Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File:                     xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier:          uBBMq7NfUTyW87cwy0GqEkXP+DV06wP8Qqj1O7Qo5WE=
Subject key identifier:   61:E7:77:D1:FE:38:FB:5E:1A:F0:77:89:43:A0:B8:4B:2A:79:C3:14
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer:       /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial:       018FB3B3BA3E42A8D4A179040A08DE264E65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number:          115F
Signing time:             Sun 26 May 2024 07:00:51 +0000
Manifest this update:     Sun 26 May 2024 07:00:51 +0000
Manifest next update:     Mon 27 May 2024 07:00:51 +0000
Files and hashes:         1: EeHOFYw4OBgMr-uxMvRkIeHy2iM.roa (hash: u51mfJlBO9fgfaqgRWkB+pfbLUifxMbNsaqPLXNVkcA=)
                          2: IWZopWJZAvEzrNRoLzepcyt15nM.roa (hash: zOPVO5jzH6DbGScVheIVXghs2bfXXb0nDGj2eWQjUSQ=)
                          3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: tyk9G1Te8k6G3ohGQ28Zg86OFFpM4booye412XAzvFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b3:b3:ba:3e:42:a8:d4:a1:79:04:0a:08:de:26:4e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
        Validity
            Not Before: May 26 07:00:51 2024 GMT
            Not After : May 27 07:00:51 2024 GMT
        Subject: CN=61e777d1fe38fb5e1af0778943a0b84b2a79c314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:e2:25:4d:1d:20:20:65:54:0b:59:a4:d7:
                    02:75:77:a8:61:75:a1:4d:f9:ad:27:3b:bf:79:42:
                    a1:2a:de:48:6b:39:f7:05:18:67:1b:b5:05:19:63:
                    f6:f0:65:81:cb:76:a0:88:b0:cd:a2:eb:42:be:68:
                    80:23:11:11:28:a3:29:af:5f:0a:65:1a:91:a3:75:
                    69:17:64:ec:97:10:c7:d9:7b:61:b0:7f:da:b9:5d:
                    2b:f7:ae:5f:13:51:e7:2a:3f:ea:37:e9:bd:43:1b:
                    cf:4a:9d:b4:f0:4e:71:70:0c:60:83:c9:dd:b9:91:
                    11:f9:23:76:30:86:2a:11:7f:7e:7d:cd:27:3d:0e:
                    c9:fe:c3:67:1c:dc:75:33:dc:a1:9f:9b:78:d3:12:
                    46:45:19:be:41:8c:86:7f:a5:d0:6d:00:f6:01:c6:
                    d4:d5:53:71:b1:f9:a3:0f:de:71:a3:1b:9c:fa:29:
                    1c:78:b7:79:d1:64:45:c9:58:73:69:9d:ec:06:71:
                    8e:7a:cb:91:d8:aa:2c:fe:fe:35:01:39:eb:f6:09:
                    da:68:47:46:8c:f1:68:8b:a3:04:4b:9a:d2:6c:20:
                    35:b2:b5:7f:db:ae:a5:b7:2c:fd:1c:22:87:45:71:
                    8b:52:04:8f:35:e7:45:c4:ac:e8:d2:5d:40:bd:d2:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E7:77:D1:FE:38:FB:5E:1A:F0:77:89:43:A0:B8:4B:2A:79:C3:14
            X509v3 Authority Key Identifier:
                keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:be:4e:8f:b8:9a:e7:a9:4b:40:32:6b:f3:fe:09:c9:0b:
         ac:62:22:12:aa:34:c7:6f:99:a4:d4:6b:96:d0:cd:30:ce:d2:
         92:dc:fe:7c:ce:09:f1:14:02:aa:6a:2a:44:f2:ce:ec:6b:22:
         a1:d7:3e:ef:6b:06:94:91:86:fa:aa:ca:87:d5:33:2a:d9:f1:
         62:65:87:41:94:0a:73:e5:03:6f:b4:91:64:41:d5:ca:d8:a3:
         0a:b5:2e:95:66:ed:e4:a7:cf:6f:8d:63:1a:ca:47:6f:82:6f:
         c4:c0:b3:48:5d:0c:d9:37:96:7d:83:0b:aa:f6:7c:d2:2c:75:
         ae:a8:a8:e7:74:8a:ad:39:f1:ef:62:0d:9e:29:76:4c:67:20:
         f1:f7:52:de:3d:1a:8b:86:60:53:d9:1e:4c:b6:c3:d5:5e:08:
         75:4b:e6:bc:4a:cd:05:da:d8:f8:22:81:db:28:99:bc:67:a2:
         11:1a:dd:75:91:84:b2:24:cc:d3:47:01:9a:08:89:33:a0:e2:
         77:10:31:77:c1:a9:3b:02:04:ec:32:dc:f0:4d:da:b3:ae:69:
         25:4d:5d:cb:54:f4:48:4a:33:b5:a9:c4:b9:37:67:34:86:f5:
         3f:b7:96:84:8d:49:cc:ef:05:ba:f0:28:bb:c1:ed:44:39:10:
         e3:f5:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:09:15 2024 by rpki-client on console-ams.rpki-client.org