Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
File:                     pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft (raw, json)
Hash identifier:          EvJGOFxiA2oI/nx7dfT7w24lUwKjAtx+/CINfbiDXb4=
Subject key identifier:   84:31:A9:98:2C:E6:C8:AB:9E:27:4D:29:D0:09:0C:E0:C7:BB:F6:B3
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Certificate issuer:       /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial:       018F874961D07F34370168E77E6062F79587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: 396wbCbJOwEnfSfLqqVDtk8gOJE.roa (hash: gwwb8tAThnxd9IR1xXtDWCSHDNLQJ5IPnXypl8r2o1c=)
                          2: S7fAjVXhAeS1OsT1BUGd11YM6nM.roa (hash: xvXH6eOu8gvXVfAYLb3qE58tIu4XNYHGYTxoBlCVlyc=)
                          3: XMTFjLKNt6-iJEwSRJymjQ38Sjk.roa (hash: IryYlLMgOMoEjC3876s203Hw3Lqz6fAWckRC2soO6S4=)
                          4: lU9Ys5hp4Iz8Z3Ol4fumVUFIDYU.roa (hash: iwy3snEyrFnewWosExT9g9WO/780vtNIrwCT5awi8eY=)
                          5: pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl (hash: 6U1g4FmCjaCyf6DpYp/Vdc6SIgWMwAZDyNI/aucdpgI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:61:d0:7f:34:37:01:68:e7:7e:60:62:f7:95:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=8431a9982ce6c8ab9e274d29d0090ce0c7bbf6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:c4:4a:0f:62:28:d6:7d:44:c8:d6:dd:3a:
                    80:6d:b6:9d:b3:97:45:02:d2:6a:9b:7b:59:6e:91:
                    f5:60:14:e9:26:cb:f7:3f:5b:72:9c:d2:5f:7c:03:
                    b8:68:3d:cc:6d:50:32:86:c1:e3:c1:4b:3a:5a:45:
                    ed:6d:b7:df:36:df:f3:59:95:d6:fa:74:67:ad:4e:
                    35:bd:1a:e4:dd:04:d0:55:8b:ac:16:1b:1d:03:ac:
                    6b:5d:1a:b5:7c:ee:58:ac:be:0e:eb:83:4a:c5:ed:
                    7b:66:16:7f:7f:8b:c2:b1:a4:7e:6a:5e:f3:55:82:
                    e5:c2:58:4f:42:eb:da:0c:77:ea:d4:da:e2:d9:d3:
                    39:8a:e1:4c:64:18:81:76:8e:34:02:4a:79:91:33:
                    92:07:26:64:4a:c9:00:3b:8a:90:57:79:08:e9:dc:
                    9d:5c:47:d0:e1:de:f7:06:1a:b8:8c:b2:c2:a5:f8:
                    82:c3:36:1f:8b:00:5d:ba:d8:f6:87:0d:e3:01:d2:
                    d8:64:24:4d:62:1d:a0:67:fe:74:fb:c4:d9:f2:6d:
                    e6:a8:53:d5:27:65:63:79:76:16:8d:d3:68:b3:66:
                    f7:ae:71:cb:bd:66:2e:c2:f5:d5:28:e9:02:da:62:
                    28:7e:bb:a3:cb:66:d5:24:6b:d6:07:3b:bc:06:42:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:31:A9:98:2C:E6:C8:AB:9E:27:4D:29:D0:09:0C:E0:C7:BB:F6:B3
            X509v3 Authority Key Identifier:
                keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:da:3a:a5:c5:b1:a2:28:f0:a3:33:18:38:05:9f:a5:a9:
         4d:cd:a6:9b:d1:39:17:a6:6f:a0:a8:53:3c:19:de:84:2a:3d:
         f6:bd:08:55:04:a3:a0:cd:75:a5:c6:f6:80:8a:5c:6b:d4:ec:
         18:53:91:f8:ca:f0:e5:49:ff:f9:06:43:29:1b:4d:88:3d:b0:
         bb:87:3f:c5:be:04:40:73:81:ad:73:e7:75:21:99:3a:6d:dd:
         b7:01:72:4d:83:53:0d:e4:1c:5a:d8:ca:93:a5:4b:7a:f2:85:
         95:ac:c5:f9:53:73:fd:81:80:b2:fe:90:38:34:5b:3a:8c:a4:
         cc:11:af:19:50:d4:fa:e7:eb:00:f3:cd:e4:2f:2f:f2:5e:ab:
         2f:fd:51:e5:1c:35:7d:d2:31:b8:39:ed:9a:47:8a:63:a9:93:
         7f:1d:f6:04:30:86:fa:94:51:4a:28:31:95:76:51:79:18:59:
         31:8e:56:11:c7:c8:c8:dc:c4:2b:20:5c:0f:e1:0a:0a:b5:51:
         32:1b:63:0f:1f:53:fa:e6:4a:7d:01:b1:e1:3a:c5:c3:1b:db:
         23:f4:d8:6d:14:1b:7c:15:35:6e:96:2b:bf:15:d1:d3:a4:30:
         fe:d3:ab:fe:66:d6:06:98:77:46:77:e6:0d:d8:84:9e:8f:7a:
         a8:39:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:25 2024 by rpki-client on console-ams.rpki-client.org