Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
File:                     jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft (raw, json)
Hash identifier:          vjQdGZxDe6chg1AJwH53V/tai0dmOhg5uICMrz/nnCE=
Subject key identifier:   DF:5C:15:B1:B6:5F:FE:2D:7E:B6:9D:DE:8C:36:12:F3:0B:CC:A3:D4
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Certificate issuer:       /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial:       018F877F3F7DB28CD6C2942AE1A0F9EE0210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
Manifest number:          0445
Signing time:             Fri 17 May 2024 17:00:14 +0000
Manifest this update:     Fri 17 May 2024 17:00:14 +0000
Manifest next update:     Sat 18 May 2024 17:00:14 +0000
Files and hashes:         1: FKz7CcR-c4RcMiULpoVXB_vC4xc.roa (hash: QgeXDMeIPMj2VUO72wFl9c27pnHlUd+pX0ueMcMFAX4=)
                          2: TTtPOl2YQy9m5h-qpwZraIo1Naw.roa (hash: Vk1dKzeC4Hz+w0vMwsRLq6PTxRiYR0gaWp8x59Gv3Cc=)
                          3: ZwWG8igq90Qo0km0QE7O_XzNNL0.roa (hash: 4OvDCxhmZH8CqTC5kQE0O3LblZXDsYNysCP16YcOEdA=)
                          4: jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl (hash: J/yesOxMRhSXXk+cZXpwi4FmP0OvUH4bMwQ4NnoNpSk=)
                          5: nH_leTNKotKN_QlSObKEN2eiN-4.roa (hash: 6DumOebPnkZ9O+ELYD/JxBD768jwQY0cYkY/1MfMYUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3f:7d:b2:8c:d6:c2:94:2a:e1:a0:f9:ee:02:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
        Validity
            Not Before: May 17 17:00:14 2024 GMT
            Not After : May 18 17:00:14 2024 GMT
        Subject: CN=df5c15b1b65ffe2d7eb69dde8c3612f30bcca3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:f9:7d:b3:cc:88:c2:e1:31:e8:94:42:36:
                    da:a2:86:dc:17:02:21:2f:63:1d:19:92:c7:67:06:
                    1c:21:88:99:73:d0:5f:9d:d2:ea:46:f0:8e:ec:45:
                    8c:9d:e2:66:ed:5e:f0:67:45:e2:0e:d8:e5:f9:e7:
                    a9:5f:81:27:23:f3:77:f3:0e:1d:45:38:32:c6:de:
                    b6:66:be:6a:3f:f5:22:ac:c5:a3:3f:a4:0a:05:52:
                    ee:57:73:0b:73:4b:a3:8d:1c:8c:d9:63:9e:da:13:
                    f1:a8:05:69:ff:57:0e:61:3e:6c:fc:3a:96:1f:77:
                    19:86:45:85:8a:58:90:80:a3:a4:c7:55:84:a9:67:
                    24:e5:45:c1:f4:b2:bb:cb:2f:58:8e:6a:55:6f:8b:
                    b4:d3:c1:9a:59:1d:f1:42:8d:fe:b4:fb:c4:e2:1f:
                    21:06:d7:bb:01:f9:91:5b:02:5a:96:58:14:60:f0:
                    1e:3b:ad:5a:51:66:0f:a9:0e:da:15:66:9b:d3:b3:
                    73:56:88:c3:d3:3d:a9:4f:2a:77:da:e2:c2:ad:76:
                    a7:1d:92:3b:4e:6d:e6:0a:7c:4e:71:4d:af:64:d6:
                    c9:ff:1d:d3:4f:5c:b6:ad:c4:f2:70:9e:7f:f5:2a:
                    4b:4f:af:c6:74:7b:15:17:dc:49:3a:d9:0a:55:a1:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5C:15:B1:B6:5F:FE:2D:7E:B6:9D:DE:8C:36:12:F3:0B:CC:A3:D4
            X509v3 Authority Key Identifier:
                keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:47:45:65:d2:9b:b1:46:0a:f0:ca:9e:c2:08:38:2f:f8:82:
         65:e2:47:4d:20:2b:32:ec:f3:e5:3b:05:cf:90:75:f2:d4:fc:
         85:94:91:4d:88:17:83:87:03:d7:94:2b:29:4a:a2:86:38:75:
         ab:95:a4:2e:ce:5a:65:0a:5e:09:ba:16:63:69:56:28:88:46:
         d5:e0:4e:f9:41:70:ad:1e:1b:ee:04:d2:69:27:0f:a1:b5:77:
         75:5e:85:0a:21:0b:72:69:0b:73:51:f2:40:b5:4a:26:a1:fb:
         2e:78:61:1f:b4:57:a4:c8:39:13:9c:cf:83:49:b2:3d:e2:df:
         5a:ac:42:b7:e7:89:17:14:e7:69:81:a7:68:cc:28:d9:14:fb:
         98:b6:72:9b:0d:8d:4c:4b:49:e0:d3:2d:f2:04:10:65:40:fe:
         f9:d8:fb:b2:43:29:5e:f9:1a:60:56:25:db:56:2b:ff:fa:43:
         13:44:84:87:0e:99:1f:7d:9a:bf:19:2f:8e:e7:0f:89:86:68:
         b4:8a:fb:b6:fe:a5:ba:ff:14:5c:5b:51:b9:ce:ad:05:d7:cb:
         dc:60:8e:1a:bf:ab:96:c5:b2:e6:6c:c4:ec:4a:36:ab:2e:50:
         2c:d8:6a:97:77:8b:39:0f:20:0a:00:ca:7f:0b:3a:01:45:8b:
         c1:4a:5e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:20:30 2024 by rpki-client on console-fra.rpki-client.org