Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File:                     DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier:          7KU7TnhoNwnVQLDT1YI1ZBfzr3FiSzzE+jb60N3Mcj8=
Subject key identifier:   6E:05:17:A1:37:CB:55:3F:45:57:F7:37:83:DD:EF:A9:7A:49:05:0D
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer:       /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial:       018F5138663742B89D1F090E353C8D148664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number:          115F
Signing time:             Tue 07 May 2024 04:03:21 +0000
Manifest this update:     Tue 07 May 2024 04:03:21 +0000
Manifest next update:     Wed 08 May 2024 04:03:21 +0000
Files and hashes:         1: 0Mmvbzp-5aDh7W-zKzfdfrLQx5E.roa (hash: tZvW9avrhsuVXY0MAqM9455rCz5w1TVQ718kSrmRBoE=)
                          2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: 2pXHy0ymLA6AEfJMzatFEjWH1ZWVFmnDynRH12rE2jE=)
                          3: F1yQr5zsQH3NcFuwyxd6dzmpm80.roa (hash: hGpYZAlEqhhBoEjlZFBAJPxWFokFrhTrY+ltSSkexOY=)
                          4: SPGlTW3VO5Qo2qyeU6cExDLlp5Y.roa (hash: 93o73kIT80/nqxHuHZe0xDd/MRranr3quDyqlAkXIGw=)
                          5: ThympqO-FXtSNvlnHHkCvYq_czs.roa (hash: jWk1vm8ZqYujOh6J/QTbRzENegeibfvO+sLNBJDPhnU=)
                          6: VvIjLBJSoHody6XL9uDtrBpuSCE.roa (hash: veRndXGQmSV1KW26HEHex+Z2ZYzEfdgiR7mezQYVAys=)
                          7: k5nmlH8rjLxAK0HsUUYcV0QprMY.roa (hash: hqnfVIaorGP3oJhvAGS08rcXVR6hsOMlNO/I94ebFJ8=)
                          8: m0ZQwnF9zYYp2SxcvMJr3-WU9gY.roa (hash: JSbToSZJly2SYlpwaxwXw9ITfEP5DvJE1AN731ZPER4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:38:66:37:42:b8:9d:1f:09:0e:35:3c:8d:14:86:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
        Validity
            Not Before: May  7 04:03:21 2024 GMT
            Not After : May  8 04:03:21 2024 GMT
        Subject: CN=6e0517a137cb553f4557f73783ddefa97a49050d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:da:8e:4c:17:1e:8c:38:e6:ac:e6:87:b4:
                    16:e8:90:e4:82:09:2b:bb:c1:98:f0:ff:27:57:6a:
                    8c:f1:3b:63:0c:c4:2d:9a:84:0a:05:36:ac:de:2e:
                    10:2b:84:aa:e6:dd:b4:0f:9c:a7:3c:e4:5a:0c:a4:
                    81:f8:31:81:58:c4:d4:59:d2:cb:63:6c:98:83:16:
                    10:06:1a:e4:41:da:5e:59:56:9b:3f:d6:8a:f3:e0:
                    9a:8d:d9:e9:5e:ce:7d:2c:fe:97:a8:f8:5a:d3:ae:
                    17:c5:86:62:34:63:b5:ff:2d:76:3c:b2:bc:17:58:
                    f3:a2:59:f9:2e:20:4a:e8:cb:57:8b:ba:83:97:85:
                    8d:8c:92:f6:58:b4:89:f8:44:21:4d:f3:68:c6:9e:
                    27:d7:f1:9a:c1:6a:c0:0f:c4:56:43:ee:ec:a3:7a:
                    81:42:44:45:83:f3:e3:0e:86:0e:4f:00:6a:58:31:
                    bc:c0:a2:80:75:30:c6:1f:79:03:7b:4b:41:08:3d:
                    5b:09:36:4a:96:96:38:bc:95:6c:b6:f1:b2:f3:4a:
                    84:17:28:24:28:b0:8c:8d:e9:01:48:a6:9f:3d:44:
                    0d:ff:bb:b6:d1:63:2f:d5:b3:ab:3f:51:a7:d9:b8:
                    48:59:05:4b:eb:63:03:ad:c2:96:c9:97:c0:3f:e3:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:17:A1:37:CB:55:3F:45:57:F7:37:83:DD:EF:A9:7A:49:05:0D
            X509v3 Authority Key Identifier:
                keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e3:a0:bd:d7:ac:50:29:99:1e:89:3f:e5:47:6c:57:e5:06:
         d1:c1:59:f0:f1:ed:14:81:ea:40:74:64:3c:18:07:ff:14:8a:
         00:f2:4f:4b:53:a2:57:44:68:24:48:ce:2b:87:ff:21:33:2b:
         43:95:6d:46:9d:da:f1:3a:ee:61:0d:df:79:93:41:d9:54:bb:
         ed:a3:6c:4c:f0:8e:1d:f2:b5:af:f8:9d:90:d2:26:a2:6d:67:
         c6:f5:bc:5c:2f:88:c2:8c:34:bd:ba:18:f4:16:17:9c:06:8b:
         f1:44:44:a4:75:0e:28:26:b8:29:43:82:2f:08:02:39:50:83:
         6d:b9:64:5d:97:fb:f5:75:6f:df:46:27:da:c0:3f:63:98:88:
         27:17:31:f9:5c:cb:37:ed:ab:02:22:b7:f4:40:f5:af:97:5c:
         d4:13:be:02:33:41:ca:6f:87:36:1f:a6:aa:7e:71:f8:51:cd:
         a2:b5:2e:5a:e6:c9:7d:c1:69:87:cf:30:ba:47:ee:24:bd:53:
         4d:f2:e4:c7:08:e5:a0:b4:98:ad:7d:37:9c:c8:47:3b:97:88:
         a7:44:8c:2d:3c:15:4d:fc:51:50:d8:0f:a2:c5:fa:2e:7e:46:
         17:3e:f5:ab:99:00:90:02:fc:eb:ba:a6:22:09:23:5c:0f:1d:
         71:2f:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 13:01:12 2024 by rpki-client on console-fra.rpki-client.org