Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File:                     hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier:          9nuRL4o2doV05pU9St091+WSdcQHUYTJVjWMSGGOU50=
Subject key identifier:   24:D4:27:E6:BA:58:C5:1A:44:9C:3E:35:3B:CF:7B:50:2C:72:9F:2D
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       018F8748E252DC5C3E0A1A529C06E53956CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:00:51 +0000
Manifest this update:     Fri 17 May 2024 16:00:51 +0000
Manifest next update:     Sat 18 May 2024 16:00:51 +0000
Files and hashes:         1: NBarGzpErMhIHYXWMrmo3k6GnVg.roa (hash: sP6dgvYNTB8XAB+niqVOGwvIZV0voXqsMFX7dFzHCUg=)
                          2: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: soesmbweBHskHsWdRq67PZeIIrby2aNVa+aUw4to5Ow=)
                          3: onq1gN3kXw_hYgWVCLm-DeaKKGQ.roa (hash: UvJFd3s2Oi88G+dUJ9yBmwPQD7aG/zmyVWZlgsc7h4s=)
                          4: upBu8MDd6z7gSI7TXB58F4z8KF0.roa (hash: HnBG5Xxx0f6dEVHfZHGfrT2i/Y4X+WJxNm96aBobVDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:e2:52:dc:5c:3e:0a:1a:52:9c:06:e5:39:56:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: May 17 16:00:51 2024 GMT
            Not After : May 18 16:00:51 2024 GMT
        Subject: CN=24d427e6ba58c51a449c3e353bcf7b502c729f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:01:80:b1:5a:3a:89:d0:b2:d2:58:7a:4f:
                    5d:d0:c6:5d:71:15:b0:df:2b:bc:be:8e:2f:bb:66:
                    a9:1d:99:10:6c:60:d9:32:91:c1:8c:84:b7:25:c8:
                    01:e4:d1:c8:93:79:65:e1:d8:94:92:b1:9d:a6:a9:
                    ec:3a:01:c0:b7:f4:78:c2:bc:b8:22:17:8e:38:b3:
                    79:7e:9b:6d:02:63:91:7f:74:77:cd:55:87:dc:c9:
                    1b:ec:e0:fa:be:d4:a6:e5:f3:42:29:71:eb:20:fd:
                    5e:ba:5c:fb:ef:27:5c:06:1f:42:55:13:0c:87:0d:
                    7a:49:2e:32:12:3a:fc:a9:f5:f9:2f:14:1b:b8:d1:
                    51:49:60:72:3e:1d:0e:e4:d1:02:39:04:13:57:ad:
                    e5:b1:3a:75:3a:50:00:87:9d:83:a3:fa:e8:ab:71:
                    d8:ad:2c:29:62:a6:ab:f6:22:15:93:5f:81:fd:46:
                    0c:4e:54:0b:28:c9:a5:be:51:cd:de:b8:54:b2:01:
                    29:f8:c9:18:46:d6:63:cc:8e:44:d9:3d:7c:18:36:
                    66:e6:33:19:e9:03:cc:64:58:84:ff:9c:14:de:bc:
                    e5:1a:ab:97:22:14:0e:04:f6:ab:a1:93:85:bd:9d:
                    e6:ed:ba:23:3c:2a:fe:c9:3f:09:50:5c:b6:0f:f9:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D4:27:E6:BA:58:C5:1A:44:9C:3E:35:3B:CF:7B:50:2C:72:9F:2D
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ab:3e:46:1d:35:ca:9e:69:4a:76:1e:86:3d:ba:4d:15:5b:
         29:8e:b8:88:c8:9d:56:13:d1:f4:67:9d:70:4e:91:50:b6:6f:
         f0:6b:60:d0:77:99:65:b0:7f:ff:1d:ea:93:ec:3f:70:bf:09:
         b2:b0:c5:82:7f:12:65:72:0d:05:4f:61:91:d2:cd:12:17:d6:
         83:7d:32:b4:be:d5:ca:e5:e2:96:29:ea:fd:ee:a0:6d:81:9a:
         5d:4c:0d:57:8c:cb:bc:89:5c:48:db:fb:5e:c4:25:70:ed:70:
         3a:de:3e:9d:b0:8b:75:63:00:06:3b:00:bc:69:93:79:3b:6e:
         a0:84:43:48:6f:6a:95:34:bd:79:b7:03:99:c7:46:af:26:d4:
         d8:a4:e6:f2:92:5f:a9:59:de:bf:33:bf:61:ff:86:d2:7c:37:
         18:b4:17:a3:b2:f2:ae:f2:c4:ad:80:77:07:d2:ff:a3:73:2f:
         56:74:e8:0e:7e:d9:0d:71:0d:52:f5:6d:21:ae:6d:88:51:b9:
         87:07:18:74:02:bd:3d:89:f6:f0:c4:f8:0d:aa:79:29:d1:ba:
         8b:4e:1a:73:19:ef:da:12:81:f6:e4:f4:72:b0:50:f3:71:41:
         c3:c1:0d:4e:ca:67:b0:7f:7d:4c:6e:49:04:ce:37:38:c0:ee:
         bb:3f:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:22 2024 by rpki-client on console-fra.rpki-client.org