Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File:                     1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier:          Hy4BAP0tUSgnDNdyq+8Fm/THRPjPrZHjKGgaVZzpglY=
Subject key identifier:   D0:C1:FC:88:64:9E:4D:8C:46:DC:4A:C4:04:2C:C7:85:C3:A5:FF:39
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer:       /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial:       018F396574B5573A89995713D621F7D5D25B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number:          057A
Signing time:             Thu 02 May 2024 13:01:41 +0000
Manifest this update:     Thu 02 May 2024 13:01:41 +0000
Manifest next update:     Fri 03 May 2024 13:01:41 +0000
Files and hashes:         1: 1-qVtmVYnNF0BwPXjKi6js7gjv-w.roa (hash: h7UIkapx2KkXXgz4T/N7Jo9EUiFbiYHRjmO+XUt8pzg=)
                          2: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: krJe0dyjxVyTZHq+jpa6nD29/iJ78E1JG4zeYjrB2bc=)
                          3: xv778_GlYWrAdM69KSAIyeDu4-g.roa (hash: +c9EuVidLFoJa0eWqvXPHtB9a4uKt4XJ5ndnaB9AzLk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:65:74:b5:57:3a:89:99:57:13:d6:21:f7:d5:d2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
        Validity
            Not Before: May  2 13:01:41 2024 GMT
            Not After : May  3 13:01:41 2024 GMT
        Subject: CN=d0c1fc88649e4d8c46dc4ac4042cc785c3a5ff39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:de:5b:cc:ab:da:bc:0a:a0:d8:33:2f:95:
                    f5:a0:49:92:34:3e:c9:af:62:7a:fe:b7:63:15:c0:
                    76:44:62:84:93:d1:af:2e:41:3c:e7:78:4e:6c:32:
                    3c:42:cb:21:1d:2e:5b:65:37:0f:1f:28:9b:e9:7a:
                    d6:7c:9e:fd:95:f2:f9:09:a8:d3:a3:15:b3:8b:1a:
                    4a:72:6e:e6:07:b3:c3:6a:9f:5b:db:86:49:35:9f:
                    72:2e:90:0f:03:48:64:a8:96:5b:ea:82:af:21:9c:
                    19:f9:ea:f9:f8:fb:69:09:26:fe:0c:83:bd:09:98:
                    6a:8d:c0:6d:bb:27:2e:40:74:b8:7f:75:ea:27:f5:
                    49:01:a9:d6:8b:5e:85:a3:41:be:fc:72:72:bb:de:
                    d1:b9:9b:b4:a4:65:3b:79:e2:74:e7:8b:d2:0a:df:
                    28:0a:f3:fa:57:17:b3:a2:05:7f:8a:ef:a2:c1:ae:
                    6d:cf:66:a8:71:d5:e6:3f:6f:32:86:a1:57:90:2c:
                    52:29:bb:76:a3:81:79:bd:79:26:b7:fe:c4:e8:de:
                    15:80:0a:e4:30:0b:74:2b:be:15:e8:ed:e5:b2:59:
                    e8:b1:47:94:ba:d5:c0:db:8c:06:b5:b0:60:38:68:
                    0c:e4:af:dd:b4:a9:95:5f:9a:79:3a:97:e2:97:d0:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:FC:88:64:9E:4D:8C:46:DC:4A:C4:04:2C:C7:85:C3:A5:FF:39
            X509v3 Authority Key Identifier:
                keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:47:d8:a3:7b:f3:82:d5:76:36:e9:de:c6:9e:fb:89:df:28:
         63:98:6f:cb:ce:47:70:d4:79:14:0e:f8:cd:a4:f0:d3:fc:7e:
         e1:3b:47:43:c5:58:b1:ff:58:9c:c4:53:9f:f9:5f:bd:c7:8f:
         8a:3a:c7:22:f5:22:03:ac:a9:7b:58:b1:82:d3:2d:05:4f:a0:
         2c:e5:5f:66:de:9d:18:b6:59:c6:c3:03:74:99:e0:cd:34:fd:
         62:24:87:86:ec:4d:76:70:fd:09:df:83:4a:b3:3b:64:cd:dc:
         62:8c:b9:6c:e8:fc:ce:ad:67:24:24:6c:d1:3c:86:2a:18:c3:
         c7:16:c6:47:f3:dc:a7:60:81:89:41:14:b4:de:95:b4:45:40:
         77:1b:14:64:c0:34:5e:13:c8:40:5b:5f:19:18:7f:99:d2:8b:
         01:e7:2f:91:ed:36:7c:5b:11:ff:3b:35:c8:06:e5:2d:b6:5e:
         b3:38:2b:54:a3:09:5a:4a:b7:6f:17:ac:4a:62:8c:05:10:79:
         01:9a:31:3f:68:b7:21:55:19:82:de:d4:e5:6e:53:ff:50:1f:
         89:d2:93:c1:fc:43:a7:e6:32:83:1b:de:98:01:42:fc:d0:26:
         78:d1:68:4a:05:7a:64:e3:d2:c2:91:ac:25:b0:36:48:1d:1f:
         07:cd:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:03:31 2024 by rpki-client on console-ams.rpki-client.org