Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File:                     D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier:          NOaDCAmZ965ipi2YviUkPsNaykG3iGOKGHVS8UOjxSU=
Subject key identifier:   48:38:F9:DE:A3:83:98:C2:0E:98:E5:34:88:67:AC:BD:97:F5:5F:EA
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer:       /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial:       018F55B80F47A3CB375B36932904CE28D880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number:          1164
Signing time:             Wed 08 May 2024 01:01:16 +0000
Manifest this update:     Wed 08 May 2024 01:01:16 +0000
Manifest next update:     Thu 09 May 2024 01:01:16 +0000
Files and hashes:         1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: 043/mBvvCmLQQn7VFGk/FAIqj0nw/A3xME6VIBxoCbI=)
                          2: bWvPkaR09c6Cswk7dqX7MszV_iA.roa (hash: v8VTLGFtn0o9f6WDz5qR6djpajxYLTh/VRssiJElxcs=)
                          3: gJWSe5nHoNEmAASovwBKDAfkIsU.roa (hash: jQblCMWeR9oTOm8dnyqhnxMh51TGmnviYohwH4IpMe8=)
                          4: zAxwOaJ6Tj4pwZgrEweoyWcZv6o.roa (hash: 1B84Uc6i1uje0IUsyXRgood4kf8BJ4ak9JLHIO0RD6E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:55:b8:0f:47:a3:cb:37:5b:36:93:29:04:ce:28:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
        Validity
            Not Before: May  8 01:01:16 2024 GMT
            Not After : May  9 01:01:16 2024 GMT
        Subject: CN=4838f9dea38398c20e98e5348867acbd97f55fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:d8:b1:66:31:3a:3e:e8:e6:aa:32:12:e1:
                    f1:ce:60:54:ac:6f:ae:a6:74:99:7a:d7:33:21:e0:
                    d8:45:e2:1e:da:34:50:86:16:8a:59:ab:88:da:a3:
                    88:b8:1b:e3:4a:26:d4:19:e1:07:27:5d:4b:f4:10:
                    16:97:21:7a:97:5a:6c:e8:ea:94:fc:9b:db:83:a6:
                    21:8f:34:de:ee:bc:18:38:02:9a:3b:1c:37:b7:fe:
                    7d:c1:cd:b2:b0:77:92:82:66:dd:15:c4:e2:cd:42:
                    d7:4e:d8:a2:a7:4b:8d:cf:50:aa:00:b0:4e:07:2b:
                    6a:b3:d9:75:45:b9:ed:21:bb:d9:9c:a1:75:fb:c4:
                    72:4f:63:e3:85:25:f5:39:20:9b:ae:ae:52:e3:b9:
                    cb:43:e6:bb:15:46:2d:52:f7:ae:9e:b5:98:95:d6:
                    f9:33:e0:89:08:2e:e2:6c:e7:61:e7:c8:79:cb:de:
                    be:e7:be:c4:05:fb:d9:96:8b:32:b2:30:9f:cc:c7:
                    09:b7:e3:a0:00:48:a9:50:cc:89:50:5a:f2:3b:e8:
                    01:1b:0b:67:f1:31:8d:8c:2d:20:fb:f8:9b:7b:c9:
                    62:1b:03:ef:91:1c:0d:1e:c8:41:7b:75:39:5f:38:
                    fe:1b:36:a0:61:d3:95:34:77:b1:7d:5a:03:54:b4:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:F9:DE:A3:83:98:C2:0E:98:E5:34:88:67:AC:BD:97:F5:5F:EA
            X509v3 Authority Key Identifier:
                keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:94:07:c2:fa:fa:64:68:d4:85:97:92:a7:a0:d2:01:a5:
         9f:03:5c:94:2c:bd:d7:52:b7:ad:77:55:4c:0d:97:c0:52:b1:
         d7:52:cd:1e:1c:7b:ea:f4:62:37:f2:a8:38:6f:6a:8d:f5:a2:
         ba:bd:52:65:08:ff:18:1b:47:71:b7:d6:3b:86:c7:8e:e6:e0:
         75:0b:9c:af:09:96:5a:63:e0:51:d8:6e:55:d8:45:fe:97:00:
         b6:7c:d0:35:ca:5c:95:67:95:f5:f1:c8:61:fd:bc:ac:86:3c:
         23:1c:6d:c8:92:f9:b2:18:4e:fa:aa:a5:da:27:4b:38:3f:76:
         a2:89:08:ba:8d:f7:2a:ff:34:ec:77:27:b8:24:a4:47:b4:5d:
         0f:68:6c:ac:56:00:ec:5f:1d:7c:c9:82:5a:6e:62:87:74:86:
         b1:1b:3c:54:a3:a5:8f:d6:71:91:7e:66:04:a9:10:35:30:da:
         2f:81:5e:be:6b:1e:16:ae:f0:bf:d8:8d:5d:1b:e0:68:72:f9:
         55:70:5c:0f:b8:c1:01:be:ca:1b:b5:02:56:3c:e9:ce:50:61:
         10:53:73:45:3d:92:9a:6b:b2:c3:49:35:09:1c:df:93:47:dd:
         9f:0b:e7:8a:c5:81:7f:18:ce:5e:59:33:4e:eb:da:1b:9d:dc:
         43:2b:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:35:02 2024 by rpki-client on console-fra.rpki-client.org