Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File:                     aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier:          HeKLaqWGQ+B5egF+qEt/qY0Qxr7b1DNakcRtNPfPtSE=
Subject key identifier:   53:38:71:FD:95:91:46:6D:27:95:06:4B:7E:4A:76:8D:02:5D:1A:C8
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer:       /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial:       018F8259264C164CBE7555828F080207872A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number:          1174
Signing time:             Thu 16 May 2024 17:00:31 +0000
Manifest this update:     Thu 16 May 2024 17:00:31 +0000
Manifest next update:     Fri 17 May 2024 17:00:31 +0000
Files and hashes:         1: 1-MsoIK47d9YIf4NiDuymXuWELGY.roa (hash: F0a4rahsg1NyyNHDU0TRWA9ZlmPAPQ85CySFGUe38jA=)
                          2: JFe0BgWzTfWPErZk90Gdrvcp3IM.roa (hash: k3UHYUQnhHrd4/5p9x16IHWSntdW487DEos+u0D08J0=)
                          3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: bdVLl9JHf9EO8hn3mqwpKLbj3n5pUqLbokMiHsIvdmg=)
                          4: d8zeWrXcSK5smiQmBLm0kKEfBlc.roa (hash: hosMlLCdC8Px1vyROtrP0coHtSKHHeK1AcG1e2Oay64=)
                          5: dJjkF115j-rAyk-l2vXVFKZjjVs.roa (hash: EuJeBYQb0zC7yvcPfrrKyKErZjK7f3w56Wt0g0r5dgk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:82:59:26:4c:16:4c:be:75:55:82:8f:08:02:07:87:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
        Validity
            Not Before: May 16 17:00:31 2024 GMT
            Not After : May 17 17:00:31 2024 GMT
        Subject: CN=533871fd9591466d2795064b7e4a768d025d1ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:09:32:c0:35:27:df:76:fd:90:1c:de:f8:
                    75:e0:c5:b4:8b:fd:ff:4b:a6:f8:0e:1c:5f:29:eb:
                    ec:75:9c:e5:0b:6b:7e:22:50:41:72:f7:a4:03:1d:
                    09:54:8c:a6:10:0d:90:02:1a:85:2d:6d:ae:d7:1b:
                    7b:51:9f:6b:dd:88:f2:10:dd:7a:49:41:66:ff:6f:
                    78:b1:b7:8b:95:ba:f9:f1:b6:a5:e1:9d:65:a8:aa:
                    4a:81:1b:13:4e:42:fa:96:03:64:86:08:85:35:44:
                    4c:5b:4c:8f:66:3d:88:36:73:ac:b5:4c:07:57:1d:
                    f4:80:9e:46:27:bf:13:23:72:22:c1:c6:ee:e3:14:
                    4b:ad:bb:64:a4:d1:a6:8d:c8:09:a1:35:8b:d2:8d:
                    72:c5:40:2b:ab:9d:7f:c2:4d:38:f3:db:ce:7b:b5:
                    a1:e8:87:0d:7c:99:bb:4c:a4:68:d9:1b:2d:8d:47:
                    2c:31:23:9f:08:19:a8:04:00:05:ed:c2:e3:41:6d:
                    55:3c:29:a9:a1:8d:78:60:55:43:c7:7c:c5:dd:75:
                    4b:58:d7:e6:14:b0:9b:e4:77:89:1e:32:ee:4a:23:
                    4f:a4:9d:98:9f:80:8d:41:ea:30:2a:63:0a:ce:79:
                    cf:6d:85:ba:8b:5c:34:ed:40:9c:92:3b:1e:65:c0:
                    23:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:38:71:FD:95:91:46:6D:27:95:06:4B:7E:4A:76:8D:02:5D:1A:C8
            X509v3 Authority Key Identifier:
                keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:20:29:72:ff:cf:d4:79:24:ed:2c:c0:33:b1:69:9c:60:9b:
         11:bc:20:3a:17:53:f4:2f:4c:e6:40:c6:f2:8f:81:44:63:09:
         6f:37:9e:72:dc:19:39:83:94:31:8a:42:38:ec:e2:eb:94:e3:
         c5:db:93:73:4c:5b:47:08:db:de:27:bb:09:56:73:e5:40:2b:
         90:bc:a5:b3:68:fc:55:87:90:e2:55:33:b6:a5:92:b4:eb:7e:
         0e:9c:9f:98:bf:88:34:e2:d2:d2:30:3b:e3:8e:48:51:7e:b3:
         fa:a8:2f:bc:89:66:89:34:a7:9c:e8:45:a4:da:9e:d9:d2:91:
         5c:c0:7d:d9:59:5c:a4:96:ef:48:dc:e1:34:1b:33:cd:1c:5f:
         c1:18:96:52:57:21:89:83:a8:a9:e8:7b:fd:75:08:5a:b9:8a:
         3a:df:c6:17:83:3d:f1:8b:7d:f6:e0:a6:00:fe:eb:1b:30:49:
         e4:4d:65:b4:36:a0:eb:b9:0e:e9:24:69:9a:87:50:50:ab:13:
         83:5f:a8:eb:ae:2c:c3:fe:5e:f6:aa:f1:a6:38:7f:da:5d:2b:
         55:4b:af:cd:bd:ef:d9:07:c6:ba:65:6e:47:0c:39:ee:fb:46:
         80:8e:70:86:44:d3:27:36:4e:0f:7d:1a:9c:fa:49:03:b2:2e:
         67:3c:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:11:57 2024 by rpki-client on console-fra.rpki-client.org