Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File:                     8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier:          px+svDI3UXKlgjXgEXR8MvJU1hdrzxAjlKWmybQt/eE=
Subject key identifier:   78:EF:CF:7C:3C:37:24:66:57:B4:E4:73:AF:84:79:7F:CA:AC:3A:E3
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       01906D18C69B00440D02CF2F389B38CCC040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number:          1184
Signing time:             Mon 01 Jul 2024 07:00:58 +0000
Manifest this update:     Mon 01 Jul 2024 07:00:58 +0000
Manifest next update:     Tue 02 Jul 2024 07:00:58 +0000
Files and hashes:         1: 58cB_X50v8ynym-th3yG33AYFvQ.roa (hash: 5Fo22lS4X4jhmCFQNpvjFApqZukFdwhcRMLgJ90xQtQ=)
                          2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: XjRGF+ApycyluY7FBhMEKepJSfkcy9IbYAGnE0H4t7U=)
                          3: E1DE8X6j7bgx7XbOOgsHzJYmVXk.roa (hash: TO8NkPXST/nt+MJKSG2YdfrW6fXdvdbWrMfp5JvZo40=)
                          4: HdTGVqbOE9YXW52yUXuHGH7aWTE.roa (hash: FrFaZ2zfMLQFRbThHaQMLo3p7Ndl0ocBB0Ne4xSCWAo=)
                          5: mzBCEFUQOZqgMwJMRuK6JVWcM-0.roa (hash: AVF7oohtla3GsvJFlga6VElVCM0hj56Ze9pOP9sxYZc=)
                          6: y3ud1BI-7mxfE3q-5zCITtbfb3Q.roa (hash: DtfhSApSUw5cn+b0WOqZt0Xh1KN+IAkFyWjvZm3j8HY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:18:c6:9b:00:44:0d:02:cf:2f:38:9b:38:cc:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Jul  1 07:00:58 2024 GMT
            Not After : Jul  2 07:00:58 2024 GMT
        Subject: CN=78efcf7c3c37246657b4e473af84797fcaac3ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:82:85:28:e4:c7:ca:eb:f3:4d:45:5a:3a:
                    82:63:e0:d0:e9:0f:eb:b0:e5:82:be:dd:73:99:d8:
                    d7:40:79:6c:55:51:6d:2e:d5:e5:f6:78:8b:33:67:
                    00:2f:5a:d3:7e:5d:3f:55:e8:66:01:b3:2d:53:18:
                    68:24:58:bc:4f:b3:d5:73:1e:f5:7f:8f:42:d7:b4:
                    a5:2e:69:92:d4:f0:46:79:84:ba:47:86:98:23:95:
                    3d:ab:60:cf:d1:db:3e:cf:42:47:fe:9a:9e:2a:bb:
                    fd:b5:19:58:be:2f:1a:59:34:f7:d1:7c:4e:3c:4f:
                    71:9c:3a:df:a6:94:a3:13:81:d4:8a:ab:75:f2:06:
                    2d:87:8b:de:f2:48:c3:62:31:02:fe:b3:18:c6:2b:
                    15:0d:23:4a:63:1c:b6:31:35:d2:5f:ca:c2:b2:7d:
                    9f:95:da:4f:af:9c:b3:2a:85:d2:20:a7:e7:89:e6:
                    e2:67:f7:cf:07:64:eb:0d:32:a1:23:a8:1e:bd:9e:
                    22:21:62:9a:0c:f4:7f:78:3a:de:a4:61:a9:de:57:
                    c7:df:b4:13:b0:5c:fe:96:8d:43:5b:f0:d8:20:46:
                    f8:a0:fd:ea:27:9f:8d:ec:d4:90:c8:9f:2d:e7:c6:
                    5d:57:d2:65:82:7d:31:6a:36:75:7a:f9:b0:2d:e2:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EF:CF:7C:3C:37:24:66:57:B4:E4:73:AF:84:79:7F:CA:AC:3A:E3
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:df:ef:4a:63:62:7a:37:9f:df:83:ea:7b:fd:ee:8c:de:f7:
         16:fb:9b:3f:91:d7:ea:45:1c:2f:ff:c4:e7:b0:8a:28:61:06:
         d9:72:9a:e9:a0:91:b3:c9:70:95:bd:7c:58:42:a1:c0:d6:2a:
         43:94:57:ca:21:c8:bb:08:8d:0c:1c:9a:c8:94:aa:57:88:3b:
         4a:03:2b:2c:ab:16:ce:98:0f:a4:22:cd:74:4c:3e:d0:c9:85:
         20:29:9a:10:bb:df:2f:a2:dc:fc:34:a6:bb:a0:cd:31:0f:68:
         02:a1:aa:ad:29:aa:b8:92:39:fc:f0:21:4a:6c:07:3a:d9:04:
         bb:c7:b0:8e:52:71:fa:8f:6e:19:cd:d2:a0:e7:cf:e6:d8:ce:
         94:9f:24:72:49:a0:bf:7f:d4:33:36:a0:65:1f:09:b3:57:21:
         db:53:6d:68:f0:da:49:a1:c6:9c:85:8c:f5:38:9c:65:59:55:
         a8:48:d5:8f:f8:67:31:b6:f7:51:80:c0:ef:03:9e:d3:d6:bd:
         0f:b3:9e:4a:8f:e2:bd:aa:3a:e6:0d:c8:6e:8a:06:6b:f2:74:
         14:d5:1a:18:4c:3e:27:30:12:9c:6e:d4:1d:38:49:6b:83:7d:
         44:b9:d6:d5:49:b4:22:0c:9d:b1:08:d3:00:65:e8:10:cf:7b:
         3b:a6:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:13:30 2024 by rpki-client on console-ams.rpki-client.org