Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          6EgAOgNWRvQ5cM+USIcL6VTH0oS7WPl0oC9UZx+tNyA=
Subject key identifier:   64:99:46:21:9D:07:37:1A:99:67:EE:66:81:2E:B9:CD:6D:87:61:05
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       018F8891C2B65E72CD12DDAE06D121D6E73F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 22:00:04 +0000
Manifest this update:     Fri 17 May 2024 22:00:04 +0000
Manifest next update:     Sat 18 May 2024 22:00:04 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: ZCtRxGClJuPHFhqDezoLEUfahIJBPbumKK/33iWXUQU=)
                          2: owTTEtNVVTYbJHZt-57UE6d_Rl0.roa (hash: dEOeseOroyWS7bOTRREwKRJOOD6bZndfX0XMiwwWBRY=)
                          3: tcqr6H6Pn502mTgeU25gh-yg-WA.roa (hash: QhLc2H9EaqNLDU7Kj5x0GBXca3GxqWVwHOT+AHVwWnY=)
                          4: unRRwHenhVFuwSQC9kTv92-HVpU.roa (hash: Sa8INmcIrWBLlR1HVMa1eib+o3UvQZyaLA30502j27Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:c2:b6:5e:72:cd:12:dd:ae:06:d1:21:d6:e7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: May 17 22:00:04 2024 GMT
            Not After : May 18 22:00:04 2024 GMT
        Subject: CN=649946219d07371a9967ee66812eb9cd6d876105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ef:23:4e:6d:7d:6c:52:ea:d7:55:5f:08:d0:
                    d8:52:78:96:e0:d9:e6:c0:f7:6d:58:9e:dd:84:9d:
                    ef:8f:c0:1e:8c:2c:f4:14:56:77:a1:da:8d:44:9b:
                    35:35:54:3a:9c:c3:79:90:33:5e:aa:1f:45:2a:56:
                    47:ba:5b:7e:eb:9d:86:c2:82:40:b0:e1:1d:75:4e:
                    05:ad:8b:b7:c1:46:4b:d8:f4:64:16:48:dd:1a:72:
                    4c:c9:d4:c9:0a:4b:fc:0b:b9:27:22:70:b5:16:b2:
                    c4:df:ca:de:12:b1:6e:dc:66:34:9c:95:1c:e1:cc:
                    25:a2:e2:c6:8b:46:58:40:d6:e4:06:fa:d3:8a:37:
                    ca:e1:75:be:cf:4e:6e:42:87:29:f4:c1:b8:9b:da:
                    91:8c:a3:c2:92:56:a8:1f:11:08:6a:33:ff:95:b8:
                    fb:2f:d3:aa:7c:75:da:57:43:e0:0a:01:be:58:f4:
                    20:10:b6:6c:7e:91:a8:50:2d:68:05:50:b1:7d:5c:
                    4e:69:84:02:48:02:49:7d:1a:b4:03:25:3c:6a:30:
                    d3:bc:0e:f7:ea:c4:7a:13:a7:9f:b6:3e:ad:8d:70:
                    37:60:7c:7e:c7:2f:c5:2b:73:b5:a6:94:c1:f1:30:
                    f6:04:e5:9f:4f:cb:df:a5:5a:dc:27:9f:fa:3c:4c:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:46:21:9D:07:37:1A:99:67:EE:66:81:2E:B9:CD:6D:87:61:05
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8f:3a:fa:4a:f9:97:20:7c:c8:b1:20:9c:b0:0f:94:27:d6:
         b7:57:e0:2b:f3:0d:12:1f:e6:56:6f:4e:33:7d:71:fe:c2:b2:
         b6:dc:d5:71:e1:71:ab:ce:8d:e5:c7:ee:cb:b5:d1:63:18:ab:
         16:c8:28:df:65:f2:d9:22:e9:03:a5:26:87:3c:a7:81:73:35:
         16:8e:35:4a:37:68:a0:2b:2c:65:fb:26:1c:f9:6a:2e:d0:fb:
         25:54:a9:79:a4:34:ed:2c:46:1a:1f:67:11:43:d2:b5:ce:6a:
         bf:7b:04:43:54:6a:4f:67:08:bc:85:c4:50:2b:77:77:ff:e4:
         78:77:50:66:96:57:4b:9c:ff:64:1f:0f:ff:5d:d7:4d:fb:e7:
         9b:93:3c:e8:35:ea:eb:5d:10:4f:bd:48:1e:88:2b:a6:56:45:
         1e:cd:e3:24:b2:06:e1:4a:51:aa:c2:7f:91:1c:a2:fa:00:3e:
         fe:52:26:f9:81:c5:09:c4:c9:0a:d7:77:ae:c1:3b:08:d8:9e:
         21:5c:fe:fa:69:b5:fd:68:d8:c8:ea:47:09:5a:d6:c8:c2:67:
         28:28:58:9c:dc:ec:67:06:6e:2a:73:09:ef:5e:52:da:38:24:
         74:1a:5d:22:26:1b:31:38:4d:40:fd:8b:92:54:0f:8d:48:55:
         82:83:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:59:55 2024 by rpki-client on console-fra.rpki-client.org