Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
File:                     39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json)
Hash identifier:          y1gHhUKxrM4t/nDfI7p3/b6qZsVOuMaoyAHoejQ1ZGo=
Subject key identifier:   D4:69:E7:D2:01:43:F5:87:01:B2:7B:A0:F4:31:92:35:16:63:DF:7E
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Certificate issuer:       /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial:       018F47FC6A57FEF9603E8D24970D1CDAF3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
Manifest number:          1163
Signing time:             Sun 05 May 2024 09:01:15 +0000
Manifest this update:     Sun 05 May 2024 09:01:15 +0000
Manifest next update:     Mon 06 May 2024 09:01:15 +0000
Files and hashes:         1: 1I0HlI903CEitRz__YAFJEWqHPc.roa (hash: AhiCMOljo2Hmo/GtvQWXuOlJy8j63OiCCgsM9WGrXQA=)
                          2: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: ndwP0ZAJZ+X7SS1z2g9Jn/rPnS/kRsjkw20iNNOsr+A=)
                          3: NkT_LpSqylyi9x26uRYAF3SOG4Q.roa (hash: sXK+hLPI04Gf+aGr0W15jxrK4ylvszDLkgGrNlocao4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:fc:6a:57:fe:f9:60:3e:8d:24:97:0d:1c:da:f3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
        Validity
            Not Before: May  5 09:01:15 2024 GMT
            Not After : May  6 09:01:15 2024 GMT
        Subject: CN=d469e7d20143f58701b27ba0f43192351663df7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:70:9d:5e:b1:86:47:89:06:78:4f:02:18:
                    83:a7:e4:f5:11:16:4d:1a:df:9d:ec:db:2a:14:55:
                    f9:c6:cf:0f:3c:41:e0:6f:2c:0d:d8:a4:f0:b3:a8:
                    85:91:5b:1d:2c:5f:83:69:e7:23:c5:f1:c2:2c:e0:
                    34:d4:b4:8b:80:91:eb:32:1a:25:72:5d:04:88:11:
                    65:56:ad:2b:ee:d3:4a:fc:fe:27:8a:e9:99:4f:87:
                    1c:9e:92:54:02:db:09:59:4d:c5:d4:77:46:82:34:
                    cb:bb:76:14:54:96:f2:f5:93:40:2f:4a:39:cd:48:
                    9a:3e:dd:53:61:8e:d0:ec:6c:a6:b5:21:38:6b:cd:
                    80:20:f8:8a:72:fa:70:bc:f7:f5:e4:ca:a3:46:41:
                    3f:55:c2:f4:44:cf:77:dd:77:e0:04:26:18:c3:9f:
                    73:cb:6a:3a:7b:9a:8a:d6:c0:cd:1e:56:92:64:af:
                    18:78:26:2e:81:03:54:7e:32:c2:c1:c0:d2:74:04:
                    a2:6a:73:7b:10:dc:a4:59:d0:65:ea:bf:3f:3e:38:
                    c2:9a:8d:de:9c:91:c4:10:09:60:9a:11:2c:d4:95:
                    a0:b9:27:f9:2c:d3:b7:43:11:41:0b:ca:4c:3d:03:
                    b1:56:5d:08:65:c4:53:4a:ff:42:87:32:68:6f:4c:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:E7:D2:01:43:F5:87:01:B2:7B:A0:F4:31:92:35:16:63:DF:7E
            X509v3 Authority Key Identifier:
                keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:53:bd:68:74:f5:06:b7:02:0a:f5:13:7d:ca:63:07:c7:3d:
         3c:9f:6f:03:3a:86:b5:fc:0f:40:85:47:13:99:9b:56:23:d5:
         aa:7f:6c:78:7f:09:b4:f0:af:08:66:f5:8d:94:8e:cf:b5:ce:
         61:89:f8:79:b7:8a:db:e9:46:03:2d:15:87:f1:e8:f1:b5:33:
         b4:0a:38:b0:46:28:c6:d5:73:6a:c4:d1:1e:76:18:c2:f0:e8:
         2b:db:2b:3c:9a:c7:4f:46:43:3e:ff:51:59:2f:7a:a7:d7:9f:
         9d:a8:06:f0:7c:15:3a:e0:1b:28:b6:30:5c:bf:28:f4:46:72:
         31:dc:82:40:a6:71:2d:41:c2:1b:0e:5b:4b:62:27:c9:df:ad:
         3d:f0:fe:19:40:ed:7f:f0:fb:9f:4a:6c:5f:29:50:bc:76:fe:
         79:7a:f0:0f:c4:ef:1e:2e:c0:5a:bb:86:4d:3c:c3:7f:47:3d:
         03:5e:d9:c1:54:b5:b5:3a:47:be:53:f5:67:af:70:4e:04:45:
         93:1b:a7:2d:a1:e4:35:a8:2a:8c:23:7d:8f:d5:38:43:18:54:
         b1:fd:09:70:6c:b5:93:ba:a4:fa:6d:b3:9a:f7:c9:2a:91:c4:
         99:5a:53:19:9d:ee:74:02:25:f6:73:92:b4:d5:49:2b:bd:ef:
         0e:85:38:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 13:19:00 2024 by rpki-client on console-fra.rpki-client.org