Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          Da0tBvfrku+UPlPsA0fPn2QrdXyz9VFCeAsFA+WaC3g=
Subject key identifier:   EE:FD:D8:EE:18:70:AA:66:2D:FD:40:84:4F:F5:B4:BE:5D:6C:24:F1
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       018F87EDCC0E5AB98673FBA98652C50BCCF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1409
Signing time:             Fri 17 May 2024 19:00:59 +0000
Manifest this update:     Fri 17 May 2024 19:00:59 +0000
Manifest next update:     Sat 18 May 2024 19:00:59 +0000
Files and hashes:         1: 1-axFyWRN1tBOmwTeWkPOaozpACs.roa (hash: Qb1nBIGjwmWZsaFKj4Nj+e6YYM4hHR9IJs+I77eui7o=)
                          2: BUCddGK-K56zyXdsHcQg3xXOZVs.roa (hash: F4oCeplNztdiTlRbmJ1yMqowhZlCEMsLrl0JFSECwkM=)
                          3: RgDBmrzg7vqe8HH-CCGWI4NTr6Q.roa (hash: 4uLT22PIarj72WPImOXDOjnx1svPiw2ryGHKMbExDAA=)
                          4: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: OWAibFs8goL18FAVtCHDjE8NZ8dEQ3mR0Us5N9+S7sk=)
                          5: ii3FV5gnk822mL2XgC_hs2hhKbI.roa (hash: I55WHNx3ZC+oeHHlNqCewctDygAFtKAxzsJpWP9P7Xk=)
                          6: qemznU51ir6q1B00izpHzx5iL9k.roa (hash: rgS6UllgEzffD53EhiGg0X3+S1UooMJjBifzrEyeOOQ=)
                          7: vq6cWNXN-vgxWRWNULQfBaRl2zw.roa (hash: qYYwOiYgLuQfP2ll5TTi/t0gDEtni+1LoGiyGMFEzPw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:cc:0e:5a:b9:86:73:fb:a9:86:52:c5:0b:cc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: May 17 19:00:59 2024 GMT
            Not After : May 18 19:00:59 2024 GMT
        Subject: CN=eefdd8ee1870aa662dfd40844ff5b4be5d6c24f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:76:22:95:ff:70:d1:85:d5:47:2c:db:ed:b9:
                    71:6d:85:b9:9b:78:67:9d:3d:3e:6b:ed:ce:33:92:
                    5f:86:75:eb:fa:8b:f9:65:00:15:0c:5f:65:40:3d:
                    eb:a1:53:24:c7:af:2b:08:92:e6:f9:bf:64:c3:35:
                    46:12:97:63:a0:d4:5d:d5:a2:40:ae:34:cb:42:2b:
                    6e:89:c6:87:96:d3:e6:8d:16:0c:1e:74:bf:13:e4:
                    91:18:81:74:1b:29:54:36:92:93:f5:24:85:65:42:
                    f1:fa:8d:5e:e2:27:74:bd:4f:2b:bf:74:dc:ce:80:
                    eb:40:b6:50:14:cb:56:5e:45:15:6a:a2:90:59:9e:
                    bc:e3:d2:81:65:89:62:20:30:77:30:94:82:f0:e9:
                    f7:e9:51:eb:36:1e:bd:6e:03:62:87:d0:14:60:e8:
                    d4:6a:e4:b9:bb:3f:6b:d9:9f:df:2a:ed:07:81:dd:
                    44:20:fe:c6:d6:57:e8:4a:66:b9:4d:26:a6:00:85:
                    26:0d:5b:e6:6f:8a:f2:a9:53:40:8a:e6:85:3b:2d:
                    0b:db:4b:bc:58:d2:21:6a:b3:0f:bb:0b:47:e1:c5:
                    7b:3b:a0:01:71:f3:2b:fc:83:c1:d2:f8:41:88:c7:
                    0a:84:fb:0f:e5:13:c6:29:4c:6d:18:06:9b:14:3a:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FD:D8:EE:18:70:AA:66:2D:FD:40:84:4F:F5:B4:BE:5D:6C:24:F1
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ab:4a:99:39:86:c7:66:21:5e:b1:25:5e:a0:47:db:86:5b:
         9e:1a:15:67:17:86:e6:36:86:a2:b5:54:60:97:32:65:7a:fe:
         cb:01:05:2a:e4:74:2b:4a:54:d0:1e:6b:b1:7b:f2:14:3b:21:
         47:61:cc:23:23:0c:8d:14:31:57:12:78:d7:98:13:b3:9d:5b:
         10:5c:4e:f5:55:f5:49:33:5b:fd:c2:70:3f:d9:41:67:14:ec:
         91:79:a2:0f:ce:17:85:44:d6:fe:a7:b0:45:92:d9:04:c8:2e:
         3c:ac:8e:6f:16:a5:2c:db:6b:06:dc:84:f4:23:1e:17:46:3e:
         81:0f:93:64:17:31:f6:0c:d0:1e:80:e7:bb:d9:2c:9a:66:6a:
         7d:bf:7e:b8:43:9e:c3:d7:ce:ef:48:64:d7:8b:94:99:b8:6c:
         1e:e2:13:cb:9f:f5:49:66:fe:0d:e6:34:f2:c8:f4:6a:fb:5d:
         17:bd:5e:58:da:43:c7:18:ed:77:2e:7e:69:94:e7:76:b1:ce:
         81:9e:2d:f9:9b:53:dc:d6:0f:3d:91:33:2c:69:27:72:45:73:
         db:4f:41:75:a6:00:16:ee:c8:2c:bb:82:a2:27:aa:39:56:3a:
         1b:fe:99:c1:34:a7:9f:d6:5f:d4:e9:9a:00:53:0e:00:b7:2a:
         fa:7e:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:47:09 2024 by rpki-client on console-fra.rpki-client.org