Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File:                     IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier:          Vy8BghZgcH6lQrZ3y036wU+nIH7L23goEzbYoaLd/cI=
Subject key identifier:   29:CC:45:0F:4A:12:E9:FC:2B:39:D2:41:0A:75:94:36:AE:8B:D2:19
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer:       /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial:       018F3776728E3324F2B85740D29EF275800E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number:          114E
Signing time:             Thu 02 May 2024 04:01:00 +0000
Manifest this update:     Thu 02 May 2024 04:01:00 +0000
Manifest next update:     Fri 03 May 2024 04:01:00 +0000
Files and hashes:         1: HOnn7QyiFgkZHx-2xKrsQH_E3Pg.roa (hash: eWuB5IyRaUZdfaSsnunsdMFlgqdPd7t7PBOF94AaanM=)
                          2: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: hSxrgu5uSTJV+mK/RBFeIDRcpJq1OyjZnjhpHbt3zlw=)
                          3: SAYL3DX7uosAKv3GFJvHhCmyt7o.roa (hash: 4x0g6f8hmt+vTW9utSy/i81UbXAN1OT3WOj5rZI5VjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:37:76:72:8e:33:24:f2:b8:57:40:d2:9e:f2:75:80:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
        Validity
            Not Before: May  2 04:01:00 2024 GMT
            Not After : May  3 04:01:00 2024 GMT
        Subject: CN=29cc450f4a12e9fc2b39d2410a759436ae8bd219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:45:06:b2:f0:8c:cb:b6:8c:b8:c5:ff:8d:
                    49:29:86:b4:7b:ae:7b:06:0d:45:a8:7a:3e:60:f9:
                    2e:ff:95:4a:1d:04:4f:15:ee:22:c9:ee:27:3e:90:
                    d5:6c:21:d9:a4:ef:2d:45:50:07:9d:fc:86:bc:5a:
                    7c:a3:a5:11:bb:6c:30:a7:10:a4:1e:2d:9a:9d:d8:
                    89:f0:ff:4a:bd:c5:c3:f7:5d:41:67:6c:c9:b5:59:
                    69:9f:fb:9f:91:bd:5e:0c:bb:18:3c:12:9f:3d:c9:
                    99:2e:15:a7:d7:35:28:85:df:0c:04:1c:46:8e:99:
                    d8:27:c9:d8:49:89:2b:94:fa:bc:ed:a8:d0:95:a0:
                    45:2f:3d:ab:6b:fd:50:65:67:5e:7c:99:82:63:e7:
                    2f:42:82:1e:90:d5:e4:74:a5:71:89:2b:b9:3b:f6:
                    60:87:22:e1:36:bf:7c:01:8d:5b:b2:cd:63:e0:68:
                    7f:12:05:e8:a9:b7:f6:1d:04:54:37:a6:a1:61:a2:
                    a8:45:9c:82:9c:8a:19:83:ef:0c:5f:40:a5:20:8a:
                    95:87:6d:2e:b1:d8:83:3d:66:c7:3a:e0:35:6f:88:
                    09:ac:fa:2e:78:53:ce:bd:82:a6:c7:66:90:bd:f0:
                    c1:04:8f:70:86:a9:76:ef:b3:37:05:1f:b2:7f:7f:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CC:45:0F:4A:12:E9:FC:2B:39:D2:41:0A:75:94:36:AE:8B:D2:19
            X509v3 Authority Key Identifier:
                keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e8:86:27:f1:e4:49:a6:b7:19:20:bc:d4:56:5f:66:50:61:
         c8:13:8c:51:2c:04:94:2c:26:68:0f:2d:27:60:66:f7:e2:36:
         84:54:0f:57:2a:3d:da:ff:81:36:6c:4c:b5:37:1d:f0:9f:44:
         ba:bc:19:c3:b8:7d:7e:cd:cf:98:51:c8:d4:a1:34:59:da:81:
         a6:8c:7e:72:70:3a:3b:8d:84:ce:86:0b:3c:6a:3f:f7:bd:7b:
         15:d4:06:7d:8e:99:82:18:43:df:d3:d9:36:3f:f9:9c:3e:04:
         4b:32:13:9a:db:fa:64:ac:2d:51:a8:31:a3:87:83:13:1b:63:
         b5:d8:58:30:a9:b4:4d:f5:55:7c:67:03:49:86:a5:1a:d1:1b:
         83:d5:67:03:b6:bc:19:2d:40:90:8a:a4:74:39:46:c9:70:d2:
         b2:af:3d:d9:a5:15:83:09:dc:e2:44:11:53:f5:ef:fe:83:3f:
         a9:7d:f0:d7:0d:31:63:27:4d:c1:a5:e5:0e:7a:4d:38:80:ce:
         eb:b3:6e:38:70:f3:40:a1:13:40:6b:40:b7:7a:09:01:7a:5f:
         e5:88:36:75:44:65:1a:17:72:32:c3:e6:a7:bc:5f:5a:8b:00:
         d9:4d:7b:2e:b0:15:6e:46:f3:09:cb:57:64:51:f8:6d:86:84:
         2f:bf:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:09:56 2024 by rpki-client on console-fra.rpki-client.org