Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          wGL8XJ+1vEVU57Kwrb+h7xXIjn7WfKu83Kmq0hvp7dM=
Subject key identifier:   95:85:04:B1:15:60:A8:9A:3F:E9:BB:C6:67:CE:09:67:26:86:5A:8F
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       018F871150140502FAC0B6B7D52E5C452996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          A1
Signing time:             Fri 17 May 2024 15:00:09 +0000
Manifest this update:     Fri 17 May 2024 15:00:09 +0000
Manifest next update:     Sat 18 May 2024 15:00:09 +0000
Files and hashes:         1: 3vLmPv7Djr6TKH8h-94292rkuas.roa (hash: QtPMjz6hCorikM+hOJr55a+h94gKpssEGVbmMdG9iwo=)
                          2: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: 2UeOIpxIfbfom1CHdiiy3eTuDs78pGRQB+rgCPz2LSc=)
                          3: KdLsjCrkAT57QsjcluRX-ka0av4.roa (hash: ZxZujo766MF/pl5OPk3o8hz1nsdF0bXQsfhxAATqRh8=)
                          4: Mhb9g1GW1ic5B1uHQQcAKZQcE_k.roa (hash: FpzRxrdL5GM1JZOZ9tmbgTdHPgyrYrFJIBXSZ3ts6QU=)
                          5: W0mQMZT0Zf4RaR6-AerqmmbEVyM.roa (hash: dhdER9ewgz23PiFYCXseGx9Yn2jG69W/ZYo4DzLqA+s=)
                          6: YogE9d5tH4k68Tt8pwZMnLBty98.roa (hash: uGUbLbhQePNMe2N5mijv6MQR7j0HWESjfb97Dlgfedg=)
                          7: f4LnTDkkCsISE3hbkhAWVsFcsbM.roa (hash: 2isKhp0DeEqoOa/JMwLM+H7q6yvFrj7uy9YZsWVHm/A=)
                          8: kRCdbaC_td_mfrbk4jFMdjaakQQ.roa (hash: h6c/vzZZPk1bxFru2APYmjheszLKHJiOAaJR0tVZf44=)
                          9: zlGre1HI3QgDki2y48vB5K78dKU.roa (hash: u0r3Y/yH2NV0pGG+wY0JrEFpe3ETVzPG4rbbyTHLmIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 15:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:11:50:14:05:02:fa:c0:b6:b7:d5:2e:5c:45:29:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: May 17 15:00:09 2024 GMT
            Not After : May 18 15:00:09 2024 GMT
        Subject: CN=958504b11560a89a3fe9bbc667ce096726865a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:f9:e0:61:b9:ca:48:67:73:92:e8:1a:cd:
                    20:3c:79:41:7e:dd:0e:f7:38:d1:5a:6a:60:13:2c:
                    a6:58:53:51:94:d6:00:c8:68:06:22:b4:e2:8b:d4:
                    78:35:d2:67:e2:d5:92:0e:05:c6:5a:9c:ec:e0:ce:
                    3d:00:72:81:fd:71:ca:80:5b:e0:50:0f:96:b1:f6:
                    88:05:c5:ef:d7:f1:61:09:b2:18:c7:b8:13:49:8b:
                    16:54:9d:89:af:5c:2b:d5:5c:78:2b:d4:e9:05:46:
                    7e:57:aa:db:4f:dd:ce:29:93:15:3c:eb:b2:36:e4:
                    5e:e6:63:e7:09:09:a3:76:6f:42:31:48:94:5e:30:
                    e6:00:75:55:c5:5b:06:91:28:4f:e4:00:60:11:56:
                    0c:13:b9:3f:8d:87:fa:e7:70:dd:46:66:85:5d:92:
                    79:80:03:9b:d9:93:6d:d5:26:0f:4b:e0:55:f4:e7:
                    fa:a5:21:8d:c8:37:ae:e2:fc:0f:ee:4f:26:b0:1b:
                    22:11:70:ea:98:ea:87:ca:28:90:44:87:78:8f:6f:
                    16:ce:8c:9c:62:73:18:75:30:e3:5b:4b:87:a0:a2:
                    93:dc:fe:54:27:59:43:35:db:ac:31:7a:56:49:57:
                    d8:4b:ec:5b:be:44:68:9e:0d:5a:70:f7:fa:4c:c1:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:04:B1:15:60:A8:9A:3F:E9:BB:C6:67:CE:09:67:26:86:5A:8F
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5b:9d:34:cb:3b:1f:c7:b4:77:7e:77:d4:68:e6:09:26:ed:
         31:d8:63:a4:15:83:4d:c8:31:c5:a3:08:7b:d3:35:7d:1d:fc:
         18:de:46:4c:3a:88:b3:b5:4f:f1:eb:09:c8:a4:60:91:fe:f9:
         c2:e6:27:40:6f:39:42:27:43:18:ad:4e:44:61:92:5c:52:59:
         3a:ec:55:02:93:64:0f:74:15:89:2a:ad:68:39:98:e9:59:d7:
         f6:ce:19:3f:e6:4d:bc:39:39:32:5b:a8:1c:4d:07:f3:34:77:
         cf:2d:e3:bc:fe:a5:cd:d7:c5:71:1b:0c:8e:c9:cb:c6:e1:7d:
         29:8d:31:40:d6:a0:8a:80:5b:70:9e:d0:dc:12:da:4d:53:be:
         09:44:2d:4f:0e:af:8e:bc:28:be:43:2c:e5:8c:22:a3:48:e9:
         45:6d:bd:db:55:13:3e:31:6f:5e:ab:82:40:10:3b:00:cd:e2:
         ea:95:8b:ce:4e:eb:b0:eb:f4:9a:e2:e7:cb:92:3b:2d:b7:4f:
         69:25:19:01:f3:09:4c:a0:e7:ad:f6:34:9f:ea:03:9f:25:57:
         90:4e:59:44:fa:f6:c1:fd:14:da:fc:9a:12:6b:2a:80:b6:ae:
         d6:36:14:b2:55:93:bb:93:1a:49:2a:6b:cc:76:d5:26:2a:98:
         0f:f0:cd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:08:09 2024 by rpki-client on console-ams.rpki-client.org