Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          RoPuaVqR2jDXtgxGaa0dsl7TpcciyXZyvYjLOb0gA70=
Subject key identifier:   E8:25:E0:F4:CB:77:CF:DC:0B:BD:32:6E:0F:C6:D3:12:ED:C1:08:3E
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       018F170F17F0A3E75BF4891EED0862971F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          1159
Signing time:             Thu 25 Apr 2024 21:00:16 +0000
Manifest this update:     Thu 25 Apr 2024 21:00:16 +0000
Manifest next update:     Fri 26 Apr 2024 21:00:16 +0000
Files and hashes:         1: 1IrHoCnh7EO4eGQnBCxSiUBr1hw.roa (hash: TPZkuDlDjktt6HelCHAGmjm/2vU1R+GI2rgEssWaQOU=)
                          2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: y8ZMkCXP5pcnlCH4bBpRAlOp8hAR4DC+biacJOJDGvE=)
                          3: 8MaXvUfyuaLuULVEjSbKjcaVrTk.roa (hash: i0TGzXaaB+jGndKWm8vvHYZkRfXsyfcy6iXz1Tlm494=)
                          4: 8XOiDIJ8drK3nCBvRuKwN2I9cYc.roa (hash: vqRANNIzF4wlCZ6eUdmz3vpaE+SdXgMIJpj3rNWJtgg=)
                          5: GL3biAgwLybBwj0cGljZT84rGSk.roa (hash: 2UqyhpQ2LSGy0Q0IgdwD63Tg/XcYUtP0s6gCJ/Up4I8=)
                          6: HLclWPzkjjK6TLDTkxP7IXqPhOI.roa (hash: ycnVcsVzUbRkcn0RFBta++o9B0+wlbAm0deoECTIa0M=)
                          7: KtQfEbjEkvI9-TJ29U3XBm5FIIY.roa (hash: QAi82OazuMtpKKkZqrmCmOD5NnM1h5Dlbq9iPwCxu7M=)
                          8: _ugq4K177Y9HJkTpyJYUub5p6OY.roa (hash: FEVR2O86Iku2J8AKHIoawPwgt2ucSupEXZueKpz3IiM=)
                          9: aQ7kWw-zQ8wa8-Oi5QtiXI85emc.roa (hash: fsuVQdrsvsdVTo68zIzKws5KfqRf0ASYdBaFusQquBM=)
                          10: eNwIFdF3H_dMpRNYi_q2Nl6rlok.roa (hash: ZuOICR7vYPDdrqA0N9zZfyHROTBU81YOP4pc9HMXIE8=)
                          11: qe7lrCsm-aCPjRzjZZvceOA5oys.roa (hash: RrfzJOzmtYK+m79b1dLLacbaLWk/HpMczsWznSVNa8w=)
                          12: t4iSYxFp0jYc0JpGFFCPx104yMY.roa (hash: jlEZSkmZTqPUfKt8Qcns5PGyPgwUb1tpcI3qfTJeMy4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:17:0f:17:f0:a3:e7:5b:f4:89:1e:ed:08:62:97:1f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Apr 25 21:00:16 2024 GMT
            Not After : Apr 26 21:00:16 2024 GMT
        Subject: CN=e825e0f4cb77cfdc0bbd326e0fc6d312edc1083e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:a5:94:d3:9f:20:95:cf:65:2f:18:02:74:
                    20:1e:57:24:ab:31:cc:22:c4:a8:65:c5:22:de:b8:
                    17:1a:94:82:a9:ec:a3:0f:96:19:b8:8f:0f:33:1a:
                    0d:92:4b:1a:bc:f3:15:33:8a:1a:2a:84:5b:5f:39:
                    f0:8b:9d:55:e9:bd:16:fb:18:7e:e8:4c:46:7f:a5:
                    9b:ea:ba:54:e9:76:0a:11:ae:87:0d:dd:6c:4a:e6:
                    78:27:fd:81:1d:67:ee:ab:ae:e2:bd:70:50:a6:92:
                    c9:f3:54:35:a6:12:33:e3:ea:33:54:a7:08:cf:73:
                    c5:76:7d:49:2c:5f:31:d5:3d:f2:06:0c:48:07:d1:
                    7e:59:aa:64:31:8d:a2:ec:c6:2c:fb:0c:a9:6c:ab:
                    2a:8c:99:c9:be:4b:82:7e:77:47:68:c8:7d:17:e7:
                    8f:e6:71:4a:a6:24:60:9e:48:55:6d:ce:3e:a5:a4:
                    88:de:67:54:ad:f8:63:3c:b9:a6:e6:39:a7:36:93:
                    c5:03:9d:2c:6c:f8:7c:3c:0c:6d:0d:1d:a4:c2:20:
                    31:62:86:6c:1c:c7:03:3d:8d:92:f5:47:33:1f:39:
                    68:68:68:34:83:18:be:dd:bc:0d:28:c4:9e:c3:f5:
                    a4:83:8f:74:02:d2:1a:2c:d3:73:fe:80:49:73:38:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:25:E0:F4:CB:77:CF:DC:0B:BD:32:6E:0F:C6:D3:12:ED:C1:08:3E
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c4:e5:47:cb:9b:e3:e2:c9:24:1c:09:9f:b8:94:87:54:6c:
         01:3c:ca:cf:88:43:18:02:48:a2:65:59:b3:d9:17:a2:02:c3:
         20:8c:f9:7e:b5:42:9b:29:81:c2:1f:9a:3a:38:a5:8f:0e:6e:
         56:70:e9:b2:67:4f:41:62:43:7e:4f:7f:04:de:b3:84:ee:3d:
         c4:89:dd:6c:2a:c3:2d:5d:82:72:95:72:5c:de:5e:6a:c5:31:
         69:75:52:ba:2d:e9:68:e8:83:20:5a:10:a4:7b:f2:6d:1e:69:
         61:85:12:69:48:d6:c5:7a:a4:ec:fd:6f:68:47:ca:53:82:32:
         b5:2d:7a:5f:44:4d:f8:3a:10:14:09:31:0d:87:9a:8e:55:8d:
         bb:26:fd:19:f0:cc:cb:bb:14:2b:86:54:db:a7:b3:0b:8d:d5:
         6f:71:fd:6e:16:e1:f0:87:07:c6:4e:10:e4:75:dd:35:b7:57:
         f8:eb:bb:81:6e:a5:9b:28:f2:b9:25:94:a4:7e:9c:f2:0a:bc:
         b9:20:28:fa:62:9e:e3:a6:3f:e0:ff:e1:a5:67:9f:33:a8:24:
         76:c8:15:e4:5d:be:eb:95:9d:fa:b4:0f:73:b1:b6:bd:e3:57:
         4a:af:64:98:94:15:c2:28:82:7f:12:bf:bc:8c:b4:f1:97:9c:
         d1:27:63:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:50:28 2024 by rpki-client on console-ams.rpki-client.org