Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File:                     IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier:          SKmuFL4w/lACKBOXL+VDwUeE71VN9qyx+6a4q+91oIg=
Subject key identifier:   2C:41:BE:A6:C5:8E:A1:D5:74:2A:F9:18:71:BE:96:C6:FD:62:2A:A8
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer:       /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial:       018F46B29EED4F08EE061D04B5CDEED43311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number:          1158
Signing time:             Sun 05 May 2024 03:01:02 +0000
Manifest this update:     Sun 05 May 2024 03:01:02 +0000
Manifest next update:     Mon 06 May 2024 03:01:02 +0000
Files and hashes:         1: CoKFm945lUG_bPWHhkeUJeGQh84.roa (hash: g7kJMh9PWX1DRAtA2O58ID9CpSSrTxVcNoT6Jl+9Ub8=)
                          2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: hlkRlJO6x76jRsnRlScyrThxxvVJoSd+MEBOzY2iQ9w=)
                          3: Z5rHjvgUx6fqbRaZqPzICbQhxAo.roa (hash: Hr5e9lSTAKKoeT+GNvDZkLLHCeBQ5EKql5SfhHCvpsU=)
                          4: aE0wkVOWDxBIiI7DNbEuML2c7QY.roa (hash: +Ks8QRTdYO2MXG6QiStCkLU7m1R7ItX7TQ90LsnMczY=)
                          5: d0JTcLqGjG3taQkrSywda44GQJc.roa (hash: Jyt6fS5TufEp/gKivNl55LsBN8cDy2ZLLsIbAjNuskQ=)
                          6: sMjren0IMoprvYYhl88BbJMKuFc.roa (hash: XPNcR3X+KZIZ5XTlZmVhg+rLluDwOhR35Y7IH2iDr/o=)
                          7: zuNb_ENhItc9d3C-Wr9Ih7fwhno.roa (hash: f7VkQM61KOvEr4Up9vusjZ5zN9dX2+Ax7MlGTC6rXpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b2:9e:ed:4f:08:ee:06:1d:04:b5:cd:ee:d4:33:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
        Validity
            Not Before: May  5 03:01:02 2024 GMT
            Not After : May  6 03:01:02 2024 GMT
        Subject: CN=2c41bea6c58ea1d5742af91871be96c6fd622aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:16:14:f5:a7:b1:7c:e9:36:9a:4a:13:87:
                    c4:32:c2:d8:4a:8e:b5:37:d3:9e:b0:3a:50:c6:74:
                    08:00:ca:5f:65:66:37:80:49:c6:b1:da:d4:df:be:
                    19:ab:c1:02:bf:07:fa:d7:18:a5:98:14:a8:42:64:
                    94:b8:f4:8e:35:0f:80:d7:d0:58:51:8b:2c:31:05:
                    a9:ab:ff:cc:88:49:ac:d4:d1:fb:b6:c9:93:f9:47:
                    f0:38:26:cc:e6:2d:43:3e:04:fa:f7:6c:ad:b6:c5:
                    05:f9:7e:68:ed:6e:f5:26:29:db:09:e4:c3:1e:88:
                    b3:94:d7:da:32:d3:23:e1:3e:3f:fa:d2:0e:88:6e:
                    09:d2:7d:b2:f2:fe:9e:5e:61:71:64:ec:d0:68:55:
                    97:54:3d:b3:c1:d9:13:ad:22:a4:b5:ce:08:29:3c:
                    d1:9b:ca:17:3d:f3:e0:a0:46:dc:c2:04:32:ab:8b:
                    4a:1a:a4:20:67:7a:64:d9:ba:5b:8d:6b:48:a8:86:
                    b6:50:41:af:0b:b0:ce:b7:61:b7:3a:3f:29:15:fd:
                    22:af:52:f9:5b:34:1f:e5:a1:53:0e:15:c6:6e:0a:
                    85:a2:50:fd:79:10:79:05:a3:94:b8:c6:e7:3e:b5:
                    92:2c:f5:71:15:38:c6:66:22:7f:7e:65:0f:e3:a5:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:41:BE:A6:C5:8E:A1:D5:74:2A:F9:18:71:BE:96:C6:FD:62:2A:A8
            X509v3 Authority Key Identifier:
                keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:26:6e:1e:dc:43:19:c9:a9:12:7a:45:d3:c7:7c:75:22:45:
         ed:ec:9e:75:89:29:56:fe:d0:aa:09:67:f8:28:3d:8b:83:dd:
         88:6a:3f:75:49:57:c6:81:81:29:ba:6b:c6:04:0a:04:b6:f6:
         35:e8:05:be:26:d7:1e:a7:db:4d:3f:ed:6e:81:eb:59:e0:a4:
         89:99:2b:a8:1b:9c:24:2d:fd:b7:60:e4:ea:31:ab:74:a9:9e:
         cf:8f:a5:7e:12:e1:32:3c:0c:bb:4a:55:00:3d:fe:bf:aa:79:
         2c:ff:52:f3:2d:68:d8:2e:6f:e3:fe:7e:18:d6:74:7e:5e:eb:
         e4:0a:6c:3c:ce:94:50:5b:dc:05:84:e2:f0:38:53:39:0d:db:
         6f:01:79:7c:03:99:f7:fa:29:77:99:3b:e7:5d:a4:bd:21:f7:
         d8:58:f7:db:58:23:c0:ed:df:37:e5:12:66:1a:33:04:d1:b6:
         01:10:82:67:15:ad:c8:ff:4f:a7:0c:0e:33:73:6f:c3:ed:39:
         73:d5:61:89:54:7f:e2:63:50:f7:f5:cd:91:74:59:7b:66:00:
         16:52:80:ff:5d:fa:76:0b:79:d2:8e:9e:97:59:33:51:37:97:
         08:2c:5e:d7:04:6c:b8:70:bb:9d:b9:db:a9:f1:f1:e0:ad:4e:
         af:85:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:52:46 2024 by rpki-client on console-fra.rpki-client.org