Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File:                     aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier:          IISbcLmFTsLabeGSVhqPZl1HO39fduRSyMAoQtLRl3A=
Subject key identifier:   2C:E0:DD:04:04:A5:27:F2:4A:C5:FC:01:D2:0A:13:11:90:28:8C:5E
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer:       /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial:       018F874875E934DDD996AB3EEDBFE6AD0C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number:          1181
Signing time:             Fri 17 May 2024 16:00:23 +0000
Manifest this update:     Fri 17 May 2024 16:00:23 +0000
Manifest next update:     Sat 18 May 2024 16:00:23 +0000
Files and hashes:         1: 1PP2pubqi_Ol0fESsDmb28-e-5o.roa (hash: eSnkSAMzUdI0cxj6K+RsyGvhxBdPfNT2lBFTmyMvjNs=)
                          2: LV5NNz8kGnACN0PAubzQTkyTkrA.roa (hash: GsBwMa9xesOrZOnko4/XfoELEUOTRnzVYCLuzYe1VCo=)
                          3: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: RcmkR8CI1F3RBPfEtEZRSRajZTrykNX8WhHEhqsUULc=)
                          4: u1tZdeCNLHhKS7JDBAE_0CVik4Q.roa (hash: vQJREFvW0eh5N0kSBggGLu9CF4P8m1EyDCmsNzCQEWA=)
                          5: wMFcmN3BLcS77Xwnt0lBpR9KWew.roa (hash: xfunj33l3MCxTbO4uq4geu7rRrw/Jr4NZEBoQBm4qE4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:75:e9:34:dd:d9:96:ab:3e:ed:bf:e6:ad:0c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
        Validity
            Not Before: May 17 16:00:23 2024 GMT
            Not After : May 18 16:00:23 2024 GMT
        Subject: CN=2ce0dd0404a527f24ac5fc01d20a131190288c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:9c:4e:48:61:2f:e4:21:e1:1b:42:ec:a4:
                    7d:73:5c:55:51:ec:07:10:23:0c:f6:85:aa:0e:04:
                    b2:12:81:e2:b1:f2:92:f2:2c:60:b7:72:34:f9:15:
                    41:fd:27:66:3f:03:f1:82:3e:ca:06:03:04:3b:c5:
                    95:9c:0a:50:cb:7b:eb:4a:a2:08:25:9f:c3:58:f7:
                    46:1c:b5:35:40:07:18:8f:4a:61:5c:d7:31:24:ee:
                    d0:b8:0f:86:30:dd:67:f8:5d:22:62:22:b3:8c:a3:
                    e0:74:13:1e:f2:e2:2a:b9:7e:d2:4f:7b:a6:3f:dc:
                    f5:bf:d6:e1:02:82:5a:a6:4b:3f:eb:d1:45:89:7e:
                    24:f1:9d:75:58:39:cb:84:f6:6c:a6:76:6b:d8:63:
                    6c:57:4a:18:91:45:50:b8:ef:f3:f1:48:da:b4:1c:
                    b4:0a:dc:b8:90:4c:a1:fa:07:ce:c4:fb:53:c1:8d:
                    cc:7e:5a:ee:d1:37:09:5f:77:0e:5f:4d:49:df:b2:
                    91:38:d4:9e:b4:16:3a:a0:ed:47:7f:87:17:23:6a:
                    4c:6f:b4:84:89:81:d3:2f:a2:98:26:4d:ab:8c:f5:
                    a0:a2:ce:58:0a:39:33:22:4a:8a:2f:95:8b:2d:56:
                    02:fa:94:81:80:20:b1:ab:a1:77:8c:6e:23:75:6a:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E0:DD:04:04:A5:27:F2:4A:C5:FC:01:D2:0A:13:11:90:28:8C:5E
            X509v3 Authority Key Identifier:
                keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e7:30:6f:c9:7d:1e:f6:3a:6c:71:0e:e8:fa:bd:30:b0:70:
         24:1e:c7:b2:56:ac:69:bc:2e:d5:fb:fc:54:60:bf:4e:45:f8:
         61:dd:99:68:30:61:59:39:f6:fb:c8:d7:5f:de:6f:74:fa:36:
         b3:6d:48:e2:a5:97:ca:ad:bc:b0:c1:3c:69:b2:e0:1e:1b:cb:
         54:e9:5e:df:49:25:da:e5:3f:e8:cf:b4:61:9f:22:90:33:a9:
         4d:47:13:78:e2:95:fc:66:1f:b1:77:3a:3c:23:22:06:2e:27:
         3c:5f:8c:4d:f7:2b:f5:1a:5c:b4:89:a6:93:13:0b:fe:e8:8a:
         9f:09:68:14:17:f2:00:31:83:77:9e:db:41:f4:d8:70:6b:75:
         4a:91:cd:2f:c3:1c:65:c3:23:0c:fd:db:24:82:3b:d2:b8:08:
         f5:65:56:b3:e7:09:9c:ae:b5:44:9f:a2:bd:e2:84:a3:42:80:
         0c:a1:18:2d:4f:e3:6d:b6:92:89:6b:ed:d1:61:9d:07:c2:72:
         8d:21:6b:97:79:2e:47:2f:af:ef:91:93:c7:05:09:79:e4:e6:
         77:f8:bd:7a:e3:34:71:1a:42:cb:c1:fd:fa:23:91:2d:79:2a:
         70:8c:7c:fa:f5:2f:14:bd:1a:db:69:16:10:53:b5:2c:7a:2e:
         d4:44:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:12 2024 by rpki-client on console-fra.rpki-client.org