Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File:                     hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier:          5WGOS+QJcPu9QBPl1eI6k2vlMwp3/U8wprePruWhoc8=
Subject key identifier:   DB:53:9A:06:35:97:D5:C1:2D:91:5B:00:C7:3E:87:85:03:08:EF:A1
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer:       /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial:       018F866C889D7B1E90F03A7AC7CA147EA982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 12:00:10 +0000
Manifest this update:     Fri 17 May 2024 12:00:10 +0000
Manifest next update:     Sat 18 May 2024 12:00:10 +0000
Files and hashes:         1: RapmdbKxd4-1u1OMZqp-QNSnv7g.roa (hash: vsj1XuWEeCqCpen7DLBtj9gNrp7e9YqR9empotnE2Z8=)
                          2: c9h9BIhGqxMzesNTcWaJ6J0bwrs.roa (hash: zTufh34at76hXxd+wxbbEBZTIX34u4D9JNNUYZhvz+Q=)
                          3: hUY-l9AuH_m10IYseqMjnVrdcJo.roa (hash: Qm8PCwhfq66P9DlSdEVbxN0rc+I49qLUtrZsIdzmpw8=)
                          4: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: 7D8Kd/OHQ2Q19NN9Tu1hO0cWJRht5soNLd6ZgsCd1do=)
                          5: mhoGBAh_vp3bLleS0yUoEDwBxtQ.roa (hash: dzaTv+46jF+8NfV4OnmdVqmMz7rKpL0qgsQyX+YYJQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:88:9d:7b:1e:90:f0:3a:7a:c7:ca:14:7e:a9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
        Validity
            Not Before: May 17 12:00:10 2024 GMT
            Not After : May 18 12:00:10 2024 GMT
        Subject: CN=db539a063597d5c12d915b00c73e87850308efa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:90:bb:2e:d8:bb:ec:0a:7f:2e:a6:3c:9e:21:
                    92:83:ed:65:88:f3:e6:3b:a0:37:32:23:75:2d:9b:
                    08:00:ca:02:64:bc:c3:65:5f:43:c9:3d:f2:84:bd:
                    0b:56:02:88:f7:fb:57:c0:4b:9b:89:28:6f:cd:e1:
                    05:01:9b:06:30:ca:0f:14:72:df:b6:4d:6a:38:48:
                    53:9b:f5:58:e5:5c:58:2b:ad:2f:64:99:68:81:96:
                    48:b6:91:d8:3c:3c:4e:17:05:2c:8a:46:b8:89:9d:
                    5d:4e:3e:c8:5d:ae:81:27:d6:76:00:06:8d:8a:fb:
                    fd:9d:70:33:85:11:28:b6:1d:89:69:ad:e2:61:69:
                    91:cf:b7:25:6d:a8:9b:fa:1e:c8:97:28:5a:4d:ea:
                    db:27:4f:24:30:29:d6:a9:58:84:1f:b8:47:85:7d:
                    b5:1d:bc:ba:3b:32:f2:30:4d:ae:33:d6:73:27:c4:
                    14:c3:ae:92:a4:73:44:00:3d:a3:92:20:9c:72:b7:
                    50:95:db:4f:38:c4:e1:2b:c2:77:33:26:c4:19:bc:
                    7b:5b:81:2e:a8:70:7c:29:4e:b7:33:4d:97:f4:28:
                    ec:66:49:91:3b:27:84:20:06:ea:31:6b:b7:19:1e:
                    2b:d9:a3:35:e5:10:3f:38:0e:d8:d2:4a:14:c1:b5:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:53:9A:06:35:97:D5:C1:2D:91:5B:00:C7:3E:87:85:03:08:EF:A1
            X509v3 Authority Key Identifier:
                keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:fe:4a:4b:3a:6c:52:3d:0a:b5:65:89:ac:fd:1d:5d:b3:
         35:e9:42:c9:57:3c:9d:de:27:51:fd:c3:e1:e4:c5:db:0f:07:
         66:ce:b7:81:77:67:3e:12:b3:96:cc:68:b6:bd:90:39:69:47:
         24:be:f5:d6:76:f2:84:49:d9:6f:ff:a2:13:63:3f:89:b6:0b:
         e6:c2:c9:30:ca:a8:1b:0f:46:03:78:64:87:07:89:3e:01:32:
         db:a4:b0:87:38:43:d0:2b:85:e0:45:90:b2:75:6c:ca:33:ea:
         9a:a4:45:dc:12:78:fd:d8:b7:c1:52:de:8a:9b:1c:d5:c7:f7:
         2c:4c:49:9b:ca:12:03:be:e3:1e:1a:1d:21:04:bb:31:be:ea:
         65:da:db:28:c7:10:6e:8b:54:31:db:a7:6f:d0:f9:59:f5:97:
         62:5e:e2:3c:ca:be:42:97:86:89:22:22:f1:52:85:e2:4f:91:
         0a:4f:09:d4:54:73:17:f6:f9:30:9c:20:20:77:bf:cb:11:46:
         4f:c3:4f:22:01:bb:2e:d3:f5:38:23:ca:17:84:3a:22:84:f1:
         7a:de:27:8b:0e:11:82:ca:4d:54:79:60:44:c5:34:9d:7e:c1:
         42:16:bc:83:38:d8:18:9d:67:b9:10:9a:3a:ed:04:69:e8:a1:
         0d:31:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:43 2024 by rpki-client on console-ams.rpki-client.org