Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File:                     g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier:          EcONxJlS4whjGJqERlo0ObTbxR4lwDRvLjbsr1Dgta4=
Subject key identifier:   C5:9F:15:12:EF:3D:09:06:74:A2:0C:EB:35:B5:14:94:8D:16:98:4A
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       018F19ECD24DF9B9787CE27F3181F04544B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number:          1150
Signing time:             Fri 26 Apr 2024 10:21:41 +0000
Manifest this update:     Fri 26 Apr 2024 10:21:41 +0000
Manifest next update:     Sat 27 Apr 2024 10:21:41 +0000
Files and hashes:         1: 1-16ho57nCUoRCt3d5wP-Nq_kqTo.roa (hash: DYNnRBZIlu2CbnrKl/lcAUGt+9bTA/Rm0DhWygFnsoQ=)
                          2: 8X1XRbFincPlPoHG0g6T6DpHkSA.roa (hash: gnULFk4giBZNc96KqtS/RZyUtJd/Lo34FTXEZQ5bq2c=)
                          3: 9be5rMEKimneri1deEslqY33Yn0.roa (hash: AWEygOk4oNfeJ8K3ik7DaQ1Im9SXRaeqKAe2TLs/dAw=)
                          4: G5_fg3sVl7eqQYjYayqbsyNbuWg.roa (hash: vFQnHhsLfFIgkg9WFcFt8U5vgjPf1pmmSYB7qMX7ZV8=)
                          5: L8ix0BWU-G4Lcdc94dy31zNE7oI.roa (hash: kVLAjs6q4OGL1azmdu2ewZCcaYcMyCMpvJ1eAwCUnI0=)
                          6: QyR1Wa6uy342Tx2vHz-uOJ4l5kI.roa (hash: MZexVJ5m4umFrkq1pzaE8XoiXh1ZsngdQTjBuMherJU=)
                          7: _tQz1_qcEqZds29GsToVUuQy0Q4.roa (hash: SNarZuKFOz7fnrJ2jsOzIkNgJb/p5eMXGxq1LhUDDbU=)
                          8: bJdAGHl0a8RzydhgD9x1FLbziaI.roa (hash: mdEfodWfJ1oyMNpMvHkSA5UEXTW6dH15v7k8GbPPUdA=)
                          9: bSrRfvbxgJSOn6Mv14KZBbBoLpA.roa (hash: Ck6I5jpyTOAb4kykEG13BUMNK5zCKJBwkZyllvbT5yo=)
                          10: epzWTh5FM5gke40MBT0XAH0amuY.roa (hash: RUc8kcjdXBmDb4AsfAvimX/JcfmVc6SMjt0uyu+jKKw=)
                          11: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: 7w6SUE5ud5Vv4OQMjqFGlPrd/re1yWt9yeafY57KFv8=)
                          12: gKGEY4-vT8iqN4aHSoTosTMiGtk.roa (hash: wNePu6zlRlWH6Ktss/guVChHasOHbFCeUo0dlpognAw=)
                          13: i8JnVO3qTSfTf7GxiaWwj2BEwP0.roa (hash: /0D/hojkRveZWRVdhzpV0k68d4w6PnhL8Yx27xpOUAE=)
                          14: odRVToQzgn8kMlKcb_7vIN14a4c.roa (hash: S9Cn5dE1WWXIh3gUHfz2u/ZWsT/lUTDPU2z0KQKWh34=)
                          15: sfEGHGTrRXskkJnbvYNIOwMi4Ts.roa (hash: vAEx0AsWOAiBV/SJi1we037cUXeW6hY3X2zSP1HV1qk=)
                          16: xvnSWVRIatNSTVBNerTPsDFcs_8.roa (hash: AqSZkSYfkypVyGPQWM5nPO6HlospHRWMd5Lisbps72w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 08:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:19:ec:d2:4d:f9:b9:78:7c:e2:7f:31:81:f0:45:44:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Apr 26 10:21:41 2024 GMT
            Not After : Apr 27 10:21:41 2024 GMT
        Subject: CN=c59f1512ef3d090674a20ceb35b514948d16984a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:40:cd:56:66:df:02:a5:87:10:45:cd:1a:
                    ed:c6:7a:33:ac:b5:e5:3b:25:62:77:da:cd:97:05:
                    ee:67:f1:f2:61:5e:32:ad:3e:e6:c5:d2:bd:ff:27:
                    86:c0:23:fa:3a:8e:a5:34:6c:eb:a2:14:44:58:57:
                    46:29:e8:cf:a7:44:2b:7a:2c:b1:84:8f:9c:ce:a4:
                    5f:1d:ec:8c:37:56:52:6b:4c:c0:52:e9:b4:bb:63:
                    a6:44:c8:e1:cd:a6:a4:76:27:34:ab:57:ce:16:ac:
                    5a:08:5d:a8:37:d5:03:e1:5b:93:7a:f5:06:f4:66:
                    9a:84:d7:3e:c3:c4:52:9e:6e:97:ec:c4:58:33:59:
                    b2:86:e4:ae:d5:72:58:7f:50:c0:25:20:a6:e6:da:
                    cf:11:10:02:00:39:48:1a:7c:d8:63:67:8d:8d:73:
                    45:5b:73:3f:cd:27:8f:05:de:ba:ba:98:d4:b4:f3:
                    5d:12:0f:cd:c4:b7:db:46:e1:82:4f:67:d8:ab:88:
                    af:a1:31:85:b5:0d:e9:9b:cd:5e:44:31:4a:bb:4f:
                    4d:f8:be:bd:8a:a6:3a:1a:8b:ae:06:20:92:73:c7:
                    4b:8a:6e:4c:d8:a3:20:84:6f:b9:7a:e9:7a:5b:cd:
                    d1:8b:b1:ff:e0:b6:0d:3c:52:7a:46:c6:df:41:38:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9F:15:12:EF:3D:09:06:74:A2:0C:EB:35:B5:14:94:8D:16:98:4A
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:95:46:42:6d:68:f0:65:a2:c6:68:18:48:ca:a0:b7:5a:53:
         f5:9b:e2:c1:ea:c6:c9:1e:14:d6:ee:eb:80:c6:b8:8a:ea:a0:
         18:a2:b1:c4:5e:c8:8a:24:1a:1d:54:72:1d:a6:b1:3a:ba:0d:
         76:34:d3:d1:82:70:84:1f:ac:dd:4b:12:8b:33:ba:38:57:ed:
         bd:9f:ed:3a:b7:30:cd:e4:6d:d2:c9:f7:fd:00:7f:a6:f7:c3:
         dc:25:1d:d6:09:9d:c9:ae:3a:a5:d9:0e:c5:74:f6:dc:08:66:
         af:52:c1:ee:fd:bd:4a:b4:4b:41:68:ba:1a:1e:68:a0:5a:15:
         b6:e1:1f:0e:45:a6:0b:bb:ad:7d:09:ce:6e:ae:21:39:0b:fd:
         0f:ad:a7:19:20:95:97:7d:aa:f6:6b:39:65:de:e4:ca:1b:9e:
         2e:38:93:08:e6:82:ac:09:4c:7d:bd:23:69:17:4b:43:03:39:
         2f:93:93:7b:02:c5:5a:a4:be:2b:ae:3c:da:e6:1e:8a:02:7c:
         f0:18:83:8e:a1:59:97:5b:af:f4:0e:1a:67:d0:08:c5:78:5c:
         60:79:42:69:48:5c:c8:43:10:9c:c5:48:b9:9b:a9:ee:64:c5:
         1a:ac:fc:62:9c:f0:ba:97:e4:4c:5a:93:f9:9e:2e:1f:d2:b4:
         f8:08:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:45:55 2024 by rpki-client on console-ams.rpki-client.org