Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File:                     1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier:          SikB2OBZAdMOkjQs5ZUy2Jjiy9/U6EGRct5cSmb1bCA=
Subject key identifier:   28:AD:10:4B:C4:0C:22:C8:0B:FA:34:7B:E3:07:FC:4C:99:03:93:41
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer:       /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial:       018F92DFFBCD7C08C0B2C7E1B4C078A04496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number:          117B
Signing time:             Sun 19 May 2024 22:01:43 +0000
Manifest this update:     Sun 19 May 2024 22:01:43 +0000
Manifest next update:     Mon 20 May 2024 22:01:43 +0000
Files and hashes:         1: 0hfb5qISGkjolenYvj6y3EQ1RyE.roa (hash: 70E+th+tD/HDI+6XMAOvU4S452HAeVKkPKRv4Eg8bhg=)
                          2: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: rinb+XT/7t/OzkGh+rTnFARWNjX4WEydb7EcmoEll+s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:92:df:fb:cd:7c:08:c0:b2:c7:e1:b4:c0:78:a0:44:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
        Validity
            Not Before: May 19 22:01:43 2024 GMT
            Not After : May 20 22:01:43 2024 GMT
        Subject: CN=28ad104bc40c22c80bfa347be307fc4c99039341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:02:9b:0c:75:5e:f2:0e:31:66:81:ed:57:cd:
                    e9:1e:a7:8c:94:7c:85:14:7b:d4:51:a9:5e:c0:25:
                    cd:7b:cf:88:b4:ed:88:8b:e2:11:0a:13:de:3d:b8:
                    9e:5c:7a:10:54:16:45:26:59:69:05:6e:ea:f1:50:
                    03:e2:69:e3:11:9a:1d:c2:d3:ad:e4:8d:8c:a4:77:
                    8c:29:18:b8:e4:dd:a3:ce:90:5f:13:8a:42:2e:d4:
                    1f:46:4c:0a:dc:53:59:56:ab:9b:6b:18:69:35:1a:
                    58:8d:ca:3b:39:bf:a3:a0:7a:50:6d:a0:35:d1:b4:
                    c6:73:71:05:d9:d7:50:f4:8d:75:4d:88:44:b7:b7:
                    e2:af:2e:6a:5c:66:1d:50:8b:23:9b:74:2e:3c:28:
                    d0:3f:34:bd:f2:fe:06:0f:ee:45:10:44:b9:c7:ca:
                    56:83:d0:15:30:77:db:dd:b0:cc:91:8a:94:c6:81:
                    7c:43:17:11:00:a0:e9:40:3d:d1:88:28:6d:63:9f:
                    ab:02:40:fa:c1:ba:38:a0:b7:f6:ab:94:48:99:79:
                    4d:06:48:5a:b8:70:f1:83:0c:f1:72:a7:fb:43:b9:
                    e0:81:5f:bb:16:93:90:da:f8:83:3a:3e:47:95:c4:
                    c9:f4:e7:26:2a:db:53:cf:ab:9d:9f:c4:dc:5f:e8:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AD:10:4B:C4:0C:22:C8:0B:FA:34:7B:E3:07:FC:4C:99:03:93:41
            X509v3 Authority Key Identifier:
                keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f9:3d:6c:1c:30:24:fe:3b:69:c5:c0:bb:7b:1a:a2:92:9f:
         9c:2a:8e:81:5e:59:be:d3:b8:1b:95:bd:1c:3c:db:b0:a6:63:
         1c:88:7e:9e:10:21:99:c5:57:70:54:d9:57:0c:73:ba:ff:5e:
         5f:b3:59:05:bd:f5:42:1f:1a:a8:3d:86:f9:87:ea:c1:04:ba:
         eb:33:14:95:f4:a0:01:dc:e8:66:0a:53:39:2c:87:58:b7:96:
         4b:71:52:09:fb:e9:c2:62:b2:8b:eb:6d:91:42:cb:96:61:f6:
         c0:8a:9a:54:e6:52:fa:4b:b8:f3:ee:3b:bb:89:ae:14:3c:57:
         e1:67:04:9a:ed:2a:92:c5:ed:3d:c6:6b:0d:4f:65:92:a2:6a:
         2a:bd:65:eb:b4:0f:bf:eb:db:6d:ef:77:0d:37:0b:26:11:1a:
         85:03:28:4d:bd:b3:85:d4:6d:76:62:37:fb:84:96:c9:e1:fa:
         31:10:91:b6:86:67:30:41:78:2a:89:3f:7b:0e:c6:0d:e7:73:
         2e:a8:e6:40:6f:fc:95:84:f8:51:37:40:0b:f6:ca:06:b1:34:
         14:59:23:77:c5:1f:28:6a:ae:e4:59:0b:ad:73:12:1d:f4:ac:
         aa:b5:f4:68:da:88:06:af:9f:c9:2d:0c:27:74:bc:40:19:69:
         8b:82:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:52:03 2024 by rpki-client on console-fra.rpki-client.org