Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File:                     C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier:          b8ndJuWYJkw/ArV7TYv9YM/t12Zdh5TYOVvYfvU6J64=
Subject key identifier:   32:69:70:88:A4:65:56:0E:C1:FB:74:CA:9B:6D:AB:EF:5A:FA:85:DC
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer:       /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial:       018F3B533587C5C2919E6878BCA9B2F850E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number:          1151
Signing time:             Thu 02 May 2024 22:00:59 +0000
Manifest this update:     Thu 02 May 2024 22:00:59 +0000
Manifest next update:     Fri 03 May 2024 22:00:59 +0000
Files and hashes:         1: 0NhZKzmCLNwXX1HROAzF-1eB6r4.roa (hash: sfqo9yhKIRhaKfUhXiqEsAtUPZxb7q27e4WslXBdNkg=)
                          2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: JfhisfypbsV4N606+n5wUQuNoSGvlHzAHajDbP/ACH4=)
                          3: RP7uFutszB-xOFADZVTEBD5Ri4U.roa (hash: TUS5+ARPzHo+zDeUTzJJVC83a+LP72AYw/7iz0HelVU=)
                          4: i6--8U1VPM-3ZfgsfH6JImVQhWw.roa (hash: vjyWGk0qqMOiyFdNIr1qTYGUkLYZr8MUtBLfs+xKPPE=)
                          5: rEi1B3jmP4VZOt5_wTDcn66r1jI.roa (hash: t0/JEDjg8OGm9NGRhn4gWoTvQ2+A389UWgpDIRG1A3s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:53:35:87:c5:c2:91:9e:68:78:bc:a9:b2:f8:50:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
        Validity
            Not Before: May  2 22:00:59 2024 GMT
            Not After : May  3 22:00:59 2024 GMT
        Subject: CN=32697088a465560ec1fb74ca9b6dabef5afa85dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:91:35:8b:df:1d:4b:a0:cf:71:da:e0:9b:
                    35:90:ba:22:f7:11:7a:ca:b0:46:1a:76:4e:99:ab:
                    74:55:a0:99:88:24:dc:36:5e:84:05:db:50:6d:eb:
                    44:d3:97:c0:46:ff:44:1a:8b:e3:58:a0:89:32:36:
                    17:8a:17:96:c7:d4:dc:28:65:d2:6e:78:b9:77:21:
                    1a:ca:7b:97:83:45:22:0b:b4:06:83:52:f3:0d:12:
                    a9:54:b7:2f:6c:2d:69:d8:ff:1b:9a:4f:6d:8b:22:
                    61:f7:2d:28:71:21:de:ca:cc:72:2b:4b:5e:20:5b:
                    d0:c0:e6:9d:3e:3f:2c:29:34:d2:c6:ad:32:17:ec:
                    b2:80:56:03:8f:c7:f9:44:96:16:72:94:ce:27:a2:
                    49:2c:61:ad:a7:98:2b:72:a8:78:4f:5c:f1:cc:1a:
                    1b:a9:62:12:c4:e4:df:22:54:7f:ad:62:c6:75:8b:
                    b0:ce:a3:05:db:31:47:9c:17:25:49:eb:f4:49:f4:
                    6d:43:d1:7e:71:f2:dc:3c:4c:f6:81:04:8d:d7:0a:
                    70:73:33:11:ab:cd:d7:9e:bd:b3:e8:16:f1:47:e3:
                    6a:d3:b6:ae:09:d1:3c:0d:30:06:90:da:b2:b3:47:
                    df:30:36:94:56:86:0f:ec:a0:56:39:d7:2b:d1:50:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:70:88:A4:65:56:0E:C1:FB:74:CA:9B:6D:AB:EF:5A:FA:85:DC
            X509v3 Authority Key Identifier:
                keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:59:bb:ec:80:34:49:69:f7:ec:d5:1d:b4:30:27:23:38:
         87:50:84:cf:3c:b4:8e:f0:99:62:c7:0b:e5:4f:c5:07:25:1d:
         82:94:56:d5:83:de:44:2f:46:2d:38:d1:f7:bb:92:6b:a1:e8:
         08:d1:6d:35:f6:e9:4b:19:b7:ae:be:95:15:ad:14:cc:0a:fc:
         2b:49:51:22:45:35:ab:d7:26:26:9d:16:32:0e:72:d2:5e:8c:
         a2:93:5b:d7:9d:e9:d0:f0:bc:d0:9a:08:77:03:2c:cd:3f:09:
         e4:fe:18:6c:21:72:1e:59:f9:10:91:01:66:c2:6a:0c:4a:24:
         a2:4e:22:1c:6c:9e:e2:fc:aa:01:03:94:1b:08:5d:67:00:da:
         8f:b7:c0:f0:b0:d1:e4:e7:c3:45:9d:5d:68:08:ba:95:f9:9e:
         24:03:d6:13:28:19:ab:16:be:59:81:cb:6f:bd:fc:6b:a7:e4:
         69:3f:26:ef:12:96:d1:bb:83:49:0f:22:54:19:6e:ca:69:99:
         1d:29:35:38:a4:b6:c7:01:4a:e9:b2:4a:50:c3:0a:08:25:79:
         1d:c1:13:74:4f:60:44:fc:f1:1c:c6:bd:c0:43:e2:33:58:40:
         95:68:89:2e:e2:99:df:b5:87:0d:cb:ef:7a:ce:04:ae:bb:23:
         15:dc:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:36:54 2024 by rpki-client on console-ams.rpki-client.org