Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File:                     29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier:          9HAsGWVkmN/QAzKCbKj/I/OO1f/B48dC2fS0+b8K8yw=
Subject key identifier:   1E:65:62:7A:5A:76:01:89:29:B8:F1:CE:97:F3:BA:A7:74:D2:E9:9B
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer:       /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial:       018F8B92E8A65D282BEEEB479944EA2EE0A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number:          117E
Signing time:             Sat 18 May 2024 12:00:11 +0000
Manifest this update:     Sat 18 May 2024 12:00:11 +0000
Manifest next update:     Sun 19 May 2024 12:00:11 +0000
Files and hashes:         1: 1-bYgAy5TYsC5UZhJBCC1TpcXKDo.roa (hash: iifGIe8YWAN7NHeYP6H6Pc1WK1QCo2atmAIMCq/KnSU=)
                          2: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: Dgs0vryjFtyQECzVDDtDbuCYygP0d3kxOY3gCJnbqU0=)
                          3: YQ5n8l55IgCcKZEVQwgCXFunMEg.roa (hash: bEjdNXxFSG4dDWbbASoqfQRrOv4ljH6ak+g2OmCON5M=)
                          4: sNPKcHnt1JKw1AUvog3dXJMq_CM.roa (hash: etTK3jaF4towcjGQiAc4a8lBObndpqO+VMh+DpUbmxc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8b:92:e8:a6:5d:28:2b:ee:eb:47:99:44:ea:2e:e0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
        Validity
            Not Before: May 18 12:00:11 2024 GMT
            Not After : May 19 12:00:11 2024 GMT
        Subject: CN=1e65627a5a76018929b8f1ce97f3baa774d2e99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:5b:a6:3b:39:97:d2:85:a6:f0:cc:dd:cb:
                    20:47:d1:c9:66:b8:43:23:94:b3:da:ad:6c:5f:fb:
                    59:7e:c1:b6:54:df:1c:8f:49:fe:8a:96:f2:5d:43:
                    e9:3c:da:62:f2:0b:62:c0:16:fd:4e:c2:36:4f:65:
                    cc:06:01:c8:03:16:6e:39:ce:77:2f:58:48:d9:62:
                    ce:5f:e6:6a:ea:f0:d9:b4:d0:cd:a7:48:99:70:33:
                    7d:75:3c:b9:20:06:69:66:c2:c0:6c:21:3b:6e:cc:
                    3a:8e:12:63:7b:38:c0:f3:9a:61:ce:3d:2b:de:7d:
                    0c:68:da:60:dc:a1:fb:0d:35:1d:c1:14:43:d3:7e:
                    50:7c:a6:dc:c9:59:19:0a:0d:6d:f4:64:48:09:89:
                    c0:08:3c:e1:5d:1c:a0:09:9a:88:f5:4e:35:b9:7c:
                    75:d7:86:da:e0:18:a7:6b:b7:f3:d6:c8:3f:3c:37:
                    06:45:eb:4c:b1:a0:c3:2f:73:2c:05:a3:a2:13:1d:
                    42:5f:29:ed:ce:f2:de:5f:88:e3:24:b5:1d:6c:ae:
                    e6:da:0c:a3:81:d7:63:0a:8e:de:25:0a:14:3f:6b:
                    9a:e5:11:27:b0:df:3d:69:31:da:9b:6f:e0:c3:fe:
                    26:ef:9a:75:e7:99:e8:ff:82:5a:a5:e7:6c:56:a9:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:65:62:7A:5A:76:01:89:29:B8:F1:CE:97:F3:BA:A7:74:D2:E9:9B
            X509v3 Authority Key Identifier:
                keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:03:44:c4:61:35:0d:31:6e:9f:d0:66:6d:8b:a3:f3:db:ae:
         0c:89:7f:be:7b:78:af:22:cc:8d:09:91:34:4f:57:d4:a0:9c:
         ad:55:f0:9b:a1:0e:3b:ef:fb:2c:b4:9d:ee:e1:99:60:aa:76:
         1a:8c:31:4d:e4:78:b3:d8:10:46:3b:11:0d:4c:d7:e3:37:2d:
         7d:3e:dc:75:0f:b4:42:a9:f1:3b:82:5f:92:b9:18:14:15:05:
         2c:27:af:9b:67:01:f3:f5:a2:8a:71:ab:c0:40:2c:4c:90:57:
         39:27:f6:41:0d:7b:d1:2b:83:05:9d:25:4d:29:0b:85:80:5f:
         21:7b:b4:79:60:35:6d:95:e3:85:7e:2a:49:ec:be:a1:c6:23:
         84:cc:eb:f7:c7:c4:b5:79:41:3f:02:19:46:81:89:9a:5c:32:
         45:fa:2f:66:09:47:6b:2d:92:b7:11:fd:d7:01:6e:ef:a5:7a:
         2f:11:ef:af:ea:f5:57:3c:7c:3b:51:47:91:c1:b4:24:85:28:
         f3:4c:81:ff:b9:ae:2b:16:ee:e9:06:62:20:31:89:8e:c4:09:
         20:a2:26:c4:95:88:39:7d:0b:1e:e9:cf:75:92:9b:2f:fd:61:
         6d:d4:dc:ff:76:2d:3f:e1:b7:20:cc:31:d2:88:58:02:4b:ec:
         ed:20:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:44:37 2024 by rpki-client on console-fra.rpki-client.org