Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File:                     2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier:          pKZyc3kMsOvQ2h/+MxW9mooELAMThYQ7H8WkIy9DBRo=
Subject key identifier:   A8:B6:7A:FA:19:A1:1F:10:7D:97:F4:E2:81:1D:0C:6C:E7:64:35:90
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer:       /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial:       018F4268515FCC60FFE102F284037887C653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number:          1040
Signing time:             Sat 04 May 2024 07:01:23 +0000
Manifest this update:     Sat 04 May 2024 07:01:23 +0000
Manifest next update:     Sun 05 May 2024 07:01:23 +0000
Files and hashes:         1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: 4mdXGVtv6w8udTGmLRji3lB2lVsnioL3lgY3XN9eSdk=)
                          2: 9OO9W41Ro068xNQMyl7Ur9RmilI.roa (hash: xUjzPp8VHBH4P5c1kTGUxY4WAR/K2lKYKpF9N6ok+60=)
                          3: PZ-7eTlAk8e5-lsISM1Mg71Mrqc.roa (hash: 1oxx/t9m5sSGLdNtlpqQfj9Z5Xaprm8d3LC74wRLjFY=)
                          4: jqf9MZFJg4Au93XqV1Tej6pb44A.roa (hash: oL1hfa5Vt0J1FJi/5m8kWqCmF1OVMXgrLkAkPcLlMc4=)
                          5: pfDazX5dqtI9dLKqzbEgZmI-Ksw.roa (hash: 6KGY2PyTQSIjBTERVdh9P9V0pdGpYlABWUEbV0hiaOU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:42:68:51:5f:cc:60:ff:e1:02:f2:84:03:78:87:c6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
        Validity
            Not Before: May  4 07:01:23 2024 GMT
            Not After : May  5 07:01:23 2024 GMT
        Subject: CN=a8b67afa19a11f107d97f4e2811d0c6ce7643590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:b0:ed:db:21:c2:f1:26:38:0f:36:7c:42:
                    05:36:09:54:57:46:bf:26:f7:ec:ae:d5:14:67:c3:
                    2f:82:04:9a:25:92:2e:4f:01:a7:22:99:75:ab:9c:
                    69:d6:83:64:6e:44:fd:ad:55:d4:84:90:2f:88:56:
                    dc:c0:23:d3:4f:5c:fe:51:fa:b5:aa:b3:0e:50:1e:
                    5f:3f:4a:1b:9a:b1:98:bc:99:54:c2:1c:70:6c:5f:
                    2c:a0:5a:eb:33:4b:fd:45:5d:d1:a8:9b:06:ee:c3:
                    71:81:08:e6:32:52:63:80:d8:cf:63:d7:66:c0:90:
                    d6:a6:bf:7a:16:24:1c:44:6c:94:78:40:49:bf:91:
                    6a:b8:01:97:f0:ce:59:21:1f:15:05:61:4a:9b:13:
                    72:40:2e:18:3a:d5:c8:55:7b:a8:3a:01:f8:aa:20:
                    b3:a1:fb:f2:01:a1:b0:e2:80:fc:25:35:f8:37:dd:
                    e4:a5:53:aa:cf:c7:81:86:e7:97:b6:2e:4c:1c:00:
                    09:cb:22:15:4c:16:9c:63:9f:e7:6e:07:8a:56:97:
                    db:28:96:40:93:9c:f6:84:e2:35:12:4b:d8:8e:7f:
                    73:45:45:6b:4c:e6:ba:20:2b:54:22:94:8d:f3:c7:
                    6f:1a:fc:87:54:96:ab:a0:e8:d4:05:35:4e:1d:4e:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B6:7A:FA:19:A1:1F:10:7D:97:F4:E2:81:1D:0C:6C:E7:64:35:90
            X509v3 Authority Key Identifier:
                keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9c:bd:0d:cf:7c:73:15:d8:0e:86:1e:23:b4:d1:58:2e:c7:
         1d:1e:15:e6:05:98:ef:d2:48:75:a9:ab:20:97:e8:43:5f:16:
         b2:37:42:56:07:2b:fe:56:9c:02:0f:71:8d:b3:8f:e9:98:58:
         0b:95:7a:d2:12:46:cd:a7:88:92:2d:6e:7c:c2:0d:6b:86:d0:
         e8:c7:c9:a4:71:08:0b:62:21:fb:6d:7b:73:21:d9:a5:9e:30:
         36:d4:00:de:32:a4:54:f8:03:07:aa:bc:8e:ce:32:65:6b:da:
         a9:55:c9:9b:62:d9:1c:43:e4:40:0d:85:8f:92:75:90:87:a5:
         02:e6:8f:7e:b9:25:08:1c:1c:41:03:4d:1a:8a:4b:4b:e0:1e:
         f2:e6:b3:e8:1f:ce:36:18:d5:c0:4a:27:f9:c2:b2:ca:d3:8d:
         ae:76:73:1d:26:d1:76:3f:82:f3:cf:9f:be:45:b4:54:b5:47:
         f3:f7:c2:57:45:8b:6d:7e:98:eb:70:ca:e5:31:47:6f:e3:2b:
         53:99:c8:d9:ba:d2:b3:ac:cb:76:1c:7c:0c:57:a2:3b:73:91:
         1e:41:1f:f7:10:70:25:06:20:16:a3:eb:fb:31:dd:8e:b3:f5:
         59:22:84:bb:71:d8:aa:f8:3a:b6:ad:32:44:45:67:2e:bf:15:
         c1:02:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:57:46 2024 by rpki-client on console-fra.rpki-client.org