Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File:                     eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier:          stDm79iIgYdrW+tuP+X8dKONKDzy5sB06EXdROMQCYo=
Subject key identifier:   08:CE:2F:F4:06:3E:34:D8:A7:C7:22:E2:05:13:6D:3A:6E:EF:0D:A9
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer:       /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial:       018F94CE28451CB7C595573A87156B005388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number:          0B40
Signing time:             Mon 20 May 2024 07:01:29 +0000
Manifest this update:     Mon 20 May 2024 07:01:29 +0000
Manifest next update:     Tue 21 May 2024 07:01:29 +0000
Files and hashes:         1: 3U67JVDpA8mUTURSr9Algxuc0wo.roa (hash: T4bRqefF4AWwXdi5sx0JkcVQWuufmzssf/q775taBhY=)
                          2: M9-ffo9RwhFqmA36fpHo5OZ0Hw0.roa (hash: oIr2si6+CLlAv7+FmXCpl42vMNAMSGzu1QhXNTPcIL8=)
                          3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: 7zSNDpAR8XFFFUjOIZ3WgtgbBHQHBk5DNHcQLXvuCvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:ce:28:45:1c:b7:c5:95:57:3a:87:15:6b:00:53:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
        Validity
            Not Before: May 20 07:01:29 2024 GMT
            Not After : May 21 07:01:29 2024 GMT
        Subject: CN=08ce2ff4063e34d8a7c722e205136d3a6eef0da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d2:95:f0:66:89:44:0c:e8:aa:4f:58:e1:6e:
                    20:5d:c9:e1:0a:39:c4:a4:eb:b3:88:c8:27:fb:be:
                    e5:28:3f:0b:ae:08:aa:0a:87:d0:60:93:81:89:1d:
                    11:12:14:da:bb:f6:37:8f:e4:f4:0c:85:af:c9:08:
                    45:d4:c7:1f:0d:28:8b:14:a4:9d:73:06:cd:f0:07:
                    2b:1a:ea:3e:08:e9:77:f8:c2:bd:00:33:0d:21:11:
                    f3:de:90:d0:59:44:6a:55:91:f9:85:cb:a1:d4:38:
                    31:40:db:f4:1f:1e:d2:58:0c:da:ce:d9:2a:91:e0:
                    27:59:0b:0c:30:79:f9:13:31:5d:62:fe:24:d6:dd:
                    25:11:22:8d:1c:e2:4c:80:14:5e:1b:02:00:1a:21:
                    1c:ab:de:f6:3c:4d:c0:9c:7f:55:56:b3:dd:e8:a9:
                    38:dd:80:79:90:5a:cf:72:8e:bc:80:4d:b0:ba:cc:
                    23:3e:c5:56:5b:8f:2e:3c:a1:ad:b2:f2:dc:22:74:
                    66:88:54:b1:72:49:6c:33:e7:67:b4:05:b9:2d:a4:
                    cd:0c:78:ea:85:6d:10:99:7d:95:27:44:94:42:e3:
                    58:30:ca:45:94:80:db:c0:78:06:2d:1a:2a:8a:0c:
                    dc:48:35:af:a5:58:f6:73:56:b8:f6:67:d3:75:e3:
                    08:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CE:2F:F4:06:3E:34:D8:A7:C7:22:E2:05:13:6D:3A:6E:EF:0D:A9
            X509v3 Authority Key Identifier:
                keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:2a:46:58:2b:9f:1e:e7:7e:ea:42:dd:69:06:ca:61:7e:b3:
         29:87:6d:87:4c:34:c1:df:50:fd:87:0e:5e:84:25:c8:24:09:
         62:ed:04:ce:4a:35:ce:50:2e:8c:79:39:d2:57:dc:3a:da:71:
         1f:de:b4:fd:49:27:c2:6b:05:46:3a:02:14:ed:11:7c:b6:fa:
         24:4c:87:47:f3:e4:07:32:21:b2:83:ea:7a:6f:7f:76:b8:a2:
         8d:1a:e9:4f:62:a0:3c:05:dd:55:c9:92:dc:85:18:14:de:91:
         fe:1a:31:34:df:f0:61:43:ef:56:79:a4:83:a1:ec:14:ec:b7:
         af:83:85:0e:a2:c4:39:f9:69:91:1b:0a:59:ba:a7:bf:32:de:
         a9:75:64:7b:dc:29:82:81:40:eb:56:96:8d:94:38:be:c2:b1:
         16:09:6b:6f:d2:02:cc:b9:a9:73:8f:c8:f2:3c:c9:d8:e5:18:
         04:19:c8:21:69:11:7a:f8:3b:57:73:a0:81:55:10:6c:b7:12:
         29:5e:a6:47:2f:f6:7b:a8:6e:ff:82:4b:c3:6b:19:aa:8a:88:
         1e:ad:23:14:e0:3f:cc:54:ce:01:16:0b:c1:b3:da:0c:23:14:
         7b:3a:e7:4e:ad:f7:0e:92:97:cb:ac:9e:24:60:52:dd:ef:d2:
         b9:22:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 08:00:39 2024 by rpki-client on console-ams.rpki-client.org