Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File:                     iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier:          Ay5XTIZ4eBn+e5p0bHvoShvOivj/judYQeuyqUqpRD8=
Subject key identifier:   26:EC:3E:B6:D3:50:9D:33:98:7D:A3:CD:78:DD:C9:1A:D1:66:72:D8
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer:       /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial:       018F8749FC9EEAAEB43FFC019D121C7ECED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:02:03 +0000
Manifest this update:     Fri 17 May 2024 16:02:03 +0000
Manifest next update:     Sat 18 May 2024 16:02:03 +0000
Files and hashes:         1: 9TptvUpxTGaEvdxOfzMQDijxOEk.roa (hash: snnPhovCUxZEOv/4Zx13mE3XGm6veAJRNPElq9VH+lM=)
                          2: DjroHPZMIZLzF4Gox_bg5wpm2VA.roa (hash: Pnd998Vo43U7wDISmiNnHhYAdkJ6vUXqsNbhCm/wXL4=)
                          3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: TsQDIFCOzVDQENRHmzbfxUIKjoaeoAKz3+fMqolB8sE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:fc:9e:ea:ae:b4:3f:fc:01:9d:12:1c:7e:ce:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
        Validity
            Not Before: May 17 16:02:03 2024 GMT
            Not After : May 18 16:02:03 2024 GMT
        Subject: CN=26ec3eb6d3509d33987da3cd78ddc91ad16672d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:eb:fe:f2:0e:d8:4b:e0:7b:66:21:95:e2:
                    e1:ac:a7:21:3d:95:d1:70:94:38:0b:37:24:19:16:
                    1d:c2:1e:34:a1:2f:f9:ac:c0:2c:e5:8d:9f:b5:ed:
                    d3:8b:49:ce:bd:ad:c6:ca:ab:59:12:53:ce:f2:3b:
                    c5:dd:dc:7f:73:3a:52:51:41:74:d7:34:d7:7b:b5:
                    d5:f6:59:f7:29:48:84:47:7d:b5:3b:da:3a:56:91:
                    3e:92:5f:4f:b5:4a:3b:be:d8:b6:13:f2:ec:03:34:
                    fb:04:f1:f7:d9:1a:86:96:2e:0b:f7:2c:c4:17:36:
                    96:de:10:37:2c:a9:42:b7:b5:53:72:2c:d6:dd:16:
                    52:44:df:8b:88:9d:83:65:ea:56:4d:50:c2:6d:91:
                    5a:55:fd:25:e5:1a:16:1d:0a:96:45:17:e8:67:b3:
                    99:1e:c1:ff:a1:41:49:61:c6:84:5b:d9:ac:f0:81:
                    6a:66:ee:4f:bc:49:cb:17:85:a4:aa:45:e0:f4:69:
                    78:b8:e9:c7:e5:88:33:87:ed:b9:38:6d:75:a6:80:
                    61:70:27:c1:6e:8a:c5:39:71:12:00:e4:33:64:3d:
                    35:2b:7e:7b:d2:5b:5f:50:5d:4f:04:c3:3a:5b:a4:
                    6f:5b:96:7e:a3:ef:43:82:7b:88:fa:bd:67:a8:f3:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EC:3E:B6:D3:50:9D:33:98:7D:A3:CD:78:DD:C9:1A:D1:66:72:D8
            X509v3 Authority Key Identifier:
                keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:d8:6f:0c:d3:31:bb:35:e8:9e:e7:6b:53:9c:4b:68:d0:
         00:75:2a:15:36:fd:ec:96:b1:64:0c:e7:71:32:bf:49:99:7a:
         fc:70:55:75:ac:22:17:32:38:90:97:24:59:30:c2:d5:a0:06:
         ff:3f:5a:c9:9e:5d:7e:34:4c:d0:2f:02:65:7d:27:fa:d3:02:
         bc:77:22:11:15:fd:f4:74:f9:49:59:95:14:8d:cd:3b:5c:87:
         46:5c:25:87:a4:03:bf:86:bf:27:c9:83:73:f3:30:8c:ca:07:
         47:ae:fa:1a:02:1c:30:00:27:1a:83:33:dd:dc:77:e1:4a:57:
         6e:fc:e5:ae:e3:61:ec:cc:c7:05:8b:68:3c:8b:c9:d4:c0:cb:
         2b:c8:0e:e2:5e:32:1a:ea:2d:36:ba:9a:e2:85:ea:f2:eb:ea:
         53:07:ce:07:50:aa:78:71:74:bd:48:e1:d3:df:aa:81:bf:7e:
         0e:56:79:3d:73:3d:71:9d:ae:a9:74:6d:8c:06:33:bb:d5:39:
         a3:2a:5f:68:1c:4d:60:5c:60:fe:c4:74:d6:39:bd:ac:21:93:
         a5:24:66:fd:b0:33:ca:84:fa:c2:cd:79:06:a3:44:9d:42:6f:
         13:e4:db:5d:81:ee:12:de:be:cf:ae:8a:64:be:98:a4:f3:f5:
         aa:c3:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:44:19 2024 by rpki-client on console-ams.rpki-client.org