Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File:                     tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier:          xSe+fEJ3kSxvx39ycJRluuJXpad1PjiUmL2NuwdnqiE=
Subject key identifier:   AC:C1:8E:0A:B7:B9:55:60:4A:15:8E:03:82:77:1A:48:2D:92:2F:D7
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer:       /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial:       018F8E5D4E1953BCAC3C47642BF5F28C88A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number:          117B
Signing time:             Sun 19 May 2024 01:00:30 +0000
Manifest this update:     Sun 19 May 2024 01:00:30 +0000
Manifest next update:     Mon 20 May 2024 01:00:30 +0000
Files and hashes:         1: 70N2nRQiDL2LT1eFUg_Fkz-wkCU.roa (hash: 4uaIa9o7d/8apcdRMv8Fh2XKMQb472iYtzk8oIdKXeI=)
                          2: KVt_no_lfHWTZhzNwemlJDM2ftE.roa (hash: Ov1wEZbxMW0tXUjppWm22mwdnVcmSbVO0/ASdOTvEqc=)
                          3: KnjslgaopCmCG6TO0JqHDEEJW6w.roa (hash: F+UaxGL2gzRNJ5UYB+AUXvvmATQZnVDX+4cApftbjok=)
                          4: T82VKTLz3PAW5M0U-u-2DAB5Mt8.roa (hash: 4AIB/qUCeMRHNuKC1cR9OduIG6PR1WdNsYvLIWvPs/c=)
                          5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: ZBwci6lv5bfq04DY9BLWhOxF7LCLaZi4YkorJ0TEKGU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8e:5d:4e:19:53:bc:ac:3c:47:64:2b:f5:f2:8c:88:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
        Validity
            Not Before: May 19 01:00:30 2024 GMT
            Not After : May 20 01:00:30 2024 GMT
        Subject: CN=acc18e0ab7b955604a158e0382771a482d922fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:88:8c:44:cc:cc:d1:b2:d1:f8:4a:e4:ae:
                    fe:15:52:4c:4b:fa:a3:12:ab:49:28:e9:f3:27:22:
                    27:98:fa:b9:c3:80:22:54:5a:b9:74:2f:a3:dc:8d:
                    d4:00:20:16:b0:06:f3:cd:3a:f9:97:d8:53:59:3b:
                    57:b4:4c:08:5d:22:d1:69:2a:6b:44:e4:b0:b0:77:
                    cf:2c:4c:eb:de:28:72:ce:de:34:36:a5:70:16:f1:
                    3e:a3:36:96:fc:88:97:15:b7:14:b2:4c:98:f6:38:
                    d6:97:08:57:12:cf:d7:d7:00:85:91:76:6a:f7:56:
                    1b:3e:c5:aa:a2:89:77:00:68:22:2c:94:5b:be:4e:
                    17:b9:20:12:e2:77:7c:78:38:ab:62:34:8b:5a:f0:
                    df:e0:05:4f:59:5e:ce:d2:9a:5a:94:1f:fa:18:50:
                    74:fd:66:c5:fd:27:93:0c:73:79:13:40:d3:d1:c5:
                    d5:be:a0:dc:89:82:06:98:27:51:6e:ec:a1:a6:77:
                    c1:dd:c9:9a:e1:a0:8c:31:53:66:ad:94:52:ba:23:
                    f0:17:d5:aa:eb:c4:7c:ab:27:d5:f6:f0:d8:f9:43:
                    6d:b8:eb:55:aa:a2:51:fd:9b:15:69:c3:95:fc:42:
                    60:60:fc:a4:92:29:bd:21:ef:c9:4f:a0:bd:6b:d8:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C1:8E:0A:B7:B9:55:60:4A:15:8E:03:82:77:1A:48:2D:92:2F:D7
            X509v3 Authority Key Identifier:
                keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4e:a1:15:2f:8b:b0:bd:dc:1a:0f:10:20:05:1f:40:69:fc:
         f9:e4:3f:dc:84:3b:05:e8:42:e7:64:c8:ec:fc:dc:4b:08:bb:
         85:f4:d5:14:a2:ea:96:a3:eb:ef:23:50:fb:04:02:3d:76:6d:
         38:4a:d2:47:fc:7c:f0:b1:08:f3:87:4d:1e:18:d5:03:96:c1:
         c0:d5:ec:83:92:58:4a:45:4f:33:5b:95:c2:bd:56:76:4b:2a:
         a7:3e:fa:4a:5a:e0:ff:33:89:1c:47:d7:b8:c5:31:18:d3:9d:
         d6:46:2e:7c:b3:cc:46:11:f3:c6:f5:6b:cd:2f:fa:f8:8e:b9:
         3e:ef:09:d8:05:3f:d3:b1:46:ab:c7:ce:c0:e9:07:33:41:f2:
         46:5b:c0:af:f6:d1:13:7d:57:1f:00:37:28:34:bd:fd:60:27:
         2e:fc:bf:70:10:91:f1:0f:61:fb:e6:42:98:1b:ee:ce:61:fe:
         98:1e:73:96:1a:78:0c:63:39:8f:82:f8:97:dc:59:d6:ef:12:
         a0:2a:67:6a:e7:67:16:19:cc:18:33:11:22:67:9c:71:c3:7d:
         fe:66:7a:58:dd:e9:6e:6f:96:9e:f2:a8:2a:a9:72:3f:e8:c0:
         26:c0:2d:51:13:c9:57:8c:a9:df:36:46:f3:a2:22:41:4d:0f:
         b3:15:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:00:03 2024 by rpki-client on console-fra.rpki-client.org