Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File:                     FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier:          2JQ7bavWlhi9iej0JuB12H3K4qkdQZw77LCsk7i/qOM=
Subject key identifier:   81:D6:0B:2D:18:28:B8:F6:C1:0A:61:F2:08:F1:67:F2:43:4C:34:12
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       018F46B2FD41E2D01FFC36925F234960C255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number:          115E
Signing time:             Sun 05 May 2024 03:01:26 +0000
Manifest this update:     Sun 05 May 2024 03:01:26 +0000
Manifest next update:     Mon 06 May 2024 03:01:26 +0000
Files and hashes:         1: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: 1p8dOlsiZeWhq6P1cMER8iwYHvkufcSCwCAcaQhFbBc=)
                          2: IdHwqWcnQnrjxhy6PBRIpPdgTrE.roa (hash: l5H+ue/koHz9OnudwT56ONXwdZVxLqrdmDjmTrLDCbU=)
                          3: dKE-BsujfHGsgV3nDv3SJfNo7nI.roa (hash: j5TR5zzU+cGdaDI51gfABZtPYqzPEsJqoFOuQ+h3cLE=)
                          4: nnhQziMzbiF2kCnLpDzK_dfI-vQ.roa (hash: wu0U5Dp37ZTSNKpD//6Xn4RW5g5OcM/HJPC4AraP+tY=)
                          5: qJbtUZnuNrPepnydLbgtjkQ-l1I.roa (hash: PSTleqo2kX3IngQvqOB2cBq+aNxjbuVZZ9ONbsA8J0E=)
                          6: qezV-Jfq79C3NrCfT2_EPl8dN_k.roa (hash: 3jvQjedYDXVO3aLbRGmf0j9G6ZbqB6bjswJP5dvCN78=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 03:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b2:fd:41:e2:d0:1f:fc:36:92:5f:23:49:60:c2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: May  5 03:01:26 2024 GMT
            Not After : May  6 03:01:26 2024 GMT
        Subject: CN=81d60b2d1828b8f6c10a61f208f167f2434c3412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:7d:55:a8:c4:25:b9:49:ff:53:37:c7:32:
                    d3:10:5d:02:b0:4a:36:d7:3d:50:8e:63:44:1c:84:
                    7a:a0:ec:8a:e3:5f:b7:1c:92:26:da:01:e6:f6:64:
                    df:84:0a:04:37:47:20:77:0c:d0:63:4b:0b:59:c1:
                    44:df:93:e9:fc:8e:d0:7f:e5:1d:c2:53:b8:5b:02:
                    61:70:1b:f7:5c:f6:65:89:a3:0e:d8:32:91:30:a9:
                    1e:62:cc:fc:5b:03:98:95:c7:62:c6:63:5d:ab:95:
                    6d:fa:1b:09:4e:84:4d:61:24:c9:1e:8d:9f:7d:5b:
                    66:cc:14:fb:9a:db:56:b1:16:b8:7b:f4:e6:dc:6c:
                    33:24:13:fb:ed:98:2c:c2:d7:d4:74:a0:b4:7b:60:
                    d4:64:d6:ee:42:39:9c:f2:77:38:98:b9:ab:90:60:
                    b2:36:04:c6:50:18:ca:a4:1b:73:a0:e0:7f:71:1b:
                    a2:94:64:33:db:b4:48:58:2f:f7:66:e8:64:f3:00:
                    fa:c0:ec:4b:02:8a:88:01:56:e3:e5:fa:d2:5e:97:
                    9e:8d:71:ef:b0:9f:5c:c9:2c:e4:37:5b:76:e8:3d:
                    44:e8:4d:d1:aa:92:3d:12:83:e6:e5:49:86:a1:36:
                    db:92:55:e9:c2:53:8f:2a:c5:86:76:61:dd:61:00:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:0B:2D:18:28:B8:F6:C1:0A:61:F2:08:F1:67:F2:43:4C:34:12
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:72:f7:6d:ca:3d:13:78:5f:75:19:78:72:6b:61:8a:0e:52:
         9f:c4:d2:7f:87:eb:26:5a:b7:9f:b2:62:68:e7:97:e7:4a:3e:
         e0:f7:d7:38:94:ca:dd:be:57:d9:10:63:c6:01:41:83:ed:18:
         be:a2:69:0b:ef:9c:54:fa:f9:34:9a:cd:09:3d:f1:e3:d9:f7:
         62:53:0a:a8:41:73:88:aa:db:cc:ce:92:21:d9:c6:53:10:aa:
         13:e8:b6:9d:0a:fe:f6:9e:1b:e2:28:e9:fc:84:c3:ad:e9:eb:
         af:73:5d:8f:b2:e4:b7:b3:7d:05:d2:7c:ff:ad:a0:75:17:73:
         6d:77:ef:7b:20:9c:0f:61:40:3b:52:67:fa:37:a6:cc:98:b2:
         0d:19:ca:2b:24:1f:a5:ac:d9:63:5c:5f:17:79:81:7b:60:b8:
         75:41:59:80:75:5a:da:8e:b2:fa:2f:de:b6:3e:d1:0d:fa:ce:
         50:79:94:5f:f2:74:5f:57:d5:fe:36:e4:f9:de:2c:2e:7e:e3:
         df:d4:8c:f1:56:28:31:57:d3:b9:6d:e2:a9:7b:0e:c0:32:ab:
         48:a5:c9:17:8c:63:6d:1b:42:b1:ae:0e:8a:a7:a5:9a:81:63:
         d6:6d:dd:97:56:66:4e:3a:29:ae:f7:09:91:3b:c3:e8:f2:f6:
         ff:79:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:37:14 2024 by rpki-client on console-ams.rpki-client.org