Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File:                     XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier:          Ucf8UembOQkNV6j+qFK//YZ8RWTFn8hG3BPf4UJ/CNg=
Subject key identifier:   9B:AE:3F:B7:FA:E9:2B:0A:2E:76:85:7E:25:5A:3E:13:1A:BF:CF:01
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer:       /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial:       018F5ADF3E7131AB1A79EDF4AE6E98DB3706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number:          1164
Signing time:             Thu 09 May 2024 01:02:10 +0000
Manifest this update:     Thu 09 May 2024 01:02:10 +0000
Manifest next update:     Fri 10 May 2024 01:02:10 +0000
Files and hashes:         1: 6EgqkZi8qb3OrE_KatzUDRXDERY.roa (hash: /DKWxAGTVy8qIasX07gtHjL/ijmd5q4mP+6zO7AvQsY=)
                          2: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: ylt/yGqTD3cKmEveXdFOVLDJ952M3IkjalOZJzBQak4=)
                          3: fRhaL588aGbUVfpiHLJUiVfi1Nc.roa (hash: hDFdlx5f5Y21S60sT46E61l5rNxvxeYDKF0Eak7rntI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 01:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:df:3e:71:31:ab:1a:79:ed:f4:ae:6e:98:db:37:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
        Validity
            Not Before: May  9 01:02:10 2024 GMT
            Not After : May 10 01:02:10 2024 GMT
        Subject: CN=9bae3fb7fae92b0a2e76857e255a3e131abfcf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:4c:e7:20:9d:a4:38:62:53:64:05:83:96:
                    31:a2:f1:d7:1f:dd:4d:54:d1:02:50:2f:d7:30:57:
                    39:90:f3:d4:9c:89:5f:a6:c3:73:06:63:d1:d0:16:
                    09:49:0d:76:b9:c7:02:ff:c2:f2:a3:50:a4:1a:10:
                    53:e5:92:fd:2d:b8:a4:11:ba:08:7c:3e:49:3a:96:
                    9a:d0:8e:0e:59:a3:cd:b7:6b:fb:7c:f6:5a:ba:03:
                    e7:91:9b:5b:b7:e2:c5:84:48:e7:fc:77:2f:56:5a:
                    39:34:6c:33:6e:a0:12:ff:41:d7:7a:41:46:0f:cf:
                    cb:96:b9:8b:8b:4d:02:ab:ea:a9:14:10:ef:dd:db:
                    f5:43:5e:cb:22:64:c1:cb:55:fa:3a:90:d9:99:f5:
                    4c:32:1e:0e:90:ab:40:c4:c6:74:97:eb:33:44:21:
                    f5:83:e5:94:8f:f3:db:8a:58:44:02:72:d7:0b:a2:
                    08:12:00:df:8b:e4:5b:5d:05:9d:f4:fa:05:ee:02:
                    29:7b:01:f4:88:db:89:e8:18:14:9c:58:45:31:cd:
                    d5:99:ac:14:e4:55:72:6c:62:50:a2:03:e8:14:08:
                    7c:22:5f:6f:be:ba:09:da:0c:d1:20:ce:81:f2:15:
                    a7:ce:fc:90:dd:30:0f:1e:57:55:03:4c:74:f1:bc:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AE:3F:B7:FA:E9:2B:0A:2E:76:85:7E:25:5A:3E:13:1A:BF:CF:01
            X509v3 Authority Key Identifier:
                keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c4:50:6f:af:ef:be:2e:d3:ed:ef:a0:22:d7:d6:93:0b:f1:
         69:af:23:d7:98:76:46:06:6e:6d:5c:94:08:de:d2:b5:b2:cd:
         3a:ea:22:4c:e4:9a:0b:f4:4e:44:b3:d0:db:5c:76:9b:7a:41:
         28:35:54:65:f6:80:3b:b2:19:ba:da:09:ea:cc:b7:7c:9f:24:
         69:f3:d3:39:fb:12:c9:3f:ce:de:fa:8a:e6:4f:0e:a3:c7:28:
         b7:3a:31:d2:3c:d1:55:49:f1:59:e7:0e:75:dc:4b:a6:b8:b3:
         ff:ab:46:cd:fb:e0:85:aa:32:94:69:95:8f:9e:33:2c:a0:ce:
         05:9f:58:b9:e1:0a:46:46:35:23:14:1c:4e:a6:cf:bd:b5:d1:
         6c:6d:6b:b8:a3:07:b0:02:49:5f:cb:47:45:c8:9e:a0:8a:15:
         0d:c1:59:e0:e5:f4:a5:5d:29:38:db:5e:3f:a0:af:a5:e4:d5:
         b2:96:d0:2b:a2:c7:6a:34:ba:21:0e:e0:3a:6f:93:23:70:6f:
         28:c7:79:94:2b:29:f8:1f:65:f9:93:47:3f:4e:b6:a9:38:74:
         e4:f5:29:7e:07:43:cf:c4:b2:43:78:cf:e0:f5:ba:54:0d:dc:
         c6:ba:7f:96:b6:be:3f:78:82:69:d5:38:80:86:3b:c6:8c:72:
         c4:a6:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 05:46:26 2024 by rpki-client on console-fra.rpki-client.org