Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          3/4QNtd4IqeoMKFwXRFzhOaewplsHYPkSNq0I36fYew=
Subject key identifier:   C7:A0:D4:3B:BC:B4:72:26:82:37:B2:48:A6:2C:56:73:D3:95:6B:4F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       018F6260C03F6B266F4850B9B2C710DBD75A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          07B3
Signing time:             Fri 10 May 2024 12:00:58 +0000
Manifest this update:     Fri 10 May 2024 12:00:58 +0000
Manifest next update:     Sat 11 May 2024 12:00:58 +0000
Files and hashes:         1: 2lvxFCIY-aWvsZyMbSOtMTMsLm0.roa (hash: DRlbdxC7m2pTMPMFhdPk+uQO3gcMSwd8EgxYP2Cmcnk=)
                          2: 6ELMTZ_82I0xaPkQ8LgQXqP3Ovg.roa (hash: phse0eb84DmbsI2Ap5hipPWWlR7yVxxwjE4JrdxgQU4=)
                          3: 6hoTe5JG6XsQU4L9Q-lziCcLI8A.roa (hash: Hl+ZTW8Ysn6pqfwT8bvMgviTpp3lyEBOF/yfYu+GN4c=)
                          4: EvFueZgXc4TFksyBhstkgpn5DI4.roa (hash: 7pW3Vnq/RuyVRk5XWdAe0hTo9WL9y9XnDaZh0iF6FpQ=)
                          5: Fes22w4v3EEVMN6lS9Cqb2Yv9MU.roa (hash: BrWSkY3t9BgEGr5EvAOzjN3yekx0ltKcdx3Dm7J8lMg=)
                          6: H9wk5Crjzg5PnXeh__C0JeWgRx4.roa (hash: m+sTUl7QJ/QUJWpKpO652y7oN7P2qdny6phwGmPaO58=)
                          7: LULDteje3LFqcHafBJ7oelyF6c8.roa (hash: 5riwAVZdigF0OPrZB1FEsZO/ZAVl/4Ftk61QPZ53pgw=)
                          8: QI7GUMavMO4fIP0fbCgb6V0iw5g.roa (hash: t4wxOXvvKtYc/nwksboDxZP8PEE+VqcM5ffpZBs7yYI=)
                          9: SP262984woTzOVLGvWmJv5DXDGI.roa (hash: HkxDgLE3QOHUpxpDHMxUjF71ilwylDrdV+AvIe4hUjE=)
                          10: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: 1bTMYX4/jHSNdFvdHyh2LvF/e+RCYPJ2kfG5GCHCEjk=)
                          11: a0Ye_X9mxKJuR6eNMFVJAs1X7P0.roa (hash: umVknx3uqKbrbkHCEFa3xjN1W9hMhp2RuBKJjY+8xS4=)
                          12: mZ_sK7JAQAYgLERBb2Eu_ff4kpw.roa (hash: sOdy2hsxe/JvDsZH9k/pPJCQ3QM96+4cb8VPs/i4DE0=)
                          13: q8Eh6ec7zd8mbwb3WHMVUonygs8.roa (hash: x3D/fNkSYKaEyyMjQ3gM1H2gStlFulzaTjIYaBw2luo=)
                          14: rBXgFm3KgUI2dIqHycSF8tzU4ME.roa (hash: BLSMsbDp7cI+2J2+fdBsuB2FAWujwa573gwCBNe7HPM=)
                          15: rstQt4hilznyOGL7r1vxerMOA7Y.roa (hash: x5IV+UTql27+Prx22zFEig7tOPN77spZxpeLC2yjEqQ=)
                          16: tBxBjV_mkV_JBOOQ-SUq6_HXMc0.roa (hash: at+yBa90AD7FIXRB5xqif20LXtl2Y5N9WcU7TiVWzI4=)
                          17: xPK4I6Pz6ciyaktohR-44b-OD1w.roa (hash: AhX83S8xR7JNhtiMn1pifC3nA7Ohv23GCMEZGe9ssgA=)
                          18: yKdblybwP4L70tLmCZCZol2WsBQ.roa (hash: lrusUqBAPqQ8zBiBKVuxjzHLCkZGFvsK/Q1rDWUuKws=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:62:60:c0:3f:6b:26:6f:48:50:b9:b2:c7:10:db:d7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: May 10 12:00:58 2024 GMT
            Not After : May 11 12:00:58 2024 GMT
        Subject: CN=c7a0d43bbcb472268237b248a62c5673d3956b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:6e:4a:d1:e4:33:3b:c0:f8:6e:1a:69:20:
                    fc:aa:60:08:40:35:36:ea:20:d1:a1:d7:ec:ed:56:
                    73:23:8a:64:65:6e:27:d0:97:72:0c:e7:45:1f:8d:
                    cc:95:56:42:ab:7b:33:5d:07:7e:ef:21:a9:18:b4:
                    6b:fe:0a:b7:b0:53:0a:5f:51:ed:29:02:16:9d:06:
                    a3:2f:9c:9d:92:0a:61:0b:0d:dc:c9:2f:aa:0b:d4:
                    dd:34:4e:38:8d:fc:e5:d5:fc:e2:22:d9:98:8c:c1:
                    4c:6a:35:ff:9d:9f:10:db:8c:23:c3:27:80:57:05:
                    fb:c8:bb:cd:99:e2:bf:51:86:03:da:d4:5b:8e:a4:
                    c4:1c:ee:00:e2:d3:36:1e:66:c9:54:2c:e6:96:5b:
                    6b:c3:5c:07:64:bf:2f:ec:e3:25:2f:d0:30:a8:b4:
                    cc:c4:e9:35:86:26:d2:c1:d1:7f:dd:a1:7b:e7:86:
                    c7:b1:45:15:cc:b1:e5:0b:12:c4:e7:55:5c:62:84:
                    f0:dc:55:d7:bb:0c:6a:99:23:77:93:12:2c:f5:30:
                    ec:d5:7b:2c:17:48:ff:d0:84:be:2e:9a:79:72:f6:
                    36:ad:bf:ac:c5:a2:fd:cd:cd:3c:5d:38:c3:46:24:
                    5b:89:69:7a:94:80:b0:e2:eb:bf:31:7c:a9:28:66:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:D4:3B:BC:B4:72:26:82:37:B2:48:A6:2C:56:73:D3:95:6B:4F
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:8a:15:fb:fc:8c:a3:ed:0b:45:cb:46:62:3e:d3:63:95:66:
         a5:03:4f:06:52:9a:b0:40:4b:f4:7e:8e:c9:de:ef:cd:c3:60:
         91:55:06:1c:97:9e:7d:55:20:13:44:23:01:a8:37:53:81:45:
         ee:c0:04:13:40:92:c4:5e:3f:c2:2d:96:a8:0a:95:77:56:43:
         e8:df:73:0c:b4:63:81:e0:02:79:7e:fb:29:84:14:1b:b9:12:
         8f:66:bd:29:2c:ae:23:40:81:4a:ce:05:48:8e:3c:57:b4:1e:
         f4:3a:52:39:09:02:ae:7a:cd:57:dc:ce:60:4a:ec:c0:ff:7e:
         e1:a0:34:cd:73:34:9d:1d:e4:01:2d:9d:89:ad:e7:ab:24:97:
         6b:0a:e8:14:dd:aa:e9:9c:d5:59:2f:1e:07:8f:7e:63:03:fe:
         2c:76:b9:7c:af:44:62:71:bb:c5:69:8d:7a:da:68:4a:78:c1:
         c8:9b:c3:9d:d2:3b:cf:e4:dd:9f:98:8a:ae:4a:35:8b:b5:7f:
         3e:a7:70:db:2a:80:85:b5:f5:79:6f:bd:87:80:2e:f8:a7:28:
         1d:38:59:de:90:2e:48:b6:46:30:81:6c:4c:5e:81:5f:f0:2e:
         df:5d:b2:fd:30:8a:3b:00:69:ec:cd:a5:2c:d4:e4:78:cd:ab:
         c9:29:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 18:41:38 2024 by rpki-client on console-fra.rpki-client.org