Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File:                     rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier:          fHbWYx7OqX1ZJORFpVskGcpQUnlQ35FZUPomR1J8ESI=
Subject key identifier:   E7:1B:3E:F7:33:77:FE:1F:CB:78:A1:94:68:8B:8C:2F:A0:79:87:59
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer:       /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial:       018F5A39972D38C3521338F3D0F330B5EE9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number:          1165
Signing time:             Wed 08 May 2024 22:01:14 +0000
Manifest this update:     Wed 08 May 2024 22:01:14 +0000
Manifest next update:     Thu 09 May 2024 22:01:14 +0000
Files and hashes:         1: OcBWVVCBko1z9btCF6D7WARYzY0.roa (hash: M1+gWPU29WI/jqr/r1CDxz8jj6f75jYfDiBzmur6QHQ=)
                          2: U7uH5vJctFYUJQH0FpMX2JKApQY.roa (hash: o8Mg6VzatmEBJlHm8UqYd+4kfVY/H3cbHJTkH5bmk94=)
                          3: VF8bfQg6w0asv6lm0nVK7YBkF9s.roa (hash: 0YfXvsqhVjiurgfIAuNgN4UNC1R/IUFaKXNk5fWRfDE=)
                          4: YH4CVZlgUXfDTiUaj3YI0Zqe6yM.roa (hash: sj/zHGCQNZH2mdamdrqI/nt8mBBtNbVugiI1ZJB+2UQ=)
                          5: j3m9jmfEqzgEeYlfMWX06c-mIXo.roa (hash: gjJoSPmh2gspKLQUaVo4NCLBilqCIxX58RkzypDTs8c=)
                          6: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: fHkk/j99o9ZhAntBPhBX6+tdYFC/imEa5CFmeIs3M3U=)
                          7: xrHb9RLfLgGyrp6vySbN9qL4WXI.roa (hash: JI/HQb/xh9nsLtZwI1KZbFosNinwBYXfmn/O3PFNXKw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5a:39:97:2d:38:c3:52:13:38:f3:d0:f3:30:b5:ee:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: May  8 22:01:14 2024 GMT
            Not After : May  9 22:01:14 2024 GMT
        Subject: CN=e71b3ef73377fe1fcb78a194688b8c2fa0798759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:e5:e7:5c:34:a7:9c:81:5f:27:62:7c:09:
                    19:b3:3e:81:83:77:25:89:7a:d7:05:f2:e3:6f:97:
                    3d:b9:81:fb:ae:b2:55:f8:4d:78:13:97:b7:ff:76:
                    e4:b4:b3:fd:48:85:d5:44:0c:64:8c:80:ab:0a:98:
                    92:f4:aa:e6:c4:a7:be:e0:37:71:b2:bd:f1:c8:f0:
                    59:d8:00:75:28:78:fe:1f:f1:db:73:16:0c:01:bd:
                    89:c0:2e:1b:7a:da:b5:50:40:fd:64:b7:83:ea:32:
                    4e:3f:4f:e4:41:75:70:f6:9e:70:33:ce:4f:9d:f6:
                    b8:ab:11:77:de:81:7e:a2:29:d5:46:4d:c6:d4:1f:
                    98:9b:51:9a:93:cb:ca:b0:33:0f:4c:5a:d5:ea:74:
                    4f:98:b7:3a:e3:5e:55:36:ee:c6:73:3e:85:46:01:
                    77:3d:5c:f5:c3:6e:68:ae:ba:51:8b:42:02:8f:cd:
                    10:1a:24:aa:f5:b2:7e:ac:63:e0:69:ed:d2:91:3a:
                    2f:dd:9b:9c:c6:df:b3:5f:3b:99:16:4b:06:f8:f5:
                    27:01:6f:98:5e:10:15:66:88:43:f7:3f:55:c5:82:
                    e9:ef:4a:0c:1d:a9:a3:1e:45:ae:81:4e:87:66:3e:
                    c6:d1:41:0c:a1:19:c5:49:ad:33:2d:94:b8:41:79:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1B:3E:F7:33:77:FE:1F:CB:78:A1:94:68:8B:8C:2F:A0:79:87:59
            X509v3 Authority Key Identifier:
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:02:50:ac:a7:21:50:04:5d:11:42:3c:2f:3e:24:a2:9d:7e:
         2c:0d:78:de:80:d1:d2:9d:71:f8:b9:cb:c4:4d:b4:4e:49:15:
         83:03:ed:72:ca:2d:e0:2d:3c:1a:33:ad:5d:ac:70:34:09:49:
         8b:74:ac:d9:bc:19:a2:3b:71:30:ac:fe:0c:87:e6:01:ef:b8:
         15:cc:03:90:67:c6:0f:e1:b1:8e:7b:d2:72:25:24:1b:cd:2e:
         89:a7:14:c8:1b:53:9c:43:de:85:60:c9:5b:0d:dd:ec:b6:bc:
         c5:29:45:60:22:a3:b4:5f:65:d0:ca:f4:b1:47:91:87:04:b7:
         8f:aa:cd:9a:2a:08:4a:3c:60:d8:7f:65:46:23:c2:9e:96:99:
         56:94:87:07:bd:94:fa:75:6a:44:ad:6b:50:43:95:cb:33:7b:
         d2:45:c5:f5:8d:be:b2:71:a1:2f:1c:26:be:2b:25:a9:04:69:
         9b:92:c3:ee:d4:8d:53:43:1f:45:2b:5b:b1:4f:d5:a1:80:45:
         0f:ba:f2:27:68:fa:95:1c:c4:e6:97:f8:05:3d:52:a5:2d:0f:
         70:96:11:e4:80:29:c8:7c:b3:56:d5:46:5e:1f:58:01:53:34:
         1f:ef:07:c2:86:cd:66:40:58:56:9f:8a:4a:0a:ef:3a:a1:a8:
         a7:81:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 06:29:11 2024 by rpki-client on console-ams.rpki-client.org