Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File:                     p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier:          DXhjU+sEuHwt4HQsUryyj8ZmudMd7ohmD5Ok/Pu5aCM=
Subject key identifier:   6C:E7:0A:FA:3D:99:43:25:94:E2:A7:C1:53:D6:0B:5B:AE:99:07:D4
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer:       /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial:       018F87483C467B1906C7FC862AD0363CB829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 16:00:08 +0000
Manifest this update:     Fri 17 May 2024 16:00:08 +0000
Manifest next update:     Sat 18 May 2024 16:00:08 +0000
Files and hashes:         1: AHBHOHN6ts_DcPkKBOXitCmW3MU.roa (hash: bqLyK/Sk7M+ZOfSeenv51Ma/RsGhCq0CpUI5U21KUSs=)
                          2: HVYyZcnF4FHi_7SAOJC9uSWFVo4.roa (hash: SHWmq0L1vAhHYKHtI5ddRXua9UwLJJHIiDZrHj3FtDg=)
                          3: gwlteie8rtskeoUtCTCooiYi0E8.roa (hash: XBGAbrjJ1i+f/NPeRe7/Zs9jr5TT2Y2x3C2NjcXltAA=)
                          4: ntPCHYuAjDLDmUYjrzEKvYV7f3w.roa (hash: NeM+RuE4k9MfQkvGY41obdWp7VGPRenlT9Yr92FHmVo=)
                          5: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: shC3fw/IcgBwOX2QxsuIoWoDWTffZprJxbrX8VXLxT0=)
                          6: tU0mLQ_KNCFRMWt1dZ8BohKte0Y.roa (hash: pnGA+eh6zhDl9eoamzHOIdFDfPrPH5QlbhFoK1cq3DQ=)
                          7: wFjcNXXvZZGVWeRTe-1xM_MU4IM.roa (hash: T9LOSw/2eAbZFz02xGJPYUIVh78oEJZxe3sE0fzSR78=)
                          8: zoivL_WzxVLkhrs5WJeJrMiSpL0.roa (hash: uulJv87eHKopdA5ii6HpoblGLnKccL2uJmNgMUcHZNA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:3c:46:7b:19:06:c7:fc:86:2a:d0:36:3c:b8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
        Validity
            Not Before: May 17 16:00:08 2024 GMT
            Not After : May 18 16:00:08 2024 GMT
        Subject: CN=6ce70afa3d99432594e2a7c153d60b5bae9907d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:f5:a1:f5:f8:27:d0:ec:c9:b5:5e:36:3a:
                    b9:f3:4d:8e:d3:57:1f:dd:13:d2:58:a2:2a:13:5e:
                    81:a1:a6:c8:ef:57:2f:77:d0:22:79:28:55:75:a0:
                    1b:d3:bb:73:75:29:ce:31:56:f8:fd:cf:a6:b0:07:
                    52:4c:73:56:d8:3e:23:d6:d2:30:ca:fe:0d:4f:77:
                    14:e8:06:9b:eb:9c:6e:b6:02:67:a7:ac:44:42:46:
                    95:de:8c:43:04:e2:43:47:37:a1:5d:6d:a8:d9:6f:
                    71:b2:14:0b:ec:e6:cc:79:6d:20:3a:f5:ae:74:8e:
                    54:34:ce:c7:29:66:6c:d6:51:23:44:00:d3:52:47:
                    dc:5c:da:5e:49:7d:dd:09:7c:00:47:72:60:01:a0:
                    c8:56:98:b2:9c:30:54:f6:bd:5b:98:ae:03:24:5c:
                    25:13:21:39:ed:a3:15:d1:91:1f:31:05:10:7c:a6:
                    e3:68:13:e6:8a:d1:71:3f:11:ca:95:42:f6:48:ca:
                    ff:bc:09:2a:f2:e4:e5:dd:4a:5f:14:6b:cb:bf:55:
                    73:4a:18:f0:fa:f3:55:a2:0a:fd:74:af:0d:f1:7f:
                    39:3b:dc:6c:8f:3b:d5:ed:d0:9b:32:ed:43:b4:a7:
                    6c:54:c3:78:6d:34:d2:c5:8d:5d:4b:a7:87:27:c2:
                    a3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E7:0A:FA:3D:99:43:25:94:E2:A7:C1:53:D6:0B:5B:AE:99:07:D4
            X509v3 Authority Key Identifier:
                keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:b2:07:7c:44:b5:ce:ab:1a:38:33:22:97:b7:99:97:b9:
         ab:1a:7a:69:28:ea:b0:9c:c8:27:0f:e3:6d:b6:43:7f:5f:1a:
         33:e3:84:d4:67:9c:a5:82:c2:62:29:9b:fd:18:02:a1:41:82:
         14:6f:9a:75:72:70:c4:c9:5b:4a:9d:c8:49:d4:17:f6:32:ef:
         38:4c:fa:1a:11:b3:30:67:ff:a4:e3:fe:c8:c5:84:a3:55:0b:
         70:31:88:6d:d5:0a:71:86:18:c8:2f:66:8e:a0:5a:0a:24:7d:
         ed:85:64:c7:89:ef:12:64:7e:f8:aa:a0:bd:9d:d7:6d:7e:24:
         09:1e:ef:28:69:2e:c6:5b:db:79:c5:f2:44:65:7b:1e:82:14:
         55:57:5d:5e:e4:e0:bd:9b:9f:c7:62:6a:4c:e0:8c:dd:f8:e0:
         5f:42:2e:03:4b:30:21:47:a4:5d:43:0b:ef:85:d0:c7:cf:48:
         29:e0:86:49:48:e2:a4:73:37:d9:f2:71:18:eb:48:a1:7a:21:
         d6:70:2a:7a:25:50:05:6d:f9:03:7c:81:28:62:cc:77:b9:ad:
         0c:6e:b1:44:8b:20:0c:e0:41:c0:e6:d3:2f:68:34:6a:d3:53:
         ac:8f:e1:fa:96:5f:7c:b8:9b:82:ac:8a:d2:78:97:2e:b8:eb:
         c8:b2:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:41:11 2024 by rpki-client on console-fra.rpki-client.org