Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
File:                     Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft (raw, json)
Hash identifier:          J5+YiXe+6xXnq2XqttVr/VakmpwxW+uPLZAqiz1fqE4=
Subject key identifier:   4A:EE:3A:72:3C:B1:BE:80:AD:31:6E:A9:99:80:09:7E:45:91:F6:4F
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Certificate issuer:       /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial:       018F8891C2E0A223991DC57AFE7957E3D6E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
Manifest number:          1188
Signing time:             Fri 17 May 2024 22:00:04 +0000
Manifest this update:     Fri 17 May 2024 22:00:04 +0000
Manifest next update:     Sat 18 May 2024 22:00:04 +0000
Files and hashes:         1: AirrtZULXSEUAduX9FV2RVHqzTE.roa (hash: LkJAf7f0Og3W3HP1oLL4r+1kULWevMdp3jI8raSgxUg=)
                          2: PhEGyYKmuFAoUARYyOVL7TVsl7A.roa (hash: /bo+pJOHylrhpeZmgnXGk46FmFesyPn3aQp/aYNPYRw=)
                          3: QbRQTfaYLYmN0DX0x6kawgyd_B0.roa (hash: X82ZtWRftbj4LkzDn2jTKQoVvUu94ZF9lagAirGdgkw=)
                          4: UrHAYdhmHUKdSn-0ZMqS6aop0UI.roa (hash: AdTTGoHNWcnh2+X3qdQFtyl/btsVsPR8WSSycArUQ2g=)
                          5: Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl (hash: wUfYgzyr3dYsBqmyVjjpQUKJyStYV4pAgddGt9yJ0D4=)
                          6: hqvma0CeTJ45ea_X-SICQbfpbo8.roa (hash: wstfGNkdmR/Hbz0Coj3w2o5zGiNn3d72J9FkS/Tuy9Y=)
                          7: l1NB1u-By_W9bAp0PygButNxK5s.roa (hash: zJz8sPO2qupuihmpxF7NR6MAZ3rkvlso2mgSeaSzpUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:c2:e0:a2:23:99:1d:c5:7a:fe:79:57:e3:d6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
        Validity
            Not Before: May 17 22:00:04 2024 GMT
            Not After : May 18 22:00:04 2024 GMT
        Subject: CN=4aee3a723cb1be80ad316ea99980097e4591f64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:4f:7b:c8:da:6a:33:c1:ca:1c:83:dc:a5:
                    45:5d:56:11:f0:8f:e2:8f:45:6a:2e:fc:7e:0d:f5:
                    31:32:0c:c6:85:3f:d4:ef:37:4d:76:61:7c:07:2d:
                    27:80:59:2c:79:b2:1b:6e:ce:4c:38:2b:fc:4d:e9:
                    6b:fd:ca:e4:f7:02:e7:d7:f1:b5:99:9b:ab:be:08:
                    a7:ba:04:7d:62:7e:38:fd:07:e9:01:bd:9a:af:9d:
                    33:69:84:d4:83:e4:03:2f:9d:61:74:21:55:fb:0e:
                    ba:42:cd:1c:b4:48:82:4d:84:27:13:87:61:19:fb:
                    1d:f1:b4:a6:2f:4e:97:5f:6e:c0:ea:db:6d:33:39:
                    55:bc:04:5f:29:ad:e1:fe:60:e2:2f:5c:b4:85:dd:
                    f0:94:24:c6:29:25:b9:71:38:19:7d:27:87:a6:25:
                    67:47:b4:3e:73:0b:ad:58:12:4d:70:a8:16:31:1f:
                    ac:f4:af:6e:a6:d3:79:bd:4c:fd:b1:f5:a0:e2:d5:
                    52:13:48:7b:45:b9:92:db:66:40:07:c1:a0:01:6b:
                    14:f4:ff:64:d9:13:01:fb:ea:41:d9:08:0d:e0:68:
                    86:11:fa:fd:8a:62:82:2c:02:db:e2:39:6f:c7:97:
                    cb:22:15:e0:cb:8f:30:f6:1f:20:e7:8f:ad:02:e0:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EE:3A:72:3C:B1:BE:80:AD:31:6E:A9:99:80:09:7E:45:91:F6:4F
            X509v3 Authority Key Identifier:
                keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e7:68:2a:39:b4:5f:93:91:08:07:8c:70:cf:70:bf:01:fa:
         2b:2a:88:20:52:0b:44:e2:ae:8c:30:e6:e2:c5:fe:d4:b4:a7:
         cd:f5:9f:31:72:f5:7e:20:1e:4e:96:a6:5b:a8:59:f8:2c:15:
         b0:0e:ae:2c:39:25:83:f0:00:87:2d:bb:ad:7a:a6:f2:6f:b1:
         98:83:08:07:a3:14:d1:a9:70:76:a5:68:bd:fa:a9:ce:ec:5f:
         31:51:f5:4b:d8:2d:57:72:31:65:74:c1:ce:82:ee:71:db:63:
         b5:20:8f:41:c7:44:d0:14:cb:cd:1c:84:12:e4:9f:5b:3f:22:
         85:b9:a9:d6:47:62:58:a5:12:ed:3e:b2:a7:ae:3a:d9:65:9f:
         a3:f5:99:17:32:83:38:6c:9f:43:b3:03:b2:c0:e7:94:fb:f2:
         94:a9:0d:d4:dd:54:0b:24:fc:97:f3:3d:7c:07:b1:db:2b:7b:
         2f:b8:ba:45:2a:8e:ee:8f:d4:42:32:c7:b4:a7:07:a5:a7:23:
         e1:87:7f:7d:e4:53:48:de:19:36:87:60:b6:8c:ed:4d:0f:c0:
         14:1d:e6:3d:0c:f5:2e:f4:90:d7:d4:99:bf:96:60:8d:8b:80:
         ce:8e:a4:a3:72:eb:1d:9b:38:35:e3:ac:00:1a:21:cb:79:78:
         1f:5a:95:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:11 2024 by rpki-client on console-fra.rpki-client.org