Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          PCrSMpZ0+DXtarTPhB+T5HscLOZfKJTTYyV6o8PPoNk=
Subject key identifier:   4C:B5:38:5F:A0:86:A1:50:5B:BE:82:6A:2D:DB:4E:4E:66:E8:B9:73
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       018EF861B1416F9DDDC25618521133525D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          1160
Signing time:             Fri 19 Apr 2024 22:02:15 +0000
Manifest this update:     Fri 19 Apr 2024 22:02:15 +0000
Manifest next update:     Sat 20 Apr 2024 22:02:15 +0000
Files and hashes:         1: 1X2qtgxnmmOfdn-qloP6eXdmqdg.roa (hash: Se98ewyQgmmMVNeTg11bzZRjAgOJuLxjRH67MAtTkMQ=)
                          2: 4YZ678VGCn5TLitDTnpaLf_QcWo.roa (hash: GllIYoM7z8h0P+oGARdumljTcTkRMxsSck2jM3LoHA8=)
                          3: 4uEOUhhiRQCIdO48q3JUxHAMSc4.roa (hash: ExqhK0JCQtDvYdcp0o7N7bHCo196yGJ5+FLN868iaZU=)
                          4: 6ogwrwNJrkqjuIafO-iZiuxQKy4.roa (hash: jRbXd3hhqanERuhyFJeD8fOlmmmCJzJvo9if3qfkJEQ=)
                          5: 7DQjy6GjO_v-dxxYWRKiJnuE2J4.roa (hash: Dq5wE9pkxcXfYvzUSrs7uSHYcV8TPmnLrlj21DGnPk0=)
                          6: 7XoDnpfHTvHQ84QzS4cQOXeZwt0.roa (hash: Xqa90QF4NZlpvriIMtb97TTxuisTq6/WBVIgKSbnO3M=)
                          7: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: 83Dbocl+KB78Nx0GnGw70VRUROaO9mltrajtwHHyv+Y=)
                          8: BaG2dMQPfw6EjBzDZBg3knR7AKI.roa (hash: QVNCLzcs2Dqg4/X7CGsrmr49DtVyNBviWJ28rjZVNXU=)
                          9: EKFwAmc-wvXZDYtsNft7ssGS1ck.roa (hash: VSLqavS0gfUQEgJo3uBiNSNzuKDZR57MCxbmi34EjrE=)
                          10: FSOFwv9IB_KiB3Dn7DNS796lMZY.roa (hash: iN4GifpjJb9kJuiExdST/NDBe02bICVeW0pEkfDcs6A=)
                          11: JQsNAFFfzyFArDI4G9Y4cTwJoqM.roa (hash: 8TxGpeMxyxJ4KiEenvFBZq/vIU3SXhsTgNIyeIJdTRA=)
                          12: JbuY4dQyCthIuyah31HgOSY_3z0.roa (hash: MeX6gf8ICBq2AkvK274Ef+JayPCIx3fciKDpF3IQ/G0=)
                          13: Zxc2kLjmT4u2aAcACmgXdo-KdH4.roa (hash: HrOWP7S7cZmmWSnJu3McwbePUfvwl8eCy4U7D5jJDHg=)
                          14: aay2zQj--0XzW5DouAaQJTuRwkI.roa (hash: n/FtB8f5aBMT29aXOqKLC1m3b2ouuAS5PbGq0CbOL2I=)
                          15: bo20zRcNK4gDpQFqmq493cs7Iws.roa (hash: BMW/aozE9QHU8Sli24iHI58RaAOI11qJFq4gtCIiqAE=)
                          16: iGLxRsu32lM53Rg3l29j48GyRxw.roa (hash: mZVjk2wGTYW5EOLeB6dfIwHx5Tkai9iNA9sWg4KyozU=)
                          17: kVHznud5bQMID86lyqTTjYSIYWw.roa (hash: tgCOqjjCAD1wCYOkFnwEhKI2RRvfyx9WY4KoB7eHE/g=)
                          18: ki8uh741YEF7GQWy4NzLviOiXrY.roa (hash: Et6+/MYfuVV4hDCRIT2ZwtgJO1R3R+KGAq3cLJGAPHw=)
                          19: mGrQxZz2w6XrpnOO9skASmwoRP4.roa (hash: ZffqA6bhiqs5voqqwTgwYLNPHyRdJSvPaSDKjUwq8vs=)
                          20: pmsv-rMV2DGwQu_vRfVouwc6fjo.roa (hash: CEdic76nmuR8YEeVXSjwzunjNGfLWm4CFGnQJYq52/8=)
                          21: smdHFipgeUTxTAMR6DVQPDadoos.roa (hash: IwZTaeZnbz3E1pzkMvJw9+Z98y7rgNwmvByTLlUEUXs=)
                          22: xayzWP1XFSpmhsEQtX9dy14HdVU.roa (hash: FpWhElBBvOKw3YBu1jUuz1Kk9+DUVYMI499RyiqBSsU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 22:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f8:61:b1:41:6f:9d:dd:c2:56:18:52:11:33:52:5d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Apr 19 22:02:15 2024 GMT
            Not After : Apr 20 22:02:15 2024 GMT
        Subject: CN=4cb5385fa086a1505bbe826a2ddb4e4e66e8b973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:81:e2:9c:5b:04:ac:1b:00:f4:43:5f:2e:c0:
                    e7:0b:ee:56:53:1c:d7:d0:07:cd:ba:bc:56:31:36:
                    4e:0f:34:53:4d:30:53:cf:a5:1b:ec:7f:1c:06:23:
                    08:06:74:4b:9a:3d:51:37:fe:e9:79:4b:43:cf:8c:
                    44:97:c0:59:52:6f:d9:c7:6b:5a:38:02:2a:f7:ed:
                    88:e1:64:01:ca:36:dc:c4:23:f4:e7:e5:a7:ce:14:
                    80:40:c3:45:5b:f2:ca:5d:7e:21:9a:8b:04:f4:a2:
                    f9:be:47:db:1c:6a:04:95:e0:38:db:eb:6b:62:0c:
                    c4:b4:bd:17:c7:44:92:a0:b4:b6:97:16:eb:a9:b5:
                    2e:c7:29:84:c5:d8:c7:05:02:75:da:63:db:7a:ab:
                    89:77:8c:31:13:18:3d:1c:fa:e0:f1:69:95:37:aa:
                    d3:4b:c7:ed:58:6a:f7:40:ce:db:91:48:2d:7a:d8:
                    11:3b:0d:3c:bc:a4:d0:d6:3a:9f:07:81:45:59:a8:
                    0e:37:9c:c8:81:15:3b:b2:b2:14:9a:26:e4:23:f5:
                    20:01:16:2e:7b:ce:83:58:60:84:c2:6b:3c:55:b5:
                    9a:42:f6:61:db:ef:94:4a:ad:3d:3b:65:77:d2:64:
                    15:4d:df:34:a7:9c:76:22:3a:90:23:33:91:fc:40:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B5:38:5F:A0:86:A1:50:5B:BE:82:6A:2D:DB:4E:4E:66:E8:B9:73
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:52:eb:ec:f1:92:15:b7:4f:a6:74:24:27:c5:25:14:49:15:
         14:0c:b1:64:5a:ad:e6:94:12:bc:ca:52:6a:25:1a:17:e6:81:
         ba:11:5d:79:4d:c0:eb:03:78:78:99:a3:08:0b:9b:e2:6d:9e:
         0f:4e:89:6a:60:a0:3b:b2:a3:06:fa:69:5b:c7:ba:dc:d0:a1:
         95:4b:24:79:ef:04:4e:9f:34:8d:4e:6e:3b:08:ec:ff:7f:e4:
         fa:86:d5:e5:91:4a:dd:28:ba:2d:71:ab:5a:db:09:9e:af:55:
         36:61:7f:61:ee:9f:4d:ff:b1:00:45:28:72:a4:4d:14:ba:89:
         4c:e9:ec:5a:b2:84:b6:63:27:65:ba:77:5c:70:b1:16:c5:56:
         12:f4:48:8f:dc:15:f8:2b:b8:21:55:07:b6:a5:72:8c:3e:8c:
         f5:08:5a:25:08:45:2d:07:1b:79:81:85:d0:96:cf:96:d4:09:
         35:39:78:f4:37:5c:0c:1b:ed:67:3c:af:23:36:88:3f:d3:bc:
         8b:48:94:38:3d:73:02:63:4a:87:8e:8a:64:47:2e:1c:c4:31:
         ff:98:92:71:b3:7c:43:8f:cc:18:7e:31:aa:37:3c:45:a3:d0:
         58:6b:23:b5:70:a3:b9:ce:2f:5c:31:69:86:10:1b:ba:a2:63:
         d5:c1:8f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:26:19 2024 by rpki-client on console-ams.rpki-client.org