Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
File:                     xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json)
Hash identifier:          rQHijaca/0ZScK0tPJMO1jQcvK6gxJ0oG9SdcT2iG4Y=
Subject key identifier:   61:1D:B5:57:16:83:28:5A:A1:88:21:05:6E:E0:EB:E0:C0:DF:D4:BA
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Certificate issuer:       /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial:       018F8824662FC62F40BC4A11704E04B205EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
Manifest number:          118C
Signing time:             Fri 17 May 2024 20:00:37 +0000
Manifest this update:     Fri 17 May 2024 20:00:37 +0000
Manifest next update:     Sat 18 May 2024 20:00:37 +0000
Files and hashes:         1: 1-YzGQDUvxh7320fZfsAaAfcPPFs.roa (hash: xJ3gK80IhO9C5l99Hz0opPfO7WR2SYxli/CL2umsAoU=)
                          2: 34eQ23MiCAS8KsXt30F4JzbKeBE.roa (hash: yKlnVtVREToSEv2vMoiK5D+Hw2/KViguqFyI6WUqzmc=)
                          3: 5QJ-JhweHEyc80E2iAEPQ5kQaPU.roa (hash: 5FyeDcmtJvPLYhzFStuUEcfCDIDKRlGrMN5mfn3Io5U=)
                          4: AzOc36HJ8MEB0iT3X-M5lG4o6TQ.roa (hash: xLke7gfQB182MSaM5qheQBtQH+6Di7aYb4SB9oKSHCk=)
                          5: FbtPaArs0J0OLUIWNbmV7VO1oTk.roa (hash: QkLktLRrv5unrfxbgv3RvfpzPLmg88aJt3lqlEYia5Q=)
                          6: IZVtY6tB0e7V1-ELC4rvwjAUgCc.roa (hash: HxmDxlGCmZprkf9K8Q2xGHCS1GJfOjeJyNTf2yxzx4Q=)
                          7: KUVb5-zjUHjPWn3HRsPGQdMgDxk.roa (hash: Rh04AgUGocyPUJDMakPxumny7WtHvDMR8278H5vYKWE=)
                          8: RShgZMaKc2yIEYvPrUWHigreccE.roa (hash: 7CfV4hVaSXZmpD3K+sb/XopeHwRcG2l9Z/Rv2+hddRE=)
                          9: iXfRtmudxAE1lJnnD7CamGaHwOQ.roa (hash: bs+Zo96eDGbGYk6314dX8Lc92xqIBTCAonrq4A7DJ8U=)
                          10: wc712w8oGSp9it2ejzQ6Ex7dXqk.roa (hash: +9LJFrVOw15QOfsJ/2cOJpGzFO3e/x6rxBPd1HVFwbU=)
                          11: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: pv6VOmmMuz+S11lLCHb0A3eux1wLMc6yTru+4aFadg0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:66:2f:c6:2f:40:bc:4a:11:70:4e:04:b2:05:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
        Validity
            Not Before: May 17 20:00:37 2024 GMT
            Not After : May 18 20:00:37 2024 GMT
        Subject: CN=611db5571683285aa18821056ee0ebe0c0dfd4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:6b:4b:6d:d1:f3:f1:a2:84:a8:4d:9c:4a:
                    5f:4a:75:f3:a5:43:30:bf:20:7b:f8:5b:4c:88:fa:
                    f4:45:d1:75:66:de:60:31:fc:b1:d3:fd:91:53:e2:
                    39:a5:22:ca:5f:0a:5d:fa:bc:ab:9a:ca:ce:26:86:
                    53:da:74:9c:cd:30:4d:a3:af:96:e5:ba:96:25:f6:
                    50:8b:df:d2:2f:34:3f:3c:07:ae:51:a3:87:5d:ad:
                    e8:15:59:22:80:60:e6:77:d0:f1:36:5d:31:45:10:
                    c0:95:5d:df:11:6a:77:b7:a2:0b:fe:dd:05:9b:ef:
                    67:ca:b1:65:b0:02:e8:18:66:46:cc:6c:15:14:73:
                    32:e9:8e:ab:08:7c:fc:ae:a7:01:e6:b1:9d:59:6f:
                    a2:9f:b7:a2:f9:f3:d9:a5:8e:ac:f6:71:d8:47:5e:
                    85:d1:fc:c4:e8:b2:67:ed:15:f0:21:ef:1e:90:11:
                    89:cd:ed:d7:41:c1:88:5b:f1:e1:2a:68:77:d3:08:
                    ad:81:e7:c1:9a:d9:79:a6:94:c0:04:3d:9f:33:46:
                    ca:4f:15:d8:f9:6d:e5:a8:ae:21:3c:e9:97:1c:83:
                    b7:54:ea:e6:bb:f6:40:fc:4b:66:9a:18:59:ee:ea:
                    10:76:14:2f:be:dc:21:91:2c:47:60:98:50:c1:35:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1D:B5:57:16:83:28:5A:A1:88:21:05:6E:E0:EB:E0:C0:DF:D4:BA
            X509v3 Authority Key Identifier:
                keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:52:aa:f1:3b:f7:17:86:c3:ac:ea:92:bb:8d:1a:aa:34:
         bf:9c:d7:fc:5b:23:9a:6f:dc:b8:a7:e2:6e:0a:e1:0f:fc:a5:
         0b:74:aa:31:ad:c4:51:9c:f3:49:c6:60:b1:31:4d:9d:55:fe:
         8f:6d:aa:89:06:26:6a:47:d3:49:a9:c2:72:ac:ea:27:cb:2a:
         d7:8e:1f:ce:7d:56:a1:e6:a1:37:40:52:17:19:66:e7:d8:94:
         92:36:b8:ed:fe:6a:64:ba:05:c8:da:4a:e3:bd:e1:2e:6d:d4:
         2a:82:a3:61:e6:b1:e7:df:98:56:b2:55:55:ab:61:f0:79:57:
         91:39:96:18:5b:7c:77:ed:33:23:18:05:e1:6e:b3:98:8c:c4:
         0e:45:96:aa:5b:4c:8d:5e:84:6c:c5:64:0d:28:79:f1:3e:ee:
         66:f8:4f:4c:10:62:f3:b9:2e:e3:d4:7d:03:96:0d:cb:69:dd:
         f1:a7:63:4a:48:dc:bf:25:f3:8b:48:39:9d:09:d6:76:20:ef:
         53:54:3e:b7:19:37:f9:2c:6f:76:ae:e0:66:3c:2b:0d:9e:7d:
         f6:84:5e:d1:d8:c5:2d:95:44:0e:92:1c:6b:b7:14:e1:8b:93:
         cd:5a:b1:d2:36:20:84:0d:a4:27:02:da:6c:e7:5c:4b:06:d6:
         36:52:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:19 2024 by rpki-client on console-fra.rpki-client.org