Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
File:                     t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json)
Hash identifier:          vP2OTBggNkml3Xz1wWnFAZ9n+MaMTMXmwgfQo3xrfUY=
Subject key identifier:   19:EB:44:15:20:29:86:00:DE:43:40:89:5E:A1:FF:45:FB:4D:26:91
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Certificate issuer:       /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial:       018F97299D1F24D5B4F41D3DEDEA91EC2500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
Manifest number:          118D
Signing time:             Mon 20 May 2024 18:00:37 +0000
Manifest this update:     Mon 20 May 2024 18:00:37 +0000
Manifest next update:     Tue 21 May 2024 18:00:37 +0000
Files and hashes:         1: AqtEsioZmFkOBTAqs6tFEjZlCmM.roa (hash: USb3NZwETylxmxVVZOZ/d2rnpIyfMBb3uaii0t8elvo=)
                          2: L71QgugQMvf85kaVtGQuyJPoJRc.roa (hash: ceoFbPknh7QvCYKH40qZCPs0N9mGu2K2EqLi1eFBSIE=)
                          3: dFQ7--JiATBTvBBjEAEW9REg5NE.roa (hash: Z61SRMQcar55pH1NUjExfg1dx2+P5rXhcWxBEpi2l2g=)
                          4: deNQZFRYalvRmutmDVhvhvBVo04.roa (hash: zQ8N7/WyWtO4X0BiWpnx3zXsYe5QLI0xFXTsNX7atis=)
                          5: ls7QRK_LHcV6HAvK-gTyulIwekE.roa (hash: 8Emkax7aSFALidjB0ibIraONTsIleRBJM72r2KsoAxs=)
                          6: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: cFCJs0Csv5VGOKAjoWLa1fLYVs6Jk8V30Re18ui06Lk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:29:9d:1f:24:d5:b4:f4:1d:3d:ed:ea:91:ec:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
        Validity
            Not Before: May 20 18:00:37 2024 GMT
            Not After : May 21 18:00:37 2024 GMT
        Subject: CN=19eb441520298600de4340895ea1ff45fb4d2691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:50:38:27:d1:99:eb:41:34:3a:17:50:c4:
                    e7:af:a0:2c:64:ca:7e:80:a1:99:cd:4f:69:09:b3:
                    93:25:cb:d8:c3:9a:ce:8e:a4:a7:3c:0e:70:e5:49:
                    9e:23:b2:71:04:46:28:92:99:10:1d:ba:5c:f4:1b:
                    99:eb:b7:c5:0f:90:6c:39:f6:67:d0:3f:60:f6:2a:
                    b6:ea:a7:b8:47:0e:39:cf:a8:76:c4:c8:de:c6:75:
                    9a:47:3c:ac:4c:e8:0d:fd:4f:ec:23:31:08:eb:1b:
                    77:b2:5d:31:47:e3:a5:46:9c:71:bb:89:14:73:f7:
                    93:0e:28:a4:cc:71:cd:93:43:ae:9c:af:ee:1b:2d:
                    30:ea:48:e7:51:b1:3c:6b:c5:32:e9:50:81:76:fb:
                    ae:da:99:c1:a0:a0:41:dd:6e:f6:60:ed:98:7a:24:
                    d5:c1:e2:5e:b2:c4:06:6d:aa:72:3e:68:ae:22:e3:
                    04:f8:47:07:73:41:d2:1d:eb:87:5d:d3:d2:ae:84:
                    6d:44:8b:a9:7e:fc:13:c9:cd:73:05:34:92:3d:64:
                    50:36:2f:1f:d0:ea:a3:a2:57:d6:19:18:e9:ac:b5:
                    6c:4d:01:09:f4:36:4d:94:66:1a:8d:53:d2:73:02:
                    1a:b7:12:65:2d:94:d6:37:af:33:b6:1c:c5:66:58:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EB:44:15:20:29:86:00:DE:43:40:89:5E:A1:FF:45:FB:4D:26:91
            X509v3 Authority Key Identifier:
                keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a3:ab:78:5a:01:a7:7d:c8:2e:2b:89:13:d9:53:50:a2:e1:
         52:b1:2f:aa:dd:52:3f:b9:9d:c0:53:4d:c5:3e:97:23:4f:84:
         39:95:c0:1e:be:a9:83:b4:2a:14:90:30:c9:43:a9:94:10:bb:
         4c:7a:2c:94:d2:98:8c:6d:bf:97:78:8a:65:c1:08:f8:26:20:
         72:a7:9c:0b:3e:2c:64:43:37:be:1d:8a:7b:5f:a8:de:09:f9:
         38:94:e1:6b:a3:d7:71:42:4a:af:85:56:60:8f:24:46:69:d3:
         1f:cb:19:14:45:a4:ab:cf:4b:8b:23:a8:f1:59:d3:1e:bf:ba:
         a7:01:38:15:0a:05:6e:a0:31:43:e1:5b:bf:34:45:1c:e8:62:
         7e:a4:40:7c:d6:72:8d:5e:3c:aa:67:fb:09:b4:d8:51:77:7c:
         61:92:6f:2b:97:05:b2:11:22:5e:24:2f:f0:35:ae:02:f6:5a:
         92:e1:1e:2f:ee:a6:0d:93:cf:30:b7:13:32:22:d4:ed:36:b2:
         df:1a:37:09:23:08:e8:1e:7b:72:c2:05:56:50:f4:66:bc:8e:
         23:6d:d5:bc:8e:21:4b:6a:cd:bd:8a:c2:f8:f6:a5:37:ea:85:
         b1:23:92:70:f4:ed:f8:f0:b0:97:22:c2:3b:01:89:0c:54:df:
         04:b1:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 23:53:11 2024 by rpki-client on console-fra.rpki-client.org