Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
File:                     iEv4DnL1Dwm_VjST69sRo0u6MS0.mft (raw, json)
Hash identifier:          1vkZUI28zKNRb00dFlgZd6ssoVo3CCxLIPf+IbNEzL0=
Subject key identifier:   E3:8E:8B:1C:FD:9F:2B:A0:59:9F:03:B2:A7:46:0F:2C:6D:A1:EA:BF
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Certificate issuer:       /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial:       018F87B691062B91C1C59BDB7886684D5448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
Manifest number:          1168
Signing time:             Fri 17 May 2024 18:00:39 +0000
Manifest this update:     Fri 17 May 2024 18:00:39 +0000
Manifest next update:     Sat 18 May 2024 18:00:39 +0000
Files and hashes:         1: 4KbWw4x1Arzs82KzeDm2lwld_R8.roa (hash: A0qCuhILp4/kKObfB2e2xq3UPDqX6pQzUSpSl9qnzns=)
                          2: hInz5xZbVmhcDniumxXDKxlXLDw.roa (hash: 6u4BgqjhoGHIOXCMsYUwiDC0SmyhGu8AW2r9dccxKY8=)
                          3: iE_uhKoiA6vnfTpqREnaU8cllXU.roa (hash: 3LR98TDZt8IanKP73NZOSJNm4YF/S6m5hE4x9loM6Ho=)
                          4: iEv4DnL1Dwm_VjST69sRo0u6MS0.crl (hash: T5WNSg7SOUrtg3eGjoe/Otn32yYLvIqYVI5pYSseLEE=)
                          5: kvXrUyeBQi_5Duxjgp6-Ld2-A04.roa (hash: glGX1DcdIMwDvGOnafHtJAAh4snkHR3QKJd7pP+0ois=)
                          6: meuwHpSlXu-oVxCb3fmsYhAWIfw.roa (hash: QI0IZ1II2CMs3HfyDrUcPVsejynGcyTCKTFjUCL/Q98=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:91:06:2b:91:c1:c5:9b:db:78:86:68:4d:54:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
        Validity
            Not Before: May 17 18:00:39 2024 GMT
            Not After : May 18 18:00:39 2024 GMT
        Subject: CN=e38e8b1cfd9f2ba0599f03b2a7460f2c6da1eabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:5e:f5:b4:34:a1:f0:82:1f:ec:9b:06:24:
                    29:13:52:57:81:0c:bf:f9:fb:c2:f2:e4:7c:3b:59:
                    3e:35:5c:1b:18:f0:cd:e4:41:29:79:19:ca:1e:ef:
                    4c:ac:b9:f3:11:c6:75:5b:7c:06:38:e8:ce:b4:ee:
                    0b:93:36:29:42:0b:79:32:d5:75:06:a1:94:54:e6:
                    28:b1:bd:a2:c2:6c:0e:63:06:96:e0:c3:bd:e8:c8:
                    84:62:39:bd:95:24:b7:2e:27:8b:16:65:b0:6d:e1:
                    2e:95:73:ad:1d:92:c2:98:5b:33:58:f7:21:05:13:
                    be:fb:a2:97:ed:a1:26:61:2b:23:82:77:b2:68:3f:
                    32:df:8e:10:a4:1d:a4:55:b1:58:a5:62:da:c5:a2:
                    bc:f5:04:89:77:5f:29:58:a8:37:2e:a7:68:40:28:
                    66:31:6f:fe:12:9c:e7:62:c8:ea:34:b4:34:2e:1e:
                    08:4d:77:22:d0:36:16:bb:38:62:67:85:03:36:fa:
                    75:d7:ee:f2:6c:43:a4:1b:d3:73:2c:82:cd:2e:0e:
                    69:2c:16:b7:28:1a:fa:41:34:f0:59:5f:64:e7:f7:
                    57:4d:83:8a:c0:e0:4e:44:aa:7b:5d:02:12:39:1f:
                    16:79:7f:86:ed:04:4e:1d:08:1a:dd:90:50:3d:2b:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8E:8B:1C:FD:9F:2B:A0:59:9F:03:B2:A7:46:0F:2C:6D:A1:EA:BF
            X509v3 Authority Key Identifier:
                keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:b5:d3:ad:fe:d5:21:7d:45:cf:d0:cb:58:4d:31:cf:c7:
         ee:26:fe:4d:ae:8e:d3:00:2e:59:3d:f9:68:16:31:e9:e9:01:
         a0:8a:0e:88:38:a0:ae:f5:c7:3c:08:6f:56:8f:f5:9b:da:60:
         63:fc:b8:d8:d7:b9:f6:03:9a:29:01:eb:53:3d:85:50:59:82:
         f9:74:29:ed:9d:6e:2d:19:a2:50:6a:71:ed:06:08:bf:bc:f6:
         58:ab:c1:c4:b8:0b:5c:d3:cd:ea:3c:fd:0e:e4:3d:8c:18:00:
         7a:87:39:11:64:20:78:e9:e4:a7:f7:de:b2:2d:f3:ae:d9:fd:
         ef:2f:c9:65:cb:6e:8f:e0:e9:9d:7d:17:6f:df:a8:aa:3c:fd:
         e0:dc:4b:44:0f:3e:0b:62:e0:ba:a3:44:e5:7c:78:80:47:cd:
         12:e1:7c:fe:b2:f1:a7:4b:39:f8:34:66:cb:83:fb:16:3d:62:
         03:a1:e2:5b:6a:21:4e:a6:fe:40:24:7f:91:a9:35:12:11:e3:
         08:90:92:94:59:23:b9:1a:37:6e:33:5f:a9:ec:86:5b:e1:01:
         22:5e:7d:4c:a9:cf:41:d2:8d:f1:70:28:0f:67:82:4a:04:ea:
         f4:51:54:e1:75:ce:a0:b2:96:aa:ba:b3:b1:6c:02:66:a3:f9:
         dc:4c:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:29 2024 by rpki-client on console-ams.rpki-client.org