Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File:                     gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier:          m0ZIq6LjR/oeB+kWDN5QDdyouZieb/RHqon/snAs8SA=
Subject key identifier:   27:54:F3:A1:BD:1D:86:BE:79:CC:9B:1E:AD:07:F6:B8:3D:5B:26:F3
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer:       /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial:       018F866C9D23A7A8D249671C5B85E31F40FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 12:00:16 +0000
Manifest this update:     Fri 17 May 2024 12:00:16 +0000
Manifest next update:     Sat 18 May 2024 12:00:16 +0000
Files and hashes:         1: 8OVdKwOhY57XDykBQNaP8YRqnTo.roa (hash: aJZPkcUtR+5+AFBWVZ/HRKBt6nX25muP3CEUo9YNhF0=)
                          2: MohBGNucJoYbhlwsXxDBE5v3v_g.roa (hash: t+Z74MAyiDCOluBt8shtqxPj3GdkcfSHdvD6mAQxVr0=)
                          3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: xK8f/Vl/ocJcAEg8Zvb61cSUIlwZXhI3Th1P2VeLR+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:9d:23:a7:a8:d2:49:67:1c:5b:85:e3:1f:40:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
        Validity
            Not Before: May 17 12:00:16 2024 GMT
            Not After : May 18 12:00:16 2024 GMT
        Subject: CN=2754f3a1bd1d86be79cc9b1ead07f6b83d5b26f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:b7:aa:de:54:a4:89:ca:b6:a1:a5:94:00:
                    90:21:be:1a:36:3c:7c:ae:b1:59:40:0a:85:ee:44:
                    d5:84:e0:6e:3e:ea:d0:f6:30:ca:30:6e:fd:23:77:
                    91:3e:6c:2c:8d:3d:dd:ac:b5:f9:3d:83:f5:c1:ad:
                    f5:78:89:dd:8b:6c:f5:f2:51:5e:9b:8b:34:89:10:
                    0b:e9:37:7a:82:0a:c3:b4:de:04:d7:36:29:b4:0e:
                    ea:cd:05:3d:48:82:31:93:58:61:84:d4:29:68:ee:
                    a0:e6:fb:39:b9:84:6d:53:47:7e:53:72:dd:a0:a3:
                    a3:ed:c3:86:bb:b2:33:1c:78:6c:0e:a6:95:a1:f0:
                    e5:e4:a4:9d:67:f0:d0:68:a8:f0:1c:28:b7:96:5e:
                    fb:e6:98:1c:2f:df:81:c6:3e:03:b3:b6:c1:d5:8f:
                    ce:8a:9d:0e:66:0e:25:3a:67:f1:ad:dd:2d:ca:e2:
                    15:9c:57:0f:91:7c:58:fa:12:ae:b1:95:d2:37:46:
                    ed:85:d7:a5:b5:c3:cc:1c:83:bd:1f:0b:86:6c:6d:
                    eb:94:1b:79:04:d2:91:85:4f:07:cd:d5:b7:d6:bf:
                    eb:67:f0:60:c7:08:1d:37:c6:4c:39:83:54:f6:b9:
                    a4:12:72:b0:c4:bf:9a:9a:d0:91:c9:35:b8:5e:b6:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:54:F3:A1:BD:1D:86:BE:79:CC:9B:1E:AD:07:F6:B8:3D:5B:26:F3
            X509v3 Authority Key Identifier:
                keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:34:10:57:9d:c8:d2:b4:f7:70:b1:f6:62:60:23:4e:07:
         09:48:7c:b7:07:03:8f:ac:79:03:cf:e7:a0:9b:cd:1d:37:08:
         4b:63:b4:a1:f8:9f:38:6a:44:6a:d3:1f:48:7d:00:3b:0b:c6:
         87:05:ee:ea:54:b5:e3:fe:90:e4:87:31:68:37:cb:27:11:1b:
         66:17:af:44:71:60:a0:c5:59:42:9a:da:8f:e4:22:77:aa:75:
         1b:df:33:5c:d2:99:aa:ac:2d:9d:0d:5b:1e:7a:8a:4a:e8:19:
         9b:6c:f9:8f:e7:0b:ae:89:e1:f3:67:c8:45:d1:58:6e:52:32:
         18:b5:8c:85:d9:2f:01:85:2e:74:be:92:92:22:d3:c3:8d:15:
         f1:fe:ac:e5:03:1f:2f:5d:7d:03:4a:c8:9a:aa:41:58:c2:62:
         9e:dd:7b:15:bd:5a:31:b7:ad:82:b9:66:21:71:16:8e:27:51:
         ff:70:6b:df:c6:4d:15:10:ef:e0:a2:72:98:ec:4d:30:82:ef:
         97:87:e8:2a:d5:bf:8b:7e:49:89:62:37:a4:56:2b:9d:a4:d7:
         3a:e2:5c:bc:27:11:53:c5:10:07:6f:00:ae:b0:bb:1a:58:dc:
         7a:8f:14:a9:61:94:db:9e:1f:25:2f:fc:18:12:d1:47:54:c2:
         08:69:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:47:03 2024 by rpki-client on console-fra.rpki-client.org