Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File:                     IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier:          pzvCs6FWqa9urwRBgdIXnVO04/P75zAVHdPiLKIbYBg=
Subject key identifier:   05:37:5D:33:C0:4A:BF:05:CC:94:63:74:33:02:CB:2F:25:0D:3A:BC
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer:       /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial:       018F5926B71629BAEDD2D431B963E91D5896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number:          0484
Signing time:             Wed 08 May 2024 17:01:00 +0000
Manifest this update:     Wed 08 May 2024 17:01:00 +0000
Manifest next update:     Thu 09 May 2024 17:01:00 +0000
Files and hashes:         1: 4tOKlP1T3bDrTqkAmVV6UQsvOIw.roa (hash: fbyIrovjz2LFUWdgFAe/c/Tjvv1l2c8mcyiOkk7SOcI=)
                          2: 7-2b6LTg2NhO6Ud0OC9r99bqsIs.roa (hash: ANw7yDP1/hr55Egk9BlaEki4TrpUVmaeYi0AGo70fK0=)
                          3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: pXTmb2xl7N+OvgJJnytveO7kjSEuKhqoPUMqMsm3ldY=)
                          4: Jm8VskJ4LJNZQ8QOwPD958E7d6w.roa (hash: eDctTKHz5As5GuoaduObkoU0knXo29+j2U2W6koVpPY=)
                          5: ku9ZZmOrkwWoOcsnmmUNDY8RlZQ.roa (hash: QPTgQtplxi6SCeez9icbnzTMeALf4M1ECkGqLCOzDQ8=)
                          6: umrrdDgmKLn7ngVsQ1-cE9eWkLg.roa (hash: u0DGWapdVwki01vtckAF5EchE6aFKJ9HZWFWe6ptSyM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:26:b7:16:29:ba:ed:d2:d4:31:b9:63:e9:1d:58:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
        Validity
            Not Before: May  8 17:01:00 2024 GMT
            Not After : May  9 17:01:00 2024 GMT
        Subject: CN=05375d33c04abf05cc9463743302cb2f250d3abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:a5:d2:9b:61:12:1a:4a:72:58:5a:99:91:
                    69:95:a8:a6:d3:db:92:07:42:db:55:4a:03:44:fc:
                    5e:be:2c:bc:2d:c2:ef:75:76:75:5e:56:0d:39:9c:
                    cf:3b:97:cc:38:3d:46:dc:7a:2d:a0:aa:a0:7c:11:
                    e1:89:a7:7c:a1:b2:9c:b0:eb:7d:48:11:4a:b5:de:
                    29:b4:08:c8:fd:f0:34:98:f8:e5:99:58:48:6a:ad:
                    89:6b:e0:42:c1:d0:0e:ba:7b:59:2b:71:88:4e:7d:
                    b4:04:63:a7:da:4a:fe:fa:aa:97:e2:f2:48:2d:75:
                    e9:26:1e:93:14:9a:39:4f:26:d3:bc:82:7c:28:e2:
                    b4:ce:ae:00:a1:79:4b:e4:96:ba:84:59:60:97:44:
                    67:3e:73:0c:05:8f:56:b3:1c:8c:d3:db:06:f3:a6:
                    c6:f6:0e:2d:52:2d:89:ab:5e:b9:f6:be:f1:96:a6:
                    1f:a7:f0:13:d5:a0:18:5e:2e:0b:86:d5:93:67:e0:
                    63:3d:33:69:03:e8:7b:00:83:e7:ab:7b:7f:b6:a4:
                    b1:d7:6a:8a:d1:51:6a:4c:9f:d6:45:aa:2e:61:79:
                    50:ef:87:a3:48:a5:ab:fd:1d:33:90:ef:20:c5:2a:
                    7c:72:4f:2a:3a:79:b6:16:87:84:f4:e2:98:0c:4e:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:37:5D:33:C0:4A:BF:05:CC:94:63:74:33:02:CB:2F:25:0D:3A:BC
            X509v3 Authority Key Identifier:
                keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:36:32:04:51:14:17:0a:6d:7a:e8:9b:89:8e:06:c6:1b:d6:
         dc:c4:f9:d7:83:77:44:f7:37:cf:3c:09:e7:39:59:21:60:04:
         6a:57:ae:7f:f9:57:71:f2:48:b5:77:67:cf:14:ad:c7:fe:9c:
         70:a1:0f:a7:17:40:5e:63:12:b3:2d:53:0b:37:93:d5:2d:7e:
         ba:78:6c:21:ca:95:46:28:e8:b0:7d:5f:6a:f5:fc:39:8f:0d:
         7f:1e:cb:00:de:64:8b:c7:a6:fa:2e:52:6d:85:77:23:96:50:
         23:e9:4c:a8:02:42:95:d3:d2:5d:d5:53:d6:f6:15:56:26:21:
         5f:6b:46:49:be:92:87:03:c7:a4:68:73:6f:8e:ba:78:30:a3:
         a0:a4:bf:10:e4:21:7a:d5:0c:64:6d:f9:71:eb:7a:bd:6e:05:
         84:cb:66:df:c0:46:f1:47:0d:07:37:1d:cb:4a:33:3a:78:d8:
         5f:0f:b7:3b:ee:70:43:ce:81:29:25:5e:81:42:6d:b6:50:f5:
         3c:19:4f:53:d3:28:d6:65:99:3d:d9:6d:66:de:a5:38:85:c4:
         ed:05:c9:a2:c4:08:3c:d6:21:03:fc:23:4c:61:e0:02:b5:6a:
         92:6a:56:43:4a:91:23:27:dd:cf:54:85:d3:b6:3f:2a:58:9a:
         32:5f:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:50:20 2024 by rpki-client on console-ams.rpki-client.org