Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.mft
File:                     6oiYJZNmVznbsaYaaiDlbwviX7c.mft (raw, json)
Hash identifier:          +/N5XoKTOMo5izaK/seQgtcrT/jtM7xmse6LyCsR/9Y=
Subject key identifier:   78:4D:33:95:A9:7F:5C:DB:93:5C:28:DC:1A:01:B4:B9:DD:05:28:82
Authority key identifier: EA:88:98:25:93:66:57:39:DB:B1:A6:1A:6A:20:E5:6F:0B:E2:5F:B7
Certificate issuer:       /CN=ea88982593665739dbb1a61a6a20e56f0be25fb7
Certificate serial:       018F41C4850B71F6C88C7535B4399E09C38C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oiYJZNmVznbsaYaaiDlbwviX7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.mft
Manifest number:          1154
Signing time:             Sat 04 May 2024 04:02:29 +0000
Manifest this update:     Sat 04 May 2024 04:02:29 +0000
Manifest next update:     Sun 05 May 2024 04:02:29 +0000
Files and hashes:         1: 5AsXbjN_hMsMqzgYf-VssENDos8.roa (hash: 4OAw4OV63HD12Oaoqr5E/RSG+2gtFtO/2Wprrr4Kf04=)
                          2: 6oiYJZNmVznbsaYaaiDlbwviX7c.crl (hash: a8AFY/PQnHWgj8jhIFhIpDbD9Gmw/0WlCwAIxbdn8TQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oiYJZNmVznbsaYaaiDlbwviX7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 04:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c4:85:0b:71:f6:c8:8c:75:35:b4:39:9e:09:c3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea88982593665739dbb1a61a6a20e56f0be25fb7
        Validity
            Not Before: May  4 04:02:29 2024 GMT
            Not After : May  5 04:02:29 2024 GMT
        Subject: CN=784d3395a97f5cdb935c28dc1a01b4b9dd052882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:35:ad:77:7d:cf:1e:e4:35:a0:eb:a1:26:
                    d5:27:28:d0:79:7f:4c:82:ec:52:ac:27:19:5f:6a:
                    40:8f:6c:25:39:93:be:fc:d3:25:b9:72:94:0c:15:
                    26:38:b8:5b:32:2f:de:be:78:21:2b:52:7b:67:82:
                    8c:05:15:de:00:e7:57:a5:9b:a7:12:50:02:09:61:
                    98:ad:06:13:e2:4b:0f:47:22:ed:c8:1b:4e:c8:b0:
                    bc:e0:71:d0:36:b0:c3:53:37:6f:cc:d6:ba:57:4e:
                    8d:16:3e:ed:49:dc:b0:0b:52:d4:21:a0:76:91:47:
                    dd:f9:4d:f4:af:1f:85:8f:9f:51:7f:04:44:43:39:
                    02:91:82:34:2c:ab:90:31:e8:76:85:e8:1d:81:49:
                    4d:16:5c:5e:31:a7:52:af:14:5b:48:e5:2d:46:e7:
                    dd:11:58:b8:7a:d0:f3:fc:cb:00:bd:51:3f:ac:0d:
                    82:9a:b1:eb:e0:d0:7c:fb:e5:cc:dd:b8:ce:e5:60:
                    c5:42:c9:92:3b:17:2a:87:6b:9f:a5:d9:c1:f8:6c:
                    8b:cb:67:1d:93:ef:1d:6b:39:af:eb:a1:25:21:72:
                    02:6d:e9:4a:12:f9:6d:16:4c:75:86:54:8a:57:f8:
                    7f:82:33:2b:96:93:47:15:cf:1f:d7:d1:61:14:b4:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4D:33:95:A9:7F:5C:DB:93:5C:28:DC:1A:01:B4:B9:DD:05:28:82
            X509v3 Authority Key Identifier:
                keyid:EA:88:98:25:93:66:57:39:DB:B1:A6:1A:6A:20:E5:6F:0B:E2:5F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oiYJZNmVznbsaYaaiDlbwviX7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:80:64:73:3b:3c:82:1f:3f:02:dc:c2:90:63:3e:80:99:9e:
         56:25:19:37:d9:5d:6a:6c:38:ed:05:c9:8e:3e:03:7c:25:ae:
         2d:0b:33:55:cb:98:cb:a1:9d:27:b9:b7:81:67:c0:0d:36:b3:
         c2:53:f9:76:1a:ad:3d:43:53:8a:bc:b3:2c:72:e1:8f:36:2b:
         9e:da:85:a0:a7:98:f1:bf:37:ca:23:88:d6:84:40:1f:43:04:
         36:a5:48:fc:d7:32:9d:3d:cf:cd:f9:87:37:53:fb:a8:12:01:
         0b:f7:a9:48:88:ca:ec:f8:64:1f:ea:5f:d1:71:1e:b4:05:6e:
         a1:f4:5c:7e:7f:fe:04:00:6f:03:65:9b:cf:c0:06:7f:3a:e1:
         86:30:7f:c3:89:88:6d:4f:28:55:03:65:76:54:04:a9:39:9e:
         87:00:3f:49:c9:d5:6a:49:72:e2:1c:d5:7a:44:78:33:15:55:
         2d:93:4d:95:99:ca:76:08:76:a3:0e:e0:27:52:18:cf:19:55:
         2b:60:f2:18:2f:c1:16:e0:c7:c0:88:02:18:ea:74:16:e9:7a:
         6a:4b:e3:ef:d2:68:f9:3e:fe:c3:53:86:b4:8f:6f:83:3e:06:
         7a:89:00:bf:cd:ad:f3:3c:8d:9a:2b:ba:6d:9b:f9:86:61:54:
         0b:d3:00:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:18:23 2024 by rpki-client on console-fra.rpki-client.org