Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File:                     xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier:          34qk3WJcPohKSB5GbpO+GjZ4u5EQ4442LaUryz6lnjA=
Subject key identifier:   7C:08:56:FC:25:75:5D:39:18:16:B5:6B:41:9F:BA:D4:A5:70:15:C4
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer:       /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial:       018F836D148D221DAE4AEEE9FD72F8C3ECD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number:          1005
Signing time:             Thu 16 May 2024 22:01:54 +0000
Manifest this update:     Thu 16 May 2024 22:01:54 +0000
Manifest next update:     Fri 17 May 2024 22:01:54 +0000
Files and hashes:         1: AV9CRX7lmTCc6GiIB9AhztHDQH8.roa (hash: avTjSORCfSpHNnGS9iKwoelJhRj1BAFKAzEYLASj++Y=)
                          2: HI1gRqYcsBQEA0gJUy_CB8vGUTQ.roa (hash: tnF7G1LPxAHiuOg1UiNbStFHEPcqkW70yTDAcJkZ/xY=)
                          3: NF5dCK3ro94upZ4jxfRhAfO6zcw.roa (hash: KbcOrVdni201rwCjhihrhI5cxPkdnYBOFHx8VTZXzpA=)
                          4: giC_SNoQ789b8qQg47muxMxKeTU.roa (hash: NwcxZB6wPvwXoUeqMUplmFCX1Vj1Kgw6D2UzZyDXpbY=)
                          5: k-X-FBMD1vFJaKVIMx4D3da3teQ.roa (hash: 3hQn6E4ou8HLCMPGsS5R8ZCGGRHQDvhbCgIh7xwoyK0=)
                          6: lf_Yv3CNl5tvmZS0kmMIeXBzovA.roa (hash: nhOI5xcXmGcWkL/P2cZJlDGslxvmYvC2aCoVDZIm9vE=)
                          7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: AklqG97hfg371DqovYcsTKvWytQZYyAM6LtbVKs789Y=)
                          8: zrD2bHxMbNqX9h1vgZ78C7pq7w0.roa (hash: idRqYHF5sdoRm+Ej+1aBGEG3u+00jq3PN3DsN0cTo8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:6d:14:8d:22:1d:ae:4a:ee:e9:fd:72:f8:c3:ec:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
        Validity
            Not Before: May 16 22:01:54 2024 GMT
            Not After : May 17 22:01:54 2024 GMT
        Subject: CN=7c0856fc25755d391816b56b419fbad4a57015c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e1:ea:fe:b9:e8:ac:a7:e6:70:91:3f:5a:04:
                    91:16:fc:2c:bd:7d:65:be:c9:b2:3a:47:8e:d8:f3:
                    0f:bd:47:37:33:58:42:fe:8f:1c:9f:7c:6e:18:ee:
                    fc:bc:2c:0b:1b:d1:35:35:e3:8f:a9:88:97:e0:77:
                    a0:df:96:bd:49:f8:5b:52:74:7d:e8:f1:43:8b:13:
                    aa:81:5d:c1:c1:7a:ce:c3:61:13:30:a1:46:02:d1:
                    2b:2f:3d:63:63:68:d8:de:c8:b6:91:fe:58:66:e4:
                    fa:62:46:26:b3:f3:c5:fd:7d:ba:e3:7c:aa:ea:b8:
                    fa:68:ba:25:df:da:0f:a3:37:1e:14:f6:93:24:a5:
                    c5:ca:7b:dd:21:f2:62:0f:34:81:c3:5d:8c:3b:53:
                    0e:58:f8:1a:66:6a:60:cf:9c:06:b4:08:2a:7a:14:
                    34:b4:7e:7a:42:af:4e:2b:25:0a:05:30:9d:f6:b6:
                    10:bf:d3:51:f5:f2:75:84:bc:17:2c:b0:ae:73:f1:
                    6d:db:5a:a1:14:d5:66:74:15:1b:f3:65:d7:80:50:
                    33:f8:84:46:ce:b5:78:ae:2e:ca:bb:b3:99:fe:0c:
                    c0:ab:c7:23:4f:05:7a:66:47:82:0a:cf:9f:ee:aa:
                    d2:f2:c6:79:d8:29:21:4b:72:3a:70:fe:24:8b:ab:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:56:FC:25:75:5D:39:18:16:B5:6B:41:9F:BA:D4:A5:70:15:C4
            X509v3 Authority Key Identifier:
                keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:84:89:33:c9:ae:97:4f:73:79:f8:82:9e:19:66:10:fd:c8:
         0a:15:f6:c7:01:42:9f:c2:e7:ed:22:1b:24:de:9b:b0:50:a1:
         e4:fa:15:f5:9e:c3:f6:23:f3:3d:9f:bc:10:1d:91:05:3e:42:
         fe:27:00:78:4e:82:72:6d:41:d1:60:6b:0b:6e:74:bd:2a:f2:
         93:fb:d6:f3:a8:3a:d6:cb:ec:7d:ac:84:c3:02:11:2f:0a:34:
         5f:d2:be:92:3f:4c:b5:7c:cf:1f:31:45:c1:1f:a2:a5:ae:a0:
         d8:d8:f9:d9:45:1e:64:00:44:59:2c:1c:59:3c:47:5d:fc:61:
         52:99:ee:7e:c5:15:0d:c8:d3:3e:17:a7:d3:02:8c:ae:7b:71:
         da:99:eb:06:7d:c8:2e:9b:64:d0:56:87:85:92:aa:12:fb:2c:
         cc:4c:2b:e4:c5:5e:86:9d:6f:16:75:ac:96:46:28:c8:1c:0d:
         91:4f:74:32:17:ff:31:b5:37:2e:3c:a3:e4:d5:bc:fe:f7:8a:
         2e:8d:ce:d6:f4:13:eb:ce:1e:c9:16:7a:e2:24:cd:1d:6e:ae:
         a6:94:71:2a:e1:e4:e5:9d:77:60:a8:1d:df:35:81:08:b1:10:
         45:a2:bb:4e:21:07:89:03:1a:77:37:ad:b0:d1:4b:b2:26:00:
         2d:08:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:46:39 2024 by rpki-client on console-ams.rpki-client.org