Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File:                     0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier:          LkRTBYuETEMJnHessFxyXUtFc5VgX+PyHOc56c7puRw=
Subject key identifier:   57:52:D9:03:70:B1:C6:F1:B0:6C:80:A6:2B:70:52:32:23:02:F4:36
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer:       /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial:       018F362DF6A121B85CB728A707B7972CF0FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number:          100E
Signing time:             Wed 01 May 2024 22:02:12 +0000
Manifest this update:     Wed 01 May 2024 22:02:12 +0000
Manifest next update:     Thu 02 May 2024 22:02:12 +0000
Files and hashes:         1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: HqFFzjDKfrgfRlkhhITH9XGv0wEaZ8nVNiYNSyMR6aY=)
                          2: ay-0c23rmD07Ft7dn5zNQ0ykupo.roa (hash: 2e0uumIkJkTqW6S6HNzBC2GriF3+DmX/h8rOiK1Nh54=)
                          3: gjH-YiB1-xjjNC6JtKOUF7gFnVY.roa (hash: j+9eMPpUccCn9LT4TxoeDy7YodAbmby652vqOgA0m9c=)
                          4: h9k0jEUO1ZbEDnqJ19ca3BWb-8A.roa (hash: cUJu4ZBsOAi1kI+WiB8XIBOQi/eAtja9vOahiPiPyFM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2d:f6:a1:21:b8:5c:b7:28:a7:07:b7:97:2c:f0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
        Validity
            Not Before: May  1 22:02:12 2024 GMT
            Not After : May  2 22:02:12 2024 GMT
        Subject: CN=5752d90370b1c6f1b06c80a62b7052322302f436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:21:f4:b3:cb:03:df:60:fc:d9:e3:43:aa:c5:
                    5c:1a:36:51:6a:c6:30:0c:ba:ad:4f:dc:20:cc:dc:
                    7d:0d:ec:76:3c:2d:49:78:7a:03:44:11:e8:32:19:
                    8d:ea:e9:f9:63:45:01:05:03:17:22:aa:f0:aa:0a:
                    c6:14:c4:4b:c9:6a:0d:ca:63:47:58:77:12:48:6c:
                    fc:ee:66:68:fd:3f:ab:93:0f:ab:ad:e7:ac:b5:cc:
                    5e:c8:cb:e5:9b:9d:5d:5a:bc:60:b7:18:dd:be:cd:
                    33:30:54:b9:f8:88:5b:42:2b:04:35:1d:56:9a:aa:
                    8d:fd:a9:85:0d:74:59:d3:72:3d:0c:eb:b6:59:36:
                    f7:1f:c2:91:f1:bc:42:f8:76:75:23:4a:1c:cd:35:
                    ab:36:a3:ef:a0:04:bf:c3:40:27:17:ec:8a:83:4a:
                    96:d8:60:d9:ed:13:89:15:e4:b2:78:3f:34:f8:31:
                    39:14:30:46:ee:7c:5f:22:7b:ad:75:28:e3:df:51:
                    70:b5:fd:8f:9e:e7:e9:55:a3:4c:32:69:7e:16:f0:
                    7b:ca:9f:fc:79:6f:17:39:b7:4b:6f:f7:46:78:82:
                    c5:e3:ea:47:db:ae:ef:07:5c:a0:a1:bc:0c:53:c0:
                    05:c4:d9:81:d7:9c:80:d1:5a:b8:9e:62:0e:dc:f4:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:52:D9:03:70:B1:C6:F1:B0:6C:80:A6:2B:70:52:32:23:02:F4:36
            X509v3 Authority Key Identifier:
                keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:22:a5:75:30:7a:91:73:f3:6e:90:96:4f:4b:62:91:d6:77:
         74:0c:8a:3c:b1:a4:83:c1:45:c8:bf:6b:46:ba:58:68:b3:dc:
         fc:6b:27:d4:35:3a:2c:75:fc:1e:7a:91:44:de:b2:26:79:76:
         ab:ee:3e:e8:8c:bd:19:6e:a8:9d:19:b5:f6:39:da:45:ad:84:
         c7:de:70:a9:c4:76:24:2c:03:71:c7:12:42:d3:68:de:29:94:
         34:7a:77:a9:3c:41:7e:30:37:37:14:fd:4a:e0:12:7c:21:71:
         f9:7a:bb:91:55:09:0a:41:92:23:de:5c:30:34:5d:12:df:87:
         3b:92:1e:2c:0f:b4:f6:61:13:21:10:fc:aa:e2:86:d1:8d:91:
         92:aa:78:63:a0:49:21:8e:e6:fd:03:cb:f9:bd:78:24:8c:aa:
         19:f7:e6:bd:10:04:05:31:ed:f4:44:52:de:93:de:c3:c7:bb:
         e7:46:22:47:55:96:04:5e:47:62:e5:30:67:db:95:38:8e:5d:
         0a:58:1e:37:95:02:82:d3:c5:80:f1:67:3a:51:f2:70:ab:f2:
         bd:32:d9:55:b5:b4:9e:8b:37:47:ad:8f:79:02:ee:a8:88:05:
         4b:bc:e6:d4:ae:3b:51:16:52:49:f7:fd:7f:6e:95:6e:95:7d:
         db:4d:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:16:51 2024 by rpki-client on console-ams.rpki-client.org