Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File:                     mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier:          E+42yJ6X0ttq32YIw4ThdaBtVezt5CEDCQtefs5XUSk=
Subject key identifier:   31:9F:02:49:40:FD:AC:8D:4D:7F:9F:2C:FA:D1:63:9C:25:44:FC:93
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer:       /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial:       018F866C9A02E0904F0656D5458161FF39BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 12:00:15 +0000
Manifest this update:     Fri 17 May 2024 12:00:15 +0000
Manifest next update:     Sat 18 May 2024 12:00:15 +0000
Files and hashes:         1: HaPjKoO1y3nEpjVyBAMKHcpQ2aY.roa (hash: RTVXlr1AaYmUT22be4F+G8m7kvJJRn+cyKHlvXDCVUM=)
                          2: HqQaQkzt1dcnxGGmGompdTfu2jI.roa (hash: losKrV0+DOmB6mOrdznRhlMfbcag3lg+t9YI9ihggIE=)
                          3: UVvzMsAW5Cz-gJuiKw_bCzwZ_uw.roa (hash: lD4lXvd/aSQs7j1RCTvl9WAb0URBUaZBcxVrLBZe6XA=)
                          4: Uk1R-rtw08p5xLmEPvlebcp5bkA.roa (hash: IrnRidpvKx1Xa46ym1q3rIhb1GsbkHYIP1WCBTtQPQI=)
                          5: XBmeJD0YnVPkyPrbFZs_3Kc9gvw.roa (hash: KdBsqfL8sOR/FvcGfo1XV3qrmhZ4uKVMRLo1IovkvzQ=)
                          6: ib8060HsWhLuUIh0pVr2nzQRBWk.roa (hash: Pp9sVkPvGtEeBPNSPaniuhm9/UnYeIdECybFKBu5PsA=)
                          7: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: kg+0AK+tl2w+CRYz+RKDwJxT3dkG2V+pj/B90vZN2dg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:9a:02:e0:90:4f:06:56:d5:45:81:61:ff:39:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
        Validity
            Not Before: May 17 12:00:15 2024 GMT
            Not After : May 18 12:00:15 2024 GMT
        Subject: CN=319f024940fdac8d4d7f9f2cfad1639c2544fc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:bc:70:43:53:88:39:d0:a3:61:55:dc:66:
                    de:d3:bb:b0:2d:1d:15:27:71:45:58:0a:55:a9:e7:
                    57:2d:9b:e4:68:57:16:8a:4f:01:15:3a:16:e5:25:
                    d2:cd:d4:0a:53:0b:f9:a8:50:47:72:54:77:04:01:
                    30:60:36:42:b7:d6:5a:7f:2e:60:b4:49:4d:a9:3e:
                    06:54:d3:6b:fb:93:e6:7e:dd:ba:f4:67:bb:ff:3a:
                    58:95:c2:c4:d4:8b:3f:08:b3:c4:34:6f:f3:17:98:
                    09:ba:77:f7:4a:70:2c:78:7d:dd:be:97:7b:ca:98:
                    ce:f3:ab:1e:9e:2b:a8:a2:cf:8b:20:61:0c:ba:a3:
                    15:98:c8:c8:2d:06:4c:5c:e0:76:76:3d:4e:ba:37:
                    86:6b:b3:46:c1:b4:d7:3f:b1:4a:a7:a3:8a:45:a4:
                    95:8b:7c:93:2e:a9:ee:e2:27:69:61:66:4a:5e:bb:
                    6a:7b:5e:2d:66:05:ec:6b:ad:72:9a:3f:5d:10:96:
                    8c:f3:13:a6:17:61:9f:48:29:1f:80:50:b6:bc:f8:
                    3a:04:48:50:eb:a2:c0:fa:1e:3f:8c:9b:42:90:8d:
                    e3:67:b0:1e:26:d7:8a:c6:af:c1:ea:22:f8:de:dc:
                    b2:10:65:cb:7f:9e:a3:1d:6f:4e:9d:00:19:6c:63:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9F:02:49:40:FD:AC:8D:4D:7F:9F:2C:FA:D1:63:9C:25:44:FC:93
            X509v3 Authority Key Identifier:
                keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:30:61:a7:c0:71:94:c9:e8:aa:f5:92:2c:4b:23:aa:ed:f0:
         88:65:93:81:a1:ee:3b:c4:8a:62:5e:cd:c2:1e:ae:d1:d0:30:
         41:a6:15:c3:d4:a8:c3:7e:72:26:42:40:0a:9c:44:1c:31:2f:
         e0:fd:38:2f:ef:25:9a:cf:65:35:fe:79:ce:d7:34:a0:a5:51:
         be:9f:af:27:e9:54:f0:a6:1b:d1:b7:02:d1:7b:14:3d:8a:5f:
         14:99:93:92:c9:48:60:bf:ad:df:64:10:92:c1:54:55:0d:50:
         d3:c7:1e:0e:d2:38:08:86:57:1f:6a:55:16:86:dc:3e:2a:98:
         00:ad:af:9f:7b:0c:b5:40:10:fa:26:7d:c1:b0:f4:56:e3:78:
         f1:6b:a1:20:7c:e7:9e:73:eb:0c:44:91:37:e7:14:64:0c:33:
         1f:36:6d:d0:a8:44:ab:83:d3:41:d9:07:dc:db:9f:d6:64:98:
         99:82:6f:68:b2:76:29:67:09:6c:fe:af:26:94:70:f8:17:d7:
         bc:47:22:d2:63:3e:f0:ea:41:4e:2b:72:0f:76:ab:70:fc:88:
         bc:fd:4f:52:88:e2:30:76:31:d9:24:7b:98:ec:25:e0:95:c3:
         0a:b2:86:b1:1c:16:b4:9b:00:53:aa:0c:82:a4:2e:4d:36:59:
         54:2b:e2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:38 2024 by rpki-client on console-ams.rpki-client.org