Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File:                     GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier:          +H/ZPlrszGZBhA5ad0IQYTsv76lJBfGliBbhwJNNdvM=
Subject key identifier:   1D:3A:FE:56:A8:66:DA:E1:9D:7C:DE:CB:49:8B:F0:25:E0:DE:9A:C2
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer:       /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial:       018F49EAC4BCFC70C37BE1AECD77D96DF9B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 18:01:13 +0000
Manifest this update:     Sun 05 May 2024 18:01:13 +0000
Manifest next update:     Mon 06 May 2024 18:01:13 +0000
Files and hashes:         1: 3hXUeytvIahEtQdfexfghv-Wl1Q.roa (hash: zW7VA5I747pahWPM8QlOx6sCqAVvfGv6kc2C+bCKgWk=)
                          2: DTcgUy_w0zMWIWaSss7TTWzmpoo.roa (hash: 4W+IFNRbwozo1+KNvZpvwTxS64CVgiHwyrEaPcdCdQc=)
                          3: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: 7ScYVOPM+DuyqOGSQCCMKpNq60JWkhLDkQIblF+LIxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:49:ea:c4:bc:fc:70:c3:7b:e1:ae:cd:77:d9:6d:f9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
        Validity
            Not Before: May  5 18:01:13 2024 GMT
            Not After : May  6 18:01:13 2024 GMT
        Subject: CN=1d3afe56a866dae19d7cdecb498bf025e0de9ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:2d:66:db:10:67:da:08:e5:59:8a:10:b2:
                    d9:87:fd:bb:8c:fd:fb:8f:f4:c2:01:37:40:e8:1f:
                    76:9d:64:d5:f1:5b:d2:81:5a:66:58:72:7f:25:ac:
                    23:61:fe:8d:e0:eb:87:9e:28:99:1b:8e:ab:13:3f:
                    2b:36:20:1d:17:bc:d7:10:9b:74:75:95:e5:8e:a9:
                    fa:61:79:a5:fe:36:ed:72:cd:72:1a:02:56:20:73:
                    3a:9e:48:06:49:34:98:e0:fa:ab:48:60:17:18:d9:
                    e7:42:79:14:39:dc:87:30:08:aa:e2:53:5d:e8:cd:
                    12:5b:a7:75:e0:d0:59:22:6a:c1:92:81:cf:0c:82:
                    b8:6e:c8:31:fd:3a:b6:17:63:0d:0b:ec:7c:7f:87:
                    02:de:61:e6:2f:ef:ff:86:7c:14:80:13:e9:ca:04:
                    05:fc:32:9b:a3:5d:8e:46:8f:37:09:6d:90:82:d3:
                    b8:78:29:8b:8a:e6:15:ea:46:f6:f8:e4:8f:3e:45:
                    3b:a6:69:b6:e2:d8:e5:3a:43:c0:ac:1b:12:70:ea:
                    85:f7:af:1a:f1:c0:16:f7:41:e2:fc:45:7d:7c:85:
                    e1:aa:5d:d5:21:3c:b7:4a:7f:4b:2a:a1:c0:91:5d:
                    95:52:3c:cb:e7:96:ed:2d:0f:36:18:9f:7b:46:b5:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:FE:56:A8:66:DA:E1:9D:7C:DE:CB:49:8B:F0:25:E0:DE:9A:C2
            X509v3 Authority Key Identifier:
                keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3d:dc:a5:3b:96:e5:3e:2b:ee:e1:53:e8:b3:90:d4:0a:9d:
         61:a1:37:8b:64:c4:79:cf:ce:ab:b1:1f:c3:92:56:55:46:ad:
         ed:e3:c9:ea:cd:09:c3:1c:1b:97:7b:c5:67:2f:59:ab:43:36:
         0c:14:c5:c4:fb:8b:39:94:a6:a1:f5:69:7a:03:bd:36:c8:85:
         ae:7e:04:b0:a0:56:d2:8c:16:2f:c6:eb:b2:7f:a6:a3:0e:6e:
         83:fe:54:b9:c5:80:0f:d5:6b:f6:44:2b:1f:85:4e:ce:42:ba:
         78:64:ab:24:3d:ac:51:e2:85:a8:77:4b:17:77:37:a4:ea:a3:
         b9:e6:47:db:9d:8f:0b:e8:1b:4f:f6:44:ed:96:31:41:82:46:
         fe:28:4a:2d:0e:c2:37:fc:f2:5a:9e:86:f8:4f:af:cc:e3:dd:
         d5:4b:c5:8c:54:53:f0:db:0e:51:7b:8f:f8:d9:6c:c6:31:6c:
         ff:34:7e:7f:2b:a8:be:47:dd:a7:4d:82:3a:ae:c8:8b:e7:10:
         97:2e:ef:7a:26:aa:2c:5f:f2:14:f3:e8:97:03:0f:2a:b9:f5:
         99:9f:17:55:1f:0d:fd:a5:be:7f:62:57:f8:c8:8c:03:11:f9:
         44:84:59:73:45:96:ac:61:ab:40:b5:a8:80:55:7f:d3:39:86:
         7b:69:80:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:39:17 2024 by rpki-client on console-ams.rpki-client.org