Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File:                     jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier:          zd4mxVaGP4k+aSI2K8HnFS+DaHES2PBCPZxEop2tqOQ=
Subject key identifier:   74:A0:22:17:AE:73:88:A8:1B:16:A3:DD:E4:5B:6E:EE:90:03:F0:4A
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer:       /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial:       018F7B7B5262E66013E544E4E72BC57F753A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number:          1104
Signing time:             Wed 15 May 2024 09:00:30 +0000
Manifest this update:     Wed 15 May 2024 09:00:30 +0000
Manifest next update:     Thu 16 May 2024 09:00:30 +0000
Files and hashes:         1: 3dCC3WPgWS4ld6NjnOnmCV7K-hU.roa (hash: ioGwa2ydyd1/TDeSqhJ8S99lo9gST+ls0PYaCQLZG0A=)
                          2: T6iSQkyKBjakEEodlVPbDDqCQHc.roa (hash: xe/Iqva+F5d8lnFNTRhafLBEZp88BNnyQunwAOJXxL0=)
                          3: TTIx1EFo6szOBLESCShWETp5fAs.roa (hash: GNbm7535o++l5SXuoNXkKLMNVAExwrWjVOFeomQru40=)
                          4: iUk2E-Mtc-0VdrvmOYeQgYhgaOE.roa (hash: f9r1MzE52bwC7QyNJV64/jZh4q0iv9KFTqWtiHssNjc=)
                          5: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: seuN+0zu54ebV0z0qMHJfblTl15zFwqWyuqmtYv5emk=)
                          6: q2odES00ZaywK_lyL-iBl5gTFdE.roa (hash: KpmPlX19/0R2vKoSsb6NO3RUYZu0I5YabHEN8hdgPnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7b:7b:52:62:e6:60:13:e5:44:e4:e7:2b:c5:7f:75:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
        Validity
            Not Before: May 15 09:00:30 2024 GMT
            Not After : May 16 09:00:30 2024 GMT
        Subject: CN=74a02217ae7388a81b16a3dde45b6eee9003f04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:04:8c:9e:14:a4:29:76:de:bf:4d:49:34:5a:
                    7b:d8:05:41:6a:c3:99:59:cb:ed:3b:93:2a:dd:ee:
                    44:34:bb:a3:48:83:c2:d1:75:c1:7b:b7:e6:0f:a5:
                    8b:d2:8e:0f:41:02:5d:8d:1d:b8:b4:b9:3f:c9:04:
                    fd:90:cd:af:f5:51:e1:58:8c:41:0e:b5:23:36:16:
                    74:29:4d:ab:f1:73:e2:50:0f:ca:4d:5f:57:a8:ab:
                    a3:0b:0b:98:8f:db:84:8e:3b:b0:60:1b:32:de:f7:
                    55:d6:60:04:f8:a9:2b:16:3c:b6:c1:8b:6f:5e:e2:
                    e4:f7:1e:cd:4d:f0:c4:bc:ba:0b:90:ff:bf:ff:08:
                    fc:5a:13:fe:e6:33:19:f6:7e:e4:7e:2c:b2:b6:a9:
                    9d:0f:d3:5e:ca:e9:48:f4:b7:64:f9:10:a8:f7:a1:
                    81:21:89:97:be:48:a3:ba:8a:f0:ff:2d:d6:bb:37:
                    a3:f6:e8:02:71:53:20:62:5b:92:e8:8c:34:be:82:
                    61:ac:2e:e3:ab:06:a9:a7:1d:e8:c2:b2:e1:60:6e:
                    57:80:27:63:66:d5:8e:c4:8b:95:b7:d8:b2:6d:d4:
                    7b:5c:2c:cf:8e:f7:31:02:73:45:ae:88:6b:19:16:
                    4f:0d:02:aa:91:75:e5:8a:e4:0f:cf:2d:5f:fd:aa:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A0:22:17:AE:73:88:A8:1B:16:A3:DD:E4:5B:6E:EE:90:03:F0:4A
            X509v3 Authority Key Identifier:
                keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:51:88:6d:2e:a8:0e:79:9a:3b:fc:3d:5e:cd:ec:e1:c4:c3:
         36:4d:74:e5:a0:47:1f:6a:16:16:c9:31:7e:6c:55:23:b3:bb:
         2c:ee:2e:76:6e:35:50:49:48:ab:67:ec:7b:08:fc:f7:a5:85:
         1d:6d:0d:f7:18:1f:6d:a6:d2:10:c6:7c:f2:fd:67:cd:d8:87:
         f6:ca:f8:f2:05:dd:d1:1f:67:8c:23:20:e4:d8:d3:01:9c:af:
         7c:28:49:1b:38:81:ec:73:15:51:77:90:32:ea:7a:2c:7c:57:
         21:e1:00:88:47:7e:17:53:1f:45:02:c4:e9:77:89:77:59:0f:
         e6:c2:ff:f7:24:4c:e5:77:1f:57:09:d3:ce:0b:c5:ec:b3:22:
         65:87:aa:5c:71:92:83:56:fc:ef:78:a0:9f:2c:0e:bc:c0:b8:
         28:e0:d4:3b:a1:16:44:0f:c4:e8:1e:1a:61:2e:6d:13:58:0a:
         9e:cf:f3:d5:47:82:ce:16:3e:f1:19:d0:45:27:0a:57:e0:7d:
         1b:72:b8:f2:54:bf:50:fe:42:88:a4:23:ac:15:3b:e8:d7:bf:
         8e:d5:eb:e5:66:d6:49:f4:15:2e:9d:99:d4:0f:8a:3b:56:40:
         43:d5:41:c9:f2:2c:a2:7c:01:26:da:0f:12:b9:91:b8:72:e0:
         b6:55:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:25:07 2024 by rpki-client on console-fra.rpki-client.org