Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          BpD2N59lgErsF2cr2x3kb+hCuRef76Tj/ylD78aWOOQ=
Subject key identifier:   69:BC:C1:12:86:65:EE:31:C2:9E:46:1D:81:E8:90:8B:E7:05:7D:E4
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       018F87ED733CAE874FA5BEE09D7C3675F52F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:36 +0000
Manifest this update:     Fri 17 May 2024 19:00:36 +0000
Manifest next update:     Sat 18 May 2024 19:00:36 +0000
Files and hashes:         1: 4_x--v8D-BSwBlonOxDMXx3zUg4.roa (hash: LaUusazMLTlNZZzLMeIYh9iYsJTnfmutudXO/oKCcqs=)
                          2: BDX5yd4vLR8CTm6KdWNjG9fu5xQ.roa (hash: cTSrpeq2/Yx2AYzns4JWNz0Ot2HKjhiS5l2V8q8PBEQ=)
                          3: HiJ2d7huVFjEXGgiw_UqdSSAlss.roa (hash: cEYxJWphjQkKfKjD4Ji/JqRXlUWybWuj0g2wFw7etFQ=)
                          4: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: DoYXOUsqtAyF1X2Z4qPWA5kRPX73fuYIo87mwcJLuVs=)
                          5: xIqH5_l3oRoQI0_nopnhw2Fr8Xg.roa (hash: VqVMWsIuTSh0Oh1jDFseDbScDQnKx1ce0ABL/DoLECI=)
                          6: z3SImEjyDtsST6Uj8xi22poo1_M.roa (hash: tYhP/jhCMM/gVWpsesY1vf5EEPozl9lYv//+vMQIeuw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:73:3c:ae:87:4f:a5:be:e0:9d:7c:36:75:f5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: May 17 19:00:36 2024 GMT
            Not After : May 18 19:00:36 2024 GMT
        Subject: CN=69bcc1128665ee31c29e461d81e8908be7057de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:18:34:90:77:1e:48:7b:59:44:e0:ab:1b:
                    58:c6:8f:5b:3b:8c:36:0a:b2:41:7e:9e:42:12:85:
                    85:4b:9f:d7:6f:9e:91:f0:c7:38:e8:46:8a:0f:02:
                    53:02:39:2b:c2:31:21:33:9c:f4:db:8a:6e:44:b5:
                    e6:ad:50:20:2f:3e:ad:f3:57:c4:87:66:60:84:91:
                    b7:89:2f:65:93:05:a7:9f:4f:33:d2:79:99:42:4b:
                    b0:ab:fd:bd:ae:69:af:1c:95:ae:60:84:01:f2:5c:
                    9e:e0:88:01:43:2c:64:71:ac:2b:df:7a:9a:d6:7d:
                    7a:5c:76:ac:aa:66:6a:b6:79:f6:29:e7:d5:a9:d2:
                    bf:0d:5b:dc:26:76:f0:42:7b:00:c9:54:d6:b8:c8:
                    bb:5a:13:19:da:5b:da:c0:30:cd:58:f7:39:0a:e1:
                    89:26:88:3c:ef:ad:c9:d9:3c:d9:35:f0:a0:b1:77:
                    4e:7b:13:cf:e0:90:48:bf:a0:93:7f:e7:17:5f:27:
                    e7:de:7f:86:dc:2b:5e:05:e7:93:1f:66:6c:97:7c:
                    f5:86:f3:35:cf:04:e7:44:f4:b9:2b:85:75:6f:e7:
                    ac:c7:ff:1a:ce:eb:97:2b:65:cd:fe:92:93:85:66:
                    a9:2d:67:10:f0:57:01:22:2b:08:b4:da:4f:81:9d:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BC:C1:12:86:65:EE:31:C2:9E:46:1D:81:E8:90:8B:E7:05:7D:E4
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:47:77:2a:79:44:89:dc:85:24:8d:7b:1e:52:c1:44:fd:
         48:b3:b1:fd:1e:36:cf:d9:90:67:09:5a:1a:70:ef:77:17:22:
         37:d5:be:fe:ef:a5:22:57:97:4b:76:b8:a2:0e:dd:90:c7:0e:
         74:66:5a:23:a1:70:3a:05:51:59:82:bc:30:7e:b0:d9:b5:df:
         62:15:fe:db:1b:91:f3:f5:5d:f8:db:35:53:d1:c9:8b:ea:dd:
         fa:41:3e:c6:82:36:98:73:ef:9c:08:e4:33:ca:4e:ac:44:b3:
         ad:d3:b3:53:c9:38:95:c0:5e:dd:7a:ab:bd:12:7e:42:46:95:
         90:dc:da:4b:6d:10:0b:15:23:9c:e9:ac:e8:ae:95:d3:8c:82:
         dd:0b:2e:ef:87:56:8b:b2:93:75:6b:9b:7e:68:70:2b:ff:e1:
         a8:e7:90:16:a3:b1:c4:06:50:80:53:84:91:07:16:26:96:46:
         2f:de:b3:0a:3f:51:9f:32:a5:1e:39:35:d2:9a:ef:de:58:70:
         44:58:19:4b:38:23:91:da:1b:e9:db:23:a2:8a:77:77:10:d4:
         6e:fc:dd:bd:7e:e4:39:73:66:57:53:25:54:b5:84:b8:c8:46:
         a2:30:8d:8f:a1:5c:ed:be:e6:42:77:ae:20:66:d2:b7:fc:88:
         14:3f:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:06:34 2024 by rpki-client on console-ams.rpki-client.org