Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File:                     1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier:          9LmbRw9BfHGmMNRRd5s/pQ6UtyY9WXfbOgTsYyAooBg=
Subject key identifier:   3A:CA:24:F3:F2:02:BE:F5:7B:71:A6:F5:B7:1C:0B:32:32:EB:A5:C5
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer:       /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial:       018F234A780D8508B85E74AAFB690350F95E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number:          1146
Signing time:             Sun 28 Apr 2024 06:00:33 +0000
Manifest this update:     Sun 28 Apr 2024 06:00:33 +0000
Manifest next update:     Mon 29 Apr 2024 06:00:33 +0000
Files and hashes:         1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: NcrUWYND2btd+FbymxdhyRd7F6euxUp4RCOfDWh+WDc=)
                          2: 5wdvmJZUJ70-ULoipZFrVlHA8eM.roa (hash: xnSvprVeruf7A+5x22FCIXRMJ4IFVzsU/2EaFJJgJjA=)
                          3: Foq4tfSU8_DzmjoMSVSKbBgYI6c.roa (hash: CXt9L8SYjSOc0tuumC44UCkWDc5Ld0LsCb+O77ZTI/8=)
                          4: U2NKjHX5WYjDY-c9epivYpBbXNA.roa (hash: m9/n7s/x1KNlRFDHig7Z4gAAyfUdf52JoPCJQ+UgO8Q=)
                          5: VFQr430aFS5L-xXuzb6hMxxnyuE.roa (hash: VDMX9fgqh9XafK9ZAGwuUYTb+z0GVGqjyZpz7KLtVLk=)
                          6: hTErh2bcYepzqXQ59N2aEIpJvS8.roa (hash: oDxEdioZHv/x/1UuwqqizC+2LYeYnb3Eff+ukge4oL8=)
                          7: hhm4UpwZDeUKtjteUj476rZeP4U.roa (hash: VB32cqMYw6O5d/0Gy7DvdiR9jkP4R7tb5FE5GUMmdJ8=)
                          8: yktwhUUBLOIGn1XDsHy1mGnlonw.roa (hash: 5x1M3qnqVfwwOmqBKAGUdZdcuRIhVEhH4USdnUmUe9g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 01:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:4a:78:0d:85:08:b8:5e:74:aa:fb:69:03:50:f9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
        Validity
            Not Before: Apr 28 06:00:33 2024 GMT
            Not After : Apr 29 06:00:33 2024 GMT
        Subject: CN=3aca24f3f202bef57b71a6f5b71c0b3232eba5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:2f:ab:e2:03:15:0b:96:7b:92:92:e6:01:
                    ad:6d:e6:79:85:16:43:fa:8c:7e:c5:e8:58:79:6c:
                    16:5e:bb:e6:a8:d5:af:27:f6:1d:14:4b:cb:e9:54:
                    b8:24:ab:fa:fd:86:cd:68:5c:4c:14:f6:48:ae:97:
                    b4:a8:f2:f4:af:64:b9:61:3a:c0:76:d8:86:1c:c5:
                    18:24:3f:cf:de:f6:f1:e3:bc:82:a2:47:11:1e:11:
                    da:05:8d:7b:8d:1e:3f:2b:97:2a:2d:f0:2f:c6:77:
                    e2:6e:83:9d:e8:15:96:bc:be:70:33:73:6a:41:0d:
                    e5:ed:d7:ea:fe:29:6e:b8:44:5c:01:49:89:34:f0:
                    b2:67:7d:c6:b2:df:28:b4:4d:9a:74:52:85:69:7d:
                    c6:dd:b9:dd:40:67:e7:20:4b:64:7a:05:5d:2a:ca:
                    bf:a9:26:de:cd:c5:87:83:34:a2:1d:0e:31:37:87:
                    c1:56:65:f6:fc:6b:f9:1c:59:bb:05:31:67:f9:c4:
                    5f:89:9e:28:fc:5f:d4:82:af:2f:57:4f:65:57:96:
                    93:b8:d1:ca:12:f5:b4:53:cb:86:7d:ef:13:77:fb:
                    a7:f7:37:30:04:b2:13:b3:f0:a8:ae:7d:d7:20:55:
                    8e:6f:91:6b:04:b5:a9:e1:d0:ad:f5:f6:6b:e9:40:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CA:24:F3:F2:02:BE:F5:7B:71:A6:F5:B7:1C:0B:32:32:EB:A5:C5
            X509v3 Authority Key Identifier:
                keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:8d:2c:66:cf:3e:48:26:e2:38:17:62:e8:8d:43:27:1c:
         a1:6c:25:f1:99:30:94:cb:02:73:c1:f1:43:a5:60:9b:a5:80:
         55:61:45:c9:a0:b0:d6:05:ef:cf:37:3b:17:07:0d:1b:33:f1:
         13:10:b1:ff:09:f2:ac:99:55:64:91:fd:7d:f6:99:9b:df:c3:
         8b:92:12:3a:a8:a5:6f:8e:fe:db:c5:5b:fe:0d:bf:90:55:26:
         36:69:02:4a:e8:d8:31:b1:82:e0:4d:06:98:b9:e3:30:70:cb:
         38:24:17:b0:51:10:d4:50:9c:0a:ec:6c:4f:85:d8:43:0b:1b:
         ff:5b:58:5e:10:af:03:a3:69:0e:11:e3:2a:9a:cb:3c:98:84:
         22:09:bf:ee:7b:3d:aa:05:a1:50:ac:00:5c:a5:ce:c7:15:fb:
         99:da:57:38:4b:a5:b4:ca:b0:8e:74:86:e4:3d:e0:74:b0:1f:
         65:d4:3e:94:ab:42:bd:e8:b8:01:01:74:f5:a4:e0:7e:9f:48:
         7b:3a:df:3d:da:1c:e5:c1:bb:66:95:6e:20:48:e8:d8:42:2f:
         06:fb:4b:e9:f4:b3:5d:09:3e:8f:73:6a:a4:bf:44:14:4b:b9:
         74:eb:2c:94:d3:25:42:b6:1c:8a:3e:f9:cb:ac:57:f2:cd:bc:
         2c:2f:87:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 06:36:43 2024 by rpki-client on console-ams.rpki-client.org