client.org