Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File:                     EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier:          qkd7Ixd9r44eNYNlaWiU+ZZ/OyVjCwsRN4AxUjSlS4k=
Subject key identifier:   1A:DF:C6:D7:1E:76:8A:5F:24:82:5D:3D:71:3C:57:F8:8B:7B:A7:94
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       018F3C9CD2B3A974C3579CFB2E3BC7D6B4BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number:          1156
Signing time:             Fri 03 May 2024 04:01:01 +0000
Manifest this update:     Fri 03 May 2024 04:01:01 +0000
Manifest next update:     Sat 04 May 2024 04:01:01 +0000
Files and hashes:         1: 5xJPZXb9xCXHeoFAmDJeCpHl_T8.roa (hash: uUKXRutGqyZYRN1sqGv9LPyNudxMYpPE9yn0+BsLhL8=)
                          2: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: xWTpNkgDFDspHwisz++shSnSXerQWcemvZhu/F5p4l0=)
                          3: b4LB5YpY236VmMRn3fqEo3vnpzM.roa (hash: mQ5d/CyWxuBmLGxb/xGBvkGIrSOz2OpN7WZRItX2aIE=)
                          4: dC_X2DmdtdtEqpAbfeARboyz2fM.roa (hash: rTd82I/nucWvVR7qb7UVa7DhIFIxsHrdEuF+De1x04s=)
                          5: iPlA1N0X0bpJ-bjErFxRg0l2obo.roa (hash: 77bPPhxtpjaHieE2XroHZ3d1RnF+MvOZDGy5dBXYcH0=)
                          6: nHSvW-jc6BMeOVWp_LAOwUGRG4k.roa (hash: WIKZLwqUaowrJSUc5bKqllUzouINYdWh0cBNLK/Spkg=)
                          7: nuv_xO2fUI7ouRwn8qjlIQlwGBE.roa (hash: GUUp8iER93VvBlFzsyfENqC6foR+BmpnDG9bPgxvJu4=)
                          8: rqylFlUJd9cRuvK_H0q4fFlCngA.roa (hash: nUJDRGzDhzSazHwEJv1AYUALdzJGTOIJL7R27pXkptw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:9c:d2:b3:a9:74:c3:57:9c:fb:2e:3b:c7:d6:b4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: May  3 04:01:01 2024 GMT
            Not After : May  4 04:01:01 2024 GMT
        Subject: CN=1adfc6d71e768a5f24825d3d713c57f88b7ba794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a0:5e:f5:f7:a1:75:08:18:f4:b8:27:87:ee:
                    3e:49:db:af:d0:79:34:54:bb:4c:f7:65:99:85:98:
                    2f:e3:21:3c:4e:f4:bf:53:45:0e:12:10:4b:ab:24:
                    a2:76:11:52:c9:59:ee:63:a4:d3:fc:9e:d5:da:35:
                    c9:50:7b:f6:e8:44:0e:92:81:94:ea:a9:4a:79:5d:
                    3a:06:72:91:53:ae:fd:74:38:54:8c:f8:38:f1:e7:
                    a1:84:ca:e2:8b:d3:d2:40:26:0a:3d:ee:71:e8:ed:
                    1b:4b:46:dd:c6:04:eb:8b:d1:e2:b4:db:cd:9b:e0:
                    27:9d:e2:58:8e:fe:72:83:b2:6e:fc:e1:4a:4b:5c:
                    5c:d4:e2:4c:3d:98:3c:02:c8:13:de:94:49:0a:68:
                    9a:0e:b8:57:0b:11:5e:30:35:fe:c4:7f:93:7d:96:
                    c2:c6:fa:3f:81:6e:35:1f:f9:77:a0:f0:5c:27:aa:
                    fa:2a:e3:90:39:50:ac:a6:de:1c:8d:32:96:da:6a:
                    b3:d9:fb:56:a9:71:39:0d:0e:e7:36:93:b3:06:08:
                    db:7a:ff:2f:8a:8d:43:9c:2d:ad:64:41:30:ab:be:
                    7a:ff:ee:b2:6c:07:83:03:2b:99:ac:20:62:b5:1f:
                    ee:cf:9c:d6:df:2f:04:33:06:36:a4:71:04:a6:26:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DF:C6:D7:1E:76:8A:5F:24:82:5D:3D:71:3C:57:F8:8B:7B:A7:94
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:f7:f2:df:93:40:d5:2f:81:d7:32:55:df:f1:70:d2:78:
         fd:d6:0a:53:9d:c4:c6:1a:01:37:aa:64:ed:91:88:c6:64:c6:
         fe:e0:b7:0b:6a:3d:8b:ce:40:6e:8e:2d:e7:e4:3c:cd:7b:21:
         4f:29:08:bb:59:a5:6f:cd:9f:1b:ac:ed:37:ef:1c:bf:a8:f2:
         d5:96:08:41:1a:0a:7d:eb:2c:ff:a8:53:35:e8:a2:ca:2d:f3:
         0c:69:ef:14:38:9e:44:bd:a4:1d:42:7a:5c:5d:38:06:d8:90:
         a9:e3:5a:80:8c:ca:c6:bb:0e:e0:d2:9a:da:ce:98:15:06:65:
         f2:6b:28:fa:7c:68:37:7d:73:db:0a:a7:cf:12:04:b3:1f:88:
         aa:f1:8b:cd:14:1d:9c:5d:37:9a:87:e9:bf:04:6e:e8:31:5d:
         63:94:85:6f:32:53:d6:db:51:1b:c5:28:b1:23:c2:2a:47:36:
         4d:34:7c:ec:05:af:03:aa:11:1a:4b:ff:e5:2c:c8:6b:f9:73:
         f9:8d:2a:a3:4b:36:b5:ba:a7:66:7c:61:0e:ba:d5:1b:46:13:
         1f:1b:d9:13:e9:d6:fa:d8:65:f9:e5:ed:84:be:1e:54:d3:d0:
         cc:eb:ae:c7:af:ad:92:2a:d8:47:b2:9c:de:f5:8d:b8:7c:a2:
         1a:28:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:52:57 2024 by rpki-client on console-ams.rpki-client.org