Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          m7RdLf6VDshIfKPUMTxtRZinbh8CMT1PvaW09RL7GEw=
Subject key identifier:   F0:9F:96:3D:60:AB:9F:22:7E:F3:42:ED:69:5C:DE:60:4C:5D:9D:38
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       018F882431ACB30EC786757DDA2E9B421960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 20:00:24 +0000
Manifest this update:     Fri 17 May 2024 20:00:24 +0000
Manifest next update:     Sat 18 May 2024 20:00:24 +0000
Files and hashes:         1: ChORsy3QU_JsKVmoAfD_lSMbrOM.roa (hash: UT/Ni+i+MsE3JKXlPwY7j0pYRfh87tK2nqm9GX6dS4E=)
                          2: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: mvUc5qKTcS/D7spAhUVabUsVl/YFvH76iGi0V5a6cik=)
                          3: tg_L4lCNJ70dH65WdTdDLuQHGwo.roa (hash: gWppbhrUxYuIwVYcNpcTZI74HuBEAbjVhRJ4mV8ecfE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:31:ac:b3:0e:c7:86:75:7d:da:2e:9b:42:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: May 17 20:00:24 2024 GMT
            Not After : May 18 20:00:24 2024 GMT
        Subject: CN=f09f963d60ab9f227ef342ed695cde604c5d9d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:54:d4:fc:e2:3e:65:23:04:68:b5:8d:eb:
                    ef:da:45:02:a7:58:0e:53:5f:c5:54:24:e7:82:26:
                    8e:e0:44:36:f2:4a:bc:10:25:68:ff:1e:3d:e8:96:
                    a1:4c:5b:b8:62:3f:0f:90:d4:e3:59:3e:76:01:39:
                    2f:cd:0e:5f:04:5c:8a:04:81:c4:18:54:53:87:0c:
                    36:58:f5:f9:1a:f3:10:6f:07:26:3a:5d:dc:70:ce:
                    e3:54:70:d4:57:ad:3d:55:50:35:cf:fc:18:57:f7:
                    1d:bd:29:06:cd:1b:bf:4b:cf:6c:57:ba:d1:5d:a0:
                    b2:54:93:7d:5a:df:02:b7:6e:9a:21:de:8a:e3:72:
                    cf:06:17:97:08:8c:e7:35:2e:ee:21:1a:92:6d:07:
                    28:09:51:3a:c9:d0:46:b0:d2:75:92:4c:71:01:41:
                    ad:55:fe:cb:e5:24:07:e0:4e:a6:14:49:08:b1:49:
                    23:94:79:94:66:7e:00:a9:a0:cb:b1:73:b8:2f:e3:
                    0c:7f:3f:ce:d5:22:88:95:08:ca:74:04:21:fa:23:
                    90:d2:a6:50:f9:f1:71:6b:f0:b3:ea:65:e8:4f:d3:
                    d9:73:75:48:d9:02:2c:6b:38:bd:ae:79:2a:fd:f3:
                    56:9b:a0:aa:2a:ce:f6:a0:f2:2d:bd:34:1b:28:96:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9F:96:3D:60:AB:9F:22:7E:F3:42:ED:69:5C:DE:60:4C:5D:9D:38
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ab:0d:45:12:13:60:4b:76:9f:31:75:ee:30:9a:72:5c:13:
         c6:11:a7:e3:c4:1a:d8:14:75:60:19:38:9b:7e:86:b8:da:ed:
         c7:87:de:ac:11:21:fc:2a:8b:bd:2f:33:63:ef:90:1a:d0:82:
         ca:bc:2f:bb:96:df:64:6c:d5:ad:e1:50:52:e5:cb:10:54:e5:
         38:75:89:e9:f3:57:6c:21:bd:2f:b2:c1:bb:a1:aa:0a:97:16:
         28:c2:3a:64:ab:46:09:b9:61:07:d0:71:34:40:11:d5:c1:65:
         3b:66:b0:f0:a9:a0:93:af:a1:c7:cd:2a:2b:2a:a7:1d:da:9c:
         c4:ee:99:38:12:ab:4d:0b:cc:11:19:fd:04:0c:94:f7:0e:0e:
         4d:89:d9:82:38:18:39:45:8f:d1:0a:66:9a:ad:26:9f:5c:81:
         7a:b0:ef:6c:b1:62:06:dd:99:ca:cc:9f:88:42:24:87:ee:1b:
         91:f2:a6:5f:5e:df:e3:99:20:6e:ee:74:60:a6:f2:fd:11:94:
         fe:ef:37:5b:1b:e5:96:2e:cc:3c:45:24:9f:8c:0a:59:41:cb:
         df:bd:e5:ef:27:bd:27:ce:58:85:8e:6a:ed:ea:de:06:da:f9:
         ff:aa:74:4f:08:a1:8d:7c:2d:f6:d9:7d:ce:78:01:2d:58:c0:
         b8:81:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:59:56 2024 by rpki-client on console-fra.rpki-client.org