Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File:                     AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier:          OvTfKkFngXcK9gBDY1421ek8qJjZpG10W5z7wjNzeRY=
Subject key identifier:   F5:6A:8A:B7:BB:A6:CD:BE:7B:CC:F9:FB:E1:D1:49:47:81:A8:56:6D
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer:       /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial:       018F3CD3FAB1F5D59C918BDFCB248D0D7976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number:          0AD1
Signing time:             Fri 03 May 2024 05:01:16 +0000
Manifest this update:     Fri 03 May 2024 05:01:16 +0000
Manifest next update:     Sat 04 May 2024 05:01:16 +0000
Files and hashes:         1: 0B9IUJ5L1DoOZbWGXRJfdVXR-yk.roa (hash: Y7omVQ/8HfQpnEc3+ARwGFr8/zem+LycMfAAdVO/5UM=)
                          2: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: HZ/y/timEBrPqIwUw+7iMjZVX4SSjOrsQf00b3nv/cc=)
                          3: IrqHZbBAUeJQwnLa65aQaelevMk.roa (hash: e7ppJ5JykKL5nfnna34yyGWdOQLLl+XAXPFzsxVfWAM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:d3:fa:b1:f5:d5:9c:91:8b:df:cb:24:8d:0d:79:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
        Validity
            Not Before: May  3 05:01:16 2024 GMT
            Not After : May  4 05:01:16 2024 GMT
        Subject: CN=f56a8ab7bba6cdbe7bccf9fbe1d1494781a8566d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:c9:71:ac:db:49:9c:a2:1b:69:eb:fe:d3:
                    b1:77:9e:79:79:8b:38:50:60:af:23:f3:67:82:ec:
                    e0:b3:8a:da:48:f5:82:65:be:c6:9c:e8:ce:23:96:
                    44:0b:d9:a7:15:26:be:54:f0:b5:b5:15:07:50:f3:
                    c8:83:68:01:10:e9:38:9e:b9:cd:b6:b6:a5:9b:25:
                    bd:55:8d:29:a9:08:9c:f9:0d:16:a6:e9:58:4b:cd:
                    36:72:12:51:b2:65:db:08:e0:9f:3e:15:e8:10:b4:
                    28:73:5d:55:e3:f6:9a:37:34:35:43:4c:95:62:a1:
                    79:fe:50:5a:20:4a:76:bc:4b:c0:b0:98:48:fa:29:
                    78:df:d5:89:b1:62:c9:d4:c6:7a:2f:b9:cf:57:9c:
                    86:fb:4e:af:8d:df:12:13:d2:fd:00:34:cf:93:0b:
                    a4:a2:a7:99:40:86:a4:05:21:8d:2d:0b:29:90:9d:
                    34:21:a5:e4:5d:06:0b:cf:09:4e:14:a6:9b:d3:3f:
                    de:8e:4b:ea:8c:40:7a:16:39:da:8b:21:7b:76:38:
                    ef:f4:bd:b0:d7:3e:59:d5:65:e7:a1:96:e6:ad:8c:
                    49:dd:86:6f:9a:a1:6a:a8:56:99:a3:eb:45:e1:7f:
                    2e:12:90:91:88:80:9e:a2:1e:0b:36:c5:fc:61:48:
                    fa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:8A:B7:BB:A6:CD:BE:7B:CC:F9:FB:E1:D1:49:47:81:A8:56:6D
            X509v3 Authority Key Identifier:
                keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:23:81:8b:80:91:48:b1:76:dd:b4:48:94:ab:73:da:3e:
         39:e5:2c:3b:a5:5e:39:2e:63:70:61:82:d1:21:2b:25:14:98:
         9f:a3:f1:59:92:aa:1c:12:5d:22:b7:b6:19:47:75:b5:1f:8b:
         42:87:aa:11:00:51:98:2e:c7:89:b3:a3:5f:32:ae:3e:bc:a5:
         f9:dd:f1:17:19:04:90:3d:b1:50:cd:76:0e:fe:92:5b:5b:82:
         f0:f1:cb:d8:ec:c6:2a:b7:3a:ff:a6:30:b4:a5:32:7d:e5:5a:
         a9:34:61:3a:db:b0:4a:30:a8:96:68:fa:02:f4:60:88:eb:f8:
         fa:b4:fa:27:90:c0:4a:8c:57:65:16:6d:e1:1d:77:89:e4:70:
         da:4f:42:5f:9a:e9:b8:4a:56:3a:38:c1:3d:0d:f7:7a:72:17:
         f1:cd:63:e9:00:52:e7:57:54:e3:6d:62:b8:40:0d:b2:0f:f5:
         29:a3:71:62:b9:e4:5d:f2:d1:3d:11:5f:96:61:19:f0:6b:49:
         92:1e:fd:d8:fc:e9:9a:f3:de:32:8b:00:32:c0:65:28:8f:e4:
         45:bc:dd:14:17:e9:79:c4:84:c9:6c:a6:9d:ae:0b:27:af:8d:
         6a:6b:30:9c:18:e5:14:24:fc:16:b7:72:5d:13:42:f9:bc:f4:
         dc:53:83:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:46:40 2024 by rpki-client on console-ams.rpki-client.org