Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File:                     d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier:          LYZKyjTJA3v6PW+zViWQ9nJlaeC0CgZFbRYRwwIwnhs=
Subject key identifier:   F7:F5:5F:76:14:9C:0E:44:F6:E6:22:1D:1E:7D:E5:B9:DC:EA:F9:E3
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer:       /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial:       018F87B69A6A348B0E71AE8116D9A4C78837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number:          109B
Signing time:             Fri 17 May 2024 18:00:42 +0000
Manifest this update:     Fri 17 May 2024 18:00:42 +0000
Manifest next update:     Sat 18 May 2024 18:00:42 +0000
Files and hashes:         1: DmN8sz0-6CYV7SHoWXRo_-IPKRs.roa (hash: 1GzOoYREWAnrhHQx533h6Nf6/VFpdkqNVD87sR3nnqg=)
                          2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: u1viCAGbs2omSkCS4AIB/c1cAcJq/BAambUVOEbYX4c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:9a:6a:34:8b:0e:71:ae:81:16:d9:a4:c7:88:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
        Validity
            Not Before: May 17 18:00:42 2024 GMT
            Not After : May 18 18:00:42 2024 GMT
        Subject: CN=f7f55f76149c0e44f6e6221d1e7de5b9dceaf9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fa:a4:b4:c3:ab:03:92:3e:56:fe:da:e8:e5:
                    fd:60:86:55:37:a9:87:4f:4a:50:03:de:e3:39:7f:
                    33:2d:96:be:df:61:f2:39:fe:59:79:be:52:79:8d:
                    3f:5d:8d:40:d1:59:15:de:27:86:cf:16:06:c8:de:
                    95:f0:21:77:ff:3c:bd:a2:ae:74:de:b7:59:a0:6b:
                    bf:d5:54:e2:55:68:fe:f5:37:b2:97:d4:31:aa:f7:
                    6f:5e:d4:68:23:2f:32:20:cb:20:28:85:f4:0a:3e:
                    77:1f:be:01:b6:77:1b:c2:71:c6:e3:31:e3:bb:35:
                    13:db:a7:54:f8:ca:08:b0:b0:da:28:fe:44:66:83:
                    f7:26:1f:c2:b0:41:7a:16:b1:23:d9:58:a1:8d:dd:
                    fb:39:5c:2a:9f:d7:47:17:f8:c7:27:ba:3a:58:9c:
                    0a:bb:29:08:23:5f:25:df:78:70:ab:79:fd:90:3f:
                    02:32:f1:6c:84:7c:96:08:f5:41:c8:9a:2c:73:ab:
                    cf:99:2d:92:e8:cd:09:d3:4e:a7:74:1f:5c:ee:e9:
                    83:08:3f:e5:ef:0d:e0:21:c6:a5:39:32:de:65:b9:
                    b4:e7:ad:a9:77:82:00:5d:39:82:bf:78:1a:c0:42:
                    42:dd:8c:bc:60:86:82:c5:fb:23:64:3e:d8:cd:39:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F5:5F:76:14:9C:0E:44:F6:E6:22:1D:1E:7D:E5:B9:DC:EA:F9:E3
            X509v3 Authority Key Identifier:
                keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3d:ee:84:9c:00:c7:23:7a:76:0d:96:f2:48:05:60:59:0f:
         25:1a:fc:ac:6d:af:cd:7d:22:6c:6e:41:80:2a:60:73:a5:85:
         34:2c:43:58:d5:39:bc:0d:1c:bb:9b:a2:8e:d6:fa:ef:30:a6:
         00:80:6a:1d:f5:29:11:b1:12:38:59:0c:eb:43:6d:db:54:fd:
         9f:54:46:88:fb:ad:e9:82:5a:3f:e3:3f:6f:d0:3e:29:98:0a:
         e7:c5:6b:a3:46:8a:53:51:21:b5:2a:02:8d:dd:6b:f5:e9:2c:
         1e:2c:6f:17:5c:54:47:76:be:7a:e8:62:6a:3d:8b:3f:6b:fd:
         87:37:e3:04:ab:da:a7:41:e8:bf:bc:2a:b1:3d:f2:c3:fa:a6:
         7c:5f:79:85:46:97:be:14:67:58:84:f0:d5:84:7f:68:34:76:
         96:f1:a8:65:67:78:c8:b0:6c:b2:bc:05:ed:40:51:9e:0e:67:
         48:86:bb:e6:53:c2:d3:53:a7:5d:c1:06:f1:83:c2:73:f8:b0:
         00:ce:5d:f8:0a:86:61:19:91:47:61:43:b3:35:28:47:03:f1:
         a8:c7:61:4a:2f:0a:1d:f6:c8:4c:50:e6:b8:29:36:9f:d7:f9:
         9b:b7:0a:d5:7c:79:32:b2:87:1d:03:7b:7b:47:ef:ee:6c:d7:
         17:42:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:34:55 2024 by rpki-client on console-fra.rpki-client.org