Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
File:                     sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft (raw, json)
Hash identifier:          TVePbtWU1Y+4As1rwXIk5aVZycfmriGoNcgIh7UzDfU=
Subject key identifier:   6D:EE:56:BF:DA:F3:D2:B9:EF:00:04:D7:1F:22:EC:96:DF:1E:03:4A
Authority key identifier: B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C
Certificate issuer:       /CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
Certificate serial:       018F61F34EE6A54582EB42ECA8E0173B11B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
Manifest number:          1164
Signing time:             Fri 10 May 2024 10:01:26 +0000
Manifest this update:     Fri 10 May 2024 10:01:26 +0000
Manifest next update:     Sat 11 May 2024 10:01:26 +0000
Files and hashes:         1: SeQR4rtfAavpmT9bp6VCbI-Y4mA.roa (hash: AX7MGwk2aniY7SnwAufyI55Fi8RsYokkeCW8ZWeoW/k=)
                          2: nNVpYsmGV3WCQgrWoCF612hh45U.roa (hash: wHZv2kFUAaf9BLzL2JAS25Y7LGXWvg9AYSI7lzsiDkQ=)
                          3: sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl (hash: NehtWGdHpsZLZTDwFdtbhvWw+3TYrs3cUz0jWMUpS4E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:61:f3:4e:e6:a5:45:82:eb:42:ec:a8:e0:17:3b:11:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
        Validity
            Not Before: May 10 10:01:26 2024 GMT
            Not After : May 11 10:01:26 2024 GMT
        Subject: CN=6dee56bfdaf3d2b9ef0004d71f22ec96df1e034a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:36:8f:04:38:0c:00:39:0e:0f:54:56:e2:
                    e9:4c:b9:24:6e:e8:82:86:33:99:a9:af:1f:42:ab:
                    d9:7d:b2:b9:a6:25:75:06:c6:40:8a:84:37:cc:dc:
                    cb:65:07:fb:7c:80:3c:23:4f:2b:61:17:b3:d6:5a:
                    de:98:e4:e3:58:96:90:ee:90:c1:89:0a:0c:cc:1e:
                    11:6d:dd:e6:99:b2:3c:58:e0:af:45:9d:91:a8:2c:
                    d7:96:67:8c:9d:25:e5:2b:33:e3:fb:37:23:48:dc:
                    2e:7c:1b:f0:82:0a:18:e3:00:58:8e:d7:ec:09:a3:
                    fd:90:36:f8:de:ed:02:24:07:74:55:4c:d2:03:9b:
                    95:9f:c8:1a:ba:86:42:be:08:60:2a:55:d3:47:16:
                    c2:a8:63:7a:1f:68:42:5f:2c:cc:90:c1:16:0f:82:
                    b0:74:44:02:4a:06:c5:ed:24:1c:3b:fa:c3:21:0a:
                    45:74:b3:9d:8e:33:63:e0:fa:16:20:82:be:69:a7:
                    1a:ff:69:aa:5b:32:8f:53:b3:1d:33:c6:ab:40:47:
                    05:14:62:35:ac:cc:5e:03:d3:23:4a:d9:b7:1c:ac:
                    fc:09:ef:c8:0a:05:c5:bd:ae:77:6d:d8:24:90:25:
                    cc:06:0d:f1:de:ca:14:a1:39:02:85:43:0c:5a:6d:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EE:56:BF:DA:F3:D2:B9:EF:00:04:D7:1F:22:EC:96:DF:1E:03:4A
            X509v3 Authority Key Identifier:
                keyid:B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9f:33:6e:2f:e2:52:09:34:ce:e2:ae:f7:d5:4f:a6:e3:90:
         24:5c:79:08:77:56:aa:c8:f3:e5:03:70:73:e2:4e:d5:5b:5b:
         a6:27:ab:b2:ad:87:ef:94:85:21:d5:68:86:f6:c5:f4:4d:3d:
         0f:93:bf:8b:5d:4b:38:26:40:aa:43:e5:84:c8:68:a0:da:e9:
         29:55:d7:44:36:b6:cc:7c:8b:14:bb:93:38:37:18:0f:73:0c:
         22:05:90:1c:df:25:6f:e6:51:c1:66:2b:01:83:37:77:00:96:
         27:a4:45:24:68:2a:b5:55:57:62:b2:bb:ad:6a:2c:c4:94:69:
         f6:69:d1:e2:21:22:33:8e:67:92:ee:b7:5d:c6:ca:65:0c:8a:
         26:9e:e5:f4:52:1f:e2:3a:9c:fb:c0:ca:75:bd:e5:77:14:3c:
         c8:fa:00:1b:2d:1d:f7:8c:5e:c3:fe:68:3e:09:e2:0b:d1:d8:
         98:a2:07:47:ae:fc:e2:9c:1a:37:ed:bb:31:26:73:5f:32:84:
         c0:8d:e6:98:47:6c:91:15:6f:2b:18:bf:e0:65:57:f3:9b:b2:
         e0:f2:8b:ac:2b:00:bc:a5:de:52:85:ba:a4:65:83:d2:ad:07:
         8e:c5:9e:84:6f:b2:75:7d:95:e5:19:46:07:4d:df:e8:48:1e:
         e3:79:22:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:49:34 2024 by rpki-client on console-ams.rpki-client.org