Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
File:                     pF3taOImAyG8o56EZbScJdWKVuY.mft (raw, json)
Hash identifier:          TgolupEyWg6WIiNamgrbWRNMKYegTFvPd2lpEzIj1W4=
Subject key identifier:   C7:BE:52:2D:47:71:6A:C4:4C:5E:B3:36:39:DE:87:8D:22:DF:69:B1
Authority key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Certificate issuer:       /CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Certificate serial:       018F64880DDFF3E8BBE39AE32B0ECE5A6565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
Manifest number:          08DF
Signing time:             Fri 10 May 2024 22:03:09 +0000
Manifest this update:     Fri 10 May 2024 22:03:09 +0000
Manifest next update:     Sat 11 May 2024 22:03:09 +0000
Files and hashes:         1: 9vHrqQ9e6Tk0PoHoqRwnWYOs6TQ.roa (hash: Rtagawwq1eAQVgDt0Tz4oz4Q1TjQ01SF2sdkaVR8AtM=)
                          2: DqQLTGlYPqP4PbcWT9xn9ttyRhQ.roa (hash: 62EApHSCW/VajssDqzexu4Amaw2ffAl20HJf9/ETHkQ=)
                          3: jX7UTDcWPV66DrTelOBJVcoyOp8.roa (hash: ZJAnzxoEc86PcWxo0bZXyNAURKDOZOu4LKhVeql4Zzs=)
                          4: pF3taOImAyG8o56EZbScJdWKVuY.crl (hash: T/QXMg3kv2j6aLoNaeCqyZOWVE7V7UeBLhMP9vImvEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 22:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:64:88:0d:df:f3:e8:bb:e3:9a:e3:2b:0e:ce:5a:65:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
        Validity
            Not Before: May 10 22:03:09 2024 GMT
            Not After : May 11 22:03:09 2024 GMT
        Subject: CN=c7be522d47716ac44c5eb33639de878d22df69b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:8d:23:9d:f7:23:e5:ae:1f:1d:7c:a8:e7:
                    44:89:7b:93:b7:ce:cb:ff:70:62:66:2f:5a:a3:5d:
                    e7:d1:1b:be:70:d9:46:46:19:f0:8a:2b:cf:e6:64:
                    0d:7f:7e:57:22:71:77:bf:98:04:87:b0:55:09:99:
                    51:d0:39:d6:2d:bc:92:cc:00:81:8d:08:a5:04:89:
                    ff:16:8b:5f:b9:9b:b5:2c:2f:88:ab:05:ee:6b:b0:
                    03:c0:37:63:23:16:1a:45:ce:51:7a:fc:e4:e0:28:
                    12:97:64:27:4d:0d:bd:c4:87:db:60:d8:ee:55:68:
                    82:be:31:13:df:83:e5:57:4e:d4:99:22:ac:a5:00:
                    a2:13:f3:f4:7b:33:fe:f5:da:55:e6:02:a5:b9:5c:
                    e4:28:5a:f7:ce:98:3f:d3:48:f5:d5:f3:0c:c6:78:
                    68:8b:f6:50:e6:cc:fb:01:54:97:8e:7a:af:d8:11:
                    33:18:d2:2e:7d:34:8f:91:63:29:42:f7:b7:35:a2:
                    b4:f9:fc:37:d0:24:a2:2d:eb:d1:60:72:7a:c3:56:
                    9a:65:ef:1c:6d:23:f7:1a:29:12:59:64:6a:4a:11:
                    7d:3e:0a:48:70:06:3e:68:33:96:86:d0:19:f6:a6:
                    b4:ec:33:16:58:14:51:a7:c5:ae:74:72:02:ec:0e:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BE:52:2D:47:71:6A:C4:4C:5E:B3:36:39:DE:87:8D:22:DF:69:B1
            X509v3 Authority Key Identifier:
                keyid:A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:3a:bc:b8:6d:b1:3f:86:94:50:c7:6a:b6:ad:a7:d8:9b:
         dc:62:61:96:09:52:05:b3:f1:25:d7:f0:58:5a:e8:26:86:7d:
         4d:96:1d:d3:02:bc:e5:11:9d:50:82:be:ec:eb:0b:a2:7c:c7:
         f8:32:27:12:f7:21:00:6c:22:50:10:b9:50:e2:06:30:38:a8:
         96:2b:d7:b5:cb:13:bb:dc:e1:5c:e0:63:5f:4e:4a:d6:47:ee:
         05:59:98:27:ff:18:81:21:fb:60:e2:96:8f:82:71:24:83:ed:
         83:29:18:ae:61:c9:c0:e3:26:99:1e:0d:63:ac:3d:05:6a:ca:
         20:0a:f1:14:16:d7:8f:96:8b:df:16:c1:06:0c:ce:06:ae:13:
         67:7d:5b:42:6a:ad:ba:98:23:08:47:88:12:14:7c:c3:41:49:
         fd:94:1d:30:67:69:77:ba:50:2a:da:f0:31:4d:42:dd:e3:8c:
         e0:04:27:a4:16:a8:34:b4:96:e0:db:e7:54:99:a4:2d:ce:0f:
         29:dc:e7:80:a7:aa:15:a6:41:40:ad:22:20:51:64:f3:52:9e:
         85:ef:36:af:9b:f5:ca:95:d4:4d:d2:f1:cd:28:9f:98:2c:c1:
         27:15:30:ca:17:5e:fe:42:87:ad:2a:b3:0b:57:b7:3f:ce:10:
         d0:29:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 06:12:33 2024 by rpki-client on console-ams.rpki-client.org