Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File:                     rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier:          QOxM4aoC+NbWX5aIDJ/v1T6V3chS4PAQKeuTVlJr9y4=
Subject key identifier:   74:F2:9A:09:2E:DB:54:BF:91:88:18:50:7D:9E:C7:19:CB:81:0A:86
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       018F87ED55C82702847D0484B5417E164729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number:          0539
Signing time:             Fri 17 May 2024 19:00:29 +0000
Manifest this update:     Fri 17 May 2024 19:00:29 +0000
Manifest next update:     Sat 18 May 2024 19:00:29 +0000
Files and hashes:         1: 1AcAvzsGLYsJFDbq_-R4IBQJ48A.roa (hash: yqIImTyrwgh7aahM2+iK+p5EI0uriB2ZVW+THovdVAw=)
                          2: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: 74pKj2s8xSIexq6pdyLPiEPD6soW3h5LNRoBfzBW7Dk=)
                          3: zJ1iQnmc4qHvByPlYuDKIL78M2w.roa (hash: FcQRILLO3flwWs8AL1vteBHfSUEyBQzgsAXYrW02Y2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:55:c8:27:02:84:7d:04:84:b5:41:7e:16:47:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: May 17 19:00:29 2024 GMT
            Not After : May 18 19:00:29 2024 GMT
        Subject: CN=74f29a092edb54bf918818507d9ec719cb810a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:37:3b:46:96:40:dc:cd:a5:04:2e:b8:5b:
                    ac:0d:1c:ca:12:8f:44:8a:a9:16:0f:de:51:17:85:
                    98:21:eb:f4:eb:a5:af:dd:cb:62:92:77:db:0c:cb:
                    80:86:c6:0d:0f:33:80:0c:7e:4a:cb:8d:00:5e:46:
                    95:92:be:c5:68:65:32:08:41:de:f6:63:4d:ed:58:
                    3c:58:1e:e9:c2:37:95:a8:fd:87:f1:cd:76:a3:a3:
                    08:c2:7c:81:ad:78:f4:7d:9e:a0:6f:74:8a:8e:cf:
                    06:71:be:e8:8c:5c:27:36:5a:ba:d2:d8:36:75:aa:
                    31:d9:68:99:c7:90:6a:35:5f:53:b8:11:aa:47:d9:
                    5a:01:a2:31:40:88:ba:f8:6c:39:65:81:fe:0b:bf:
                    f8:f1:91:94:ee:43:65:54:4d:74:b4:ab:e4:71:bc:
                    8d:3b:6f:8e:84:1b:fa:9b:62:3b:c9:50:79:fb:94:
                    16:15:4b:6e:41:56:ba:10:25:20:e6:10:46:c9:f9:
                    cb:e6:f4:aa:a4:e0:47:00:f6:c9:2a:16:70:ae:db:
                    74:8f:f0:0e:0c:9b:36:28:40:ff:3e:72:f1:3f:0d:
                    6a:f5:8f:e3:4c:64:b6:5c:fc:38:c1:3c:39:ad:11:
                    57:1c:a8:cc:3e:56:9e:94:e3:26:d7:04:a8:f3:b8:
                    97:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:9A:09:2E:DB:54:BF:91:88:18:50:7D:9E:C7:19:CB:81:0A:86
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:5e:49:d6:35:ef:b5:f6:ef:59:c8:9e:23:4c:ce:0e:58:
         a1:00:c8:18:5e:d5:33:0b:f0:5d:ff:82:4a:d3:cd:cb:3e:36:
         c4:6d:91:cc:06:3b:99:26:ad:b9:b1:a2:93:30:89:38:70:02:
         cb:1c:09:aa:ee:22:54:de:b6:a3:14:9d:b6:77:d8:c4:a4:41:
         cf:04:3a:f5:7c:39:39:51:08:16:f5:91:86:83:b1:a6:79:4c:
         f1:fd:7d:a8:04:ba:24:4e:8b:7e:e8:7d:d2:56:63:98:90:cd:
         98:e6:29:25:98:00:9f:24:f4:8d:83:53:84:a3:78:c1:0e:f0:
         9b:de:ee:13:77:48:a7:3a:9b:1e:5b:90:2e:8f:52:9e:8d:b9:
         b0:55:93:03:ee:f5:f5:28:ac:40:3d:57:9a:c5:00:2f:8c:4a:
         3f:5f:79:30:3c:5e:84:c5:0b:6c:28:38:5a:98:bd:f5:42:5c:
         1f:a8:46:48:14:c1:d8:07:df:2a:86:cf:73:c4:df:81:77:24:
         94:97:df:9d:07:50:5a:4f:a0:d0:d3:cc:a9:0b:8f:f8:d0:d7:
         8b:55:26:dd:4c:2f:d4:96:d3:68:67:f0:aa:16:88:3f:6b:b5:
         14:01:61:5c:bd:70:d1:98:92:01:f9:c7:ba:ed:c1:56:d4:64:
         7b:3c:dc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:55 2024 by rpki-client on console-ams.rpki-client.org