Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          PQX+oQP+wg6HknFVD2cNG4xMXSH6bs3dzi4dqJpCRkQ=
Subject key identifier:   ED:E8:65:3F:25:40:5F:61:65:1E:B2:17:34:E9:ED:65:AE:B1:C9:BD
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       018F88240A5846C8BAD0992812BD76B89E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          0669
Signing time:             Fri 17 May 2024 20:00:14 +0000
Manifest this update:     Fri 17 May 2024 20:00:14 +0000
Manifest next update:     Sat 18 May 2024 20:00:14 +0000
Files and hashes:         1: 1bTpAHvlGbug60JcMHM1rZ1YA3k.roa (hash: 58UfeSPyJ5HrAH0YCUfoPBF/iHeopHbKpriiMZyoLUE=)
                          2: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: CsCMDIxzvmMTMZx/0+mTsHi1rCKA90stPH6J3cSm7Lk=)
                          3: aLQk9MdRTxk9W-fRYgwW1pdYxy0.roa (hash: sVKBV4gNDabJYl8ZuHNAGadDWtAzqM1QWbyHS27jrQ4=)
                          4: oLmaOEVE8DwjuTJAAVhAlJxNyOI.roa (hash: 7V52S6eLl2ubh3jMoLQQbYbapg+Zuh79qTxYiUHRJ5I=)
                          5: vJldmS4uYPKMfZrcGvQ9Dm6u9UU.roa (hash: FVmdSOQf/IggBoSL5UF3pAM4sosSusQ/X4TY6Vtio+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:0a:58:46:c8:ba:d0:99:28:12:bd:76:b8:9e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: May 17 20:00:14 2024 GMT
            Not After : May 18 20:00:14 2024 GMT
        Subject: CN=ede8653f25405f61651eb21734e9ed65aeb1c9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:62:44:e9:2c:e1:7d:69:0d:21:56:05:c8:
                    1d:f3:cb:02:9c:30:03:ac:92:a1:6e:ff:ae:49:57:
                    61:4c:fa:c4:a7:38:d3:a5:4e:0d:fa:48:50:a1:08:
                    f5:b2:82:2f:f8:c4:ed:8a:92:ea:46:38:14:32:9d:
                    4e:e8:e9:75:e0:17:e6:09:55:b3:f4:1b:75:c6:27:
                    c5:1e:6d:99:73:e2:9b:5c:bd:53:4e:b2:ba:ac:a0:
                    d8:e6:a7:26:3b:d9:ea:48:58:b3:b4:6a:d9:6a:53:
                    bc:b0:6f:04:54:6f:a8:95:90:36:48:34:05:35:68:
                    d4:15:4e:bc:31:85:58:bb:73:aa:76:e7:04:c5:fd:
                    c5:e3:f3:10:19:6c:19:5e:83:4e:5c:70:35:64:f5:
                    5b:3b:bd:68:02:67:00:f1:5d:cb:83:07:9b:42:70:
                    03:19:6e:a7:6a:67:cd:82:40:28:44:02:04:5f:1b:
                    82:0e:eb:57:d1:54:7f:7a:fc:4e:27:eb:1b:a3:a2:
                    1e:ce:4a:0a:86:e6:de:38:f7:0e:f5:2c:53:84:55:
                    51:a5:8a:01:57:80:48:17:98:6b:09:68:6a:2e:bd:
                    eb:1b:13:e2:9f:95:df:08:77:0a:ce:00:35:25:49:
                    e5:c5:15:67:94:53:1c:6e:f3:00:1e:52:5e:3b:3e:
                    f8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:65:3F:25:40:5F:61:65:1E:B2:17:34:E9:ED:65:AE:B1:C9:BD
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:90:4a:2b:0d:1e:fd:92:de:04:79:dd:cd:e0:c1:1f:3f:c0:
         e0:f1:13:8a:41:fc:d1:6a:d3:db:c9:4a:70:14:37:ef:6f:9a:
         7e:dc:af:77:75:04:27:3a:d7:d1:52:1c:25:48:e6:8d:3b:f7:
         31:c3:66:4a:60:d8:0a:47:95:8c:cb:da:b3:6a:09:d3:0f:57:
         b3:3e:7e:40:ef:21:e2:ca:94:69:1d:c0:de:3b:d5:8c:2a:cc:
         13:5a:73:d0:e3:f7:9b:eb:7a:be:ec:14:c5:37:90:1a:b3:5d:
         e1:dd:4c:4a:5e:96:7e:5e:52:08:b7:8f:a9:0d:dd:52:0b:90:
         ed:a9:c1:33:65:7a:68:90:92:18:ac:c5:74:9d:81:88:68:99:
         bf:dd:38:68:22:e0:9f:e4:1c:d6:f7:5b:ed:ea:b1:b4:7d:76:
         5a:86:6d:23:9c:ea:59:49:44:90:88:92:07:ee:21:a2:83:a9:
         cb:23:0a:41:f5:c9:04:71:fc:4e:0a:80:57:4c:c4:1d:da:76:
         05:4d:7a:05:5b:7d:08:c5:73:ed:c2:f3:8c:96:ae:f0:6f:ff:
         65:41:bc:69:f2:73:9d:cc:b5:60:ab:46:6f:28:2c:de:b1:64:
         a1:fb:10:d4:e0:e7:5f:46:cf:1e:4b:52:43:0a:55:cb:7e:e9:
         2e:58:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:37:58 2024 by rpki-client on console-ams.rpki-client.org