Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File:                     eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier:          IGKEQe3sXV7/NFwNbFdb8JMpMeDrkcfHmv+TAYs+Rr8=
Subject key identifier:   84:EC:02:02:B1:7F:BE:63:3D:35:57:DC:9E:1F:B4:0A:8F:4B:80:45
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer:       /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial:       018FB4C6962EFE72ADEF8D5396E99AD7BCEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number:          1196
Signing time:             Sun 26 May 2024 12:01:04 +0000
Manifest this update:     Sun 26 May 2024 12:01:04 +0000
Manifest next update:     Mon 27 May 2024 12:01:04 +0000
Files and hashes:         1: NwWGX8a-ubOm-Qeq2OhoGWomlLc.roa (hash: JRxd4B+a1e0ZYAVYBlCsDb/KqiizB2UiviRfcbjDr4Y=)
                          2: V-H411zJ_LmjXis-BvxQ-rXcFpI.roa (hash: FLS2Q/RhsN2TFIuW0KVY+hM8QcOFp6AUKQmcWTRHTmc=)
                          3: Vh9z6ZEq-fKvx3GMthxBx0CV10Y.roa (hash: 6lbI36Ksg4Yxqih1iyLskd9bWLlca2xRWWSrbFLC6ro=)
                          4: Wy-opa1KYQPwaYJdHQjDA9IHxHo.roa (hash: z0SX9Qmy1epn8a7P2KT9yGfGlbtPqNf6ZOA5kTy+jog=)
                          5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: XQzMGdyEvITxnfjmqDR0KHUpjhFbwFA3dRdjPzNkKx0=)
                          6: pPJOYykbOQ79Uph6dfRaLTp9-U0.roa (hash: 1Q0v7nHxeBLDqR4FMfAcvL5IkWrd95haRm3Rp9fQxcw=)
                          7: tOpoYE_m-d_cxZ5sK_ERdmAWrfk.roa (hash: ecZBvQJ9ts746vsyEmc7ATFF0qhNUrdv8RWgSqStKX0=)
                          8: x3AEQXTk13M7r58dRzarps6ei0Q.roa (hash: ubW7sMpf2pZ3vwFj+26t3vD8k0Etih1rnBkPOZa/k7k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:c6:96:2e:fe:72:ad:ef:8d:53:96:e9:9a:d7:bc:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
        Validity
            Not Before: May 26 12:01:04 2024 GMT
            Not After : May 27 12:01:04 2024 GMT
        Subject: CN=84ec0202b17fbe633d3557dc9e1fb40a8f4b8045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:93:24:5b:cf:0e:f0:16:02:8b:9c:3a:30:
                    9a:f7:b1:d9:1e:b6:c6:6b:3e:b9:57:55:c6:d7:10:
                    99:74:0d:72:f8:4e:22:3e:2f:5f:7b:b8:ce:c1:c0:
                    4a:9c:7b:06:31:60:02:47:a1:a7:44:61:38:9a:31:
                    5f:47:43:1c:10:44:aa:00:9f:1a:f2:2c:1c:d4:49:
                    6e:b0:aa:e0:79:db:11:2b:48:4d:14:87:2b:b6:bf:
                    b1:4c:bf:7d:2d:82:dd:11:a2:af:64:2e:10:af:15:
                    c4:c1:09:f9:02:a5:e1:a1:69:d3:22:1d:d1:f3:21:
                    76:64:a5:ed:e4:1b:75:56:dc:d9:c0:9a:ed:ed:bb:
                    fc:f9:3c:2a:4a:16:67:94:c3:22:d0:94:94:97:b5:
                    a4:53:57:2e:76:0f:25:a4:74:9b:80:8d:5a:15:5f:
                    70:4a:c2:55:69:11:8c:16:69:c7:30:ae:6a:75:6e:
                    e9:60:c7:dd:a4:4c:54:2d:19:47:32:35:11:bb:20:
                    f0:09:b3:e4:e8:93:0f:bf:1b:ca:f8:1a:04:7d:06:
                    8e:31:00:39:5a:83:75:1f:84:03:a4:2e:62:f4:fe:
                    21:e8:89:b6:e2:f2:21:fc:1c:56:e5:cb:ec:b9:6b:
                    5e:54:f7:7a:f1:11:4d:fc:1e:2b:2e:e8:41:8b:fe:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EC:02:02:B1:7F:BE:63:3D:35:57:DC:9E:1F:B4:0A:8F:4B:80:45
            X509v3 Authority Key Identifier:
                keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:70:77:9c:f0:2b:88:66:4e:49:b1:61:c0:a0:89:dc:6b:5a:
         32:97:73:a0:53:14:04:f8:70:ca:d2:17:67:1c:f1:e8:03:4c:
         3c:ca:c4:f4:fc:84:be:85:09:51:1c:a2:c9:6d:b4:8d:8d:46:
         e3:e8:f7:bf:fc:89:d7:2a:2b:e7:76:a6:63:08:1a:c9:c2:65:
         23:fe:05:bc:dd:d2:c7:6a:fd:7b:4f:e9:59:aa:04:e2:26:52:
         db:97:d8:5c:42:5a:90:0d:97:38:65:b7:99:8c:e6:dc:35:1d:
         8e:a7:df:4c:dc:21:1b:00:07:3f:95:4d:0d:ce:a2:a8:8f:f0:
         18:7d:07:f3:1a:d3:0e:d1:a1:40:03:ea:fd:77:49:ea:c3:91:
         e8:d8:72:3e:52:53:22:40:9c:5f:e1:75:12:9e:39:61:40:04:
         ae:ea:78:d6:a8:43:c6:dd:1c:e6:46:9c:23:f4:98:80:c7:8a:
         4c:d4:69:95:20:e7:be:ff:ef:15:d7:74:52:a5:60:2a:41:6f:
         d0:fb:1d:0f:1d:a0:b7:c0:5c:f2:63:79:f8:48:76:a4:e2:08:
         f8:32:17:f3:3c:38:4e:c2:f0:ec:92:99:50:85:3c:ba:31:c7:
         5c:e0:5e:36:45:50:ac:bc:2e:dc:4a:dc:bb:23:92:87:59:8e:
         9a:a9:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 15:18:19 2024 by rpki-client on console-fra.rpki-client.org