Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
File:                     PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json)
Hash identifier:          aKE28M9qDR1MJ01SEXZJYwwZDpJcecBzDM0Vzx6f7UY=
Subject key identifier:   BE:DD:60:56:8B:3A:62:DB:8D:5D:49:4C:D2:63:56:0E:92:2E:14:73
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Certificate issuer:       /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial:       018F5ADEE223CF8E503506F190AFA5B814EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
Manifest number:          1163
Signing time:             Thu 09 May 2024 01:01:47 +0000
Manifest this update:     Thu 09 May 2024 01:01:47 +0000
Manifest next update:     Fri 10 May 2024 01:01:47 +0000
Files and hashes:         1: AH8AgRASXNYcKLVHRA08ovFKA7s.roa (hash: e8e9mDa+IC4KnIQfNfHdZMTOE4cPiBn9KU83IVPOTWY=)
                          2: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: nwzrMqUlWJIkN3ujY0hwR5KN0vwjzg36xhEfndKJ4io=)
                          3: Q086Pl3LLjwLxERx9wIA7Kg3fW0.roa (hash: LOIXS70WSR6OyfZ2hf6mn24mM1A5zQAlZmt5gYVMWxQ=)
                          4: bGYXMPsCKvMeMNwk1LwdH3awgsY.roa (hash: VnvBHlu5mayO0Kb+NWQ5br5pgdNIEGL5g7FrJw6J2Eo=)
                          5: c11G98pS8ILaEOF2_3L9HAeUf9I.roa (hash: uRYcMVIfJAEYXhtPlexM5i5ThRxiANNNj091XwthG9g=)
                          6: d-J-JzSjDy0d7b0jm7GYnmpfl5I.roa (hash: 6BsjdmSa5vwVYH8KiVWTftshi6Gm4LwHlHsjJQZL0ic=)
                          7: ezsTZJU_Ao2w2ZfgsEVvJmyUskU.roa (hash: /KKFnugMBviQyzI1UYW74Zy4zTXGvKYVmWfWoO95oOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 01:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:de:e2:23:cf:8e:50:35:06:f1:90:af:a5:b8:14:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
        Validity
            Not Before: May  9 01:01:47 2024 GMT
            Not After : May 10 01:01:47 2024 GMT
        Subject: CN=bedd60568b3a62db8d5d494cd263560e922e1473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:0f:b9:a5:60:a2:e2:9d:de:b2:77:56:c0:
                    1e:dd:93:8e:6f:5e:84:fd:77:95:58:10:f7:17:ee:
                    f2:7d:b5:4c:ab:e9:4d:87:fb:ce:6d:29:1b:04:76:
                    b8:7b:d4:dc:8e:52:2c:cb:60:1b:75:80:c4:ed:26:
                    e6:b7:ec:a9:3a:20:b2:01:d2:b3:ce:21:fe:e1:22:
                    44:8e:d8:17:5d:fa:51:ec:e7:a3:09:a1:c8:d0:1a:
                    6c:18:7a:61:92:68:15:dc:45:29:2c:45:ad:69:43:
                    35:02:67:2e:dd:3e:b8:85:fe:b5:87:f7:84:c3:27:
                    95:7e:b1:d7:ed:66:27:1b:6b:ca:3a:e3:7b:c5:c5:
                    0f:9c:71:99:ba:60:66:6d:c4:79:46:03:70:e5:ff:
                    fa:38:91:bd:25:ec:07:11:e2:25:4e:37:8c:30:49:
                    35:48:23:1c:3e:e2:94:ed:29:9f:be:32:c6:e6:e0:
                    de:ac:41:2d:c9:b0:99:7d:fb:6f:10:be:9f:f1:16:
                    5e:73:a5:ed:14:cf:7b:52:d8:dc:b3:5d:54:b8:bd:
                    99:b9:f4:eb:33:80:76:31:2f:47:dd:39:13:1e:7f:
                    e2:00:a3:35:a2:33:00:42:9f:ab:d2:6a:78:fc:23:
                    91:3f:6d:ab:d2:c8:54:c6:5c:1d:8a:09:b2:1b:6c:
                    8c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DD:60:56:8B:3A:62:DB:8D:5D:49:4C:D2:63:56:0E:92:2E:14:73
            X509v3 Authority Key Identifier:
                keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:5d:f3:cf:7a:ed:0b:7c:18:17:b0:0a:cc:13:de:b4:f3:
         95:db:d4:37:5d:b0:45:82:6a:19:ca:d2:3f:bf:6b:ac:fd:7e:
         c8:4b:0e:25:78:61:04:e9:9c:aa:fb:0c:7d:c6:ce:7a:29:84:
         8e:17:05:a5:ed:f7:a9:d5:58:de:3b:a5:ab:d0:b3:20:a5:21:
         0c:f2:75:5c:5f:f8:dc:d5:90:4d:f2:89:0f:6d:95:e3:32:7c:
         ac:48:f4:52:8e:eb:d3:7a:5d:84:65:5e:db:0d:92:79:8d:ad:
         d1:86:6c:eb:6f:3b:79:78:02:e5:40:52:e1:31:4b:7b:3c:37:
         f3:a6:d5:a5:7d:d9:58:be:13:38:38:10:b5:86:bc:fb:db:e0:
         65:13:d8:ae:e4:06:00:5d:c5:4f:e4:46:a7:26:60:b1:4b:45:
         13:4f:2b:ad:1a:33:bb:49:e9:35:c3:c1:72:d8:61:dc:93:fc:
         af:97:e5:b5:0e:79:23:4f:c8:99:ea:f6:57:58:cc:3f:46:18:
         23:45:7b:38:f7:52:b8:09:cb:87:db:e0:72:49:7b:2b:41:24:
         18:dd:f9:45:43:ed:1f:f7:30:94:6a:4a:6b:d0:46:33:50:d2:
         5c:a0:e9:2c:2d:87:50:53:95:19:26:93:48:3c:57:3f:bb:b4:
         41:87:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:42:00 2024 by rpki-client on console-ams.rpki-client.org