Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          FwDT2tfP0X9zN1a1oQyVanFWX98X+Gxg8v/+lxNVhWk=
Subject key identifier:   91:C3:FC:C5:70:03:05:23:19:3D:B7:FE:AD:2F:C2:BD:9F:47:90:D2
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       018F8824346C31F0F101DBDC9C65C34EB499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          1185
Signing time:             Fri 17 May 2024 20:00:25 +0000
Manifest this update:     Fri 17 May 2024 20:00:25 +0000
Manifest next update:     Sat 18 May 2024 20:00:25 +0000
Files and hashes:         1: 0fXAfiDiimY4sxxoLNAc8hoKGQ0.roa (hash: K63qJHPsG3/UbhEX9+BEWEQmi+gemIWIVmWRP2FR7sk=)
                          2: ImFqb3sKQTKKlqiFDvbZmOC-UJQ.roa (hash: Ge9/03dpAIOwe7JgwgQxds744P78VOH3uqa0BuLk3ks=)
                          3: YOGvghFVMgiL4YNFyP6541rUXQs.roa (hash: noiaDyeso25N2waO6qxANNwe5UbcqtdVm+khGfAck8A=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: c3vAU2jobs4NveJT5HKuJ9K1QTZzOF3qdthmaAMzYEk=)
                          5: r0DYgnUeVdObisiIwNF7n-tVeLE.roa (hash: r+gndHoYrUj2cKGFo0r2rmQc+ZJPHgxc02PRb+433AU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:34:6c:31:f0:f1:01:db:dc:9c:65:c3:4e:b4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: May 17 20:00:25 2024 GMT
            Not After : May 18 20:00:25 2024 GMT
        Subject: CN=91c3fcc570030523193db7fead2fc2bd9f4790d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:cb:3a:8b:c6:ab:85:a3:b7:f8:4b:fc:50:
                    25:9c:b7:a2:51:9b:66:7c:21:e1:66:09:9c:73:e8:
                    1e:8d:9b:9c:13:1b:78:9b:73:63:3e:fe:10:7e:56:
                    b7:e2:01:f6:60:d1:73:10:2c:58:11:56:03:9f:ea:
                    ca:d7:64:62:05:ee:dc:25:a1:d5:84:7e:4d:e9:37:
                    e6:c8:4e:78:81:63:ca:47:64:b0:49:9b:77:92:1b:
                    b9:d9:98:02:ce:59:84:cf:87:05:3c:e7:56:ba:2a:
                    84:c8:49:91:76:52:d6:95:db:4d:27:b2:03:8b:1a:
                    7e:64:19:2d:5c:b9:84:50:9e:df:f8:4c:f5:5e:ca:
                    41:45:4d:76:72:32:07:c0:5b:34:cc:6c:3d:2d:75:
                    c5:8d:24:50:d2:47:c0:91:08:53:50:b5:99:c2:d2:
                    8e:65:ae:2a:a9:56:0e:7e:1e:1d:6b:dd:b8:2e:39:
                    63:88:51:4a:52:ea:61:e2:2c:b2:5c:00:01:3c:90:
                    cb:5e:38:12:53:c5:18:b3:a5:60:ac:29:c4:72:c6:
                    62:d2:16:d2:9f:cf:b4:d9:2f:a0:5b:e7:c2:fa:c3:
                    01:b4:7c:97:1a:58:3e:f2:f4:0f:ee:6e:fd:4a:b5:
                    e1:3b:a1:14:b8:0d:15:cb:87:cf:28:87:a7:88:7c:
                    1b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C3:FC:C5:70:03:05:23:19:3D:B7:FE:AD:2F:C2:BD:9F:47:90:D2
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b6:58:07:97:41:f4:03:25:30:83:0e:f6:73:08:a6:7c:07:
         b4:92:b5:a7:22:03:c5:43:43:d0:d4:7e:a1:cc:b8:5e:aa:09:
         cc:04:f8:09:7c:cd:13:13:a0:79:12:d8:bd:d8:67:b0:ef:b9:
         81:ab:44:00:5c:d4:68:42:0f:76:5f:af:37:26:c0:60:01:10:
         fd:b3:8c:de:ca:90:44:f1:6c:28:18:3f:59:03:35:7a:2d:a0:
         42:5c:27:f5:4f:45:30:e5:f7:cf:bf:97:ea:1c:71:62:1e:1d:
         d8:b9:91:2d:03:b1:56:98:dc:1d:b0:3f:55:01:5b:ef:eb:ac:
         ed:7f:ef:c6:1d:d6:62:08:04:9c:27:51:3d:b7:50:71:f2:22:
         e4:a1:9c:5f:b5:65:0f:d2:a0:56:b8:f9:78:f7:12:db:01:a2:
         21:52:8c:d8:38:4b:b0:64:aa:5c:ef:5d:d3:8d:e3:38:b6:b9:
         ae:e2:c0:ef:a6:d1:1b:85:ae:80:35:5e:a5:61:8d:ef:51:7f:
         1d:e2:be:f6:0f:da:d3:f8:cf:76:8f:4b:52:ed:4e:b5:fd:8c:
         8b:ed:7e:8a:d9:95:a0:6c:4f:1e:57:dd:8e:b9:fe:fa:99:d0:
         2f:04:19:94:f8:a2:49:77:f2:96:60:18:c6:dd:54:a2:cf:27:
         7d:73:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:50:36 2024 by rpki-client on console-ams.rpki-client.org