Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File:                     S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier:          d1Gt9i+ymDuMb0FCF7EpWLQCo8sghpC0ECh/bbxswKg=
Subject key identifier:   BC:44:BA:5C:C2:11:AF:64:B3:C2:75:B5:B5:34:23:9D:37:8E:C8:EE
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer:       /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial:       018F87B65180C29E3647DC9D0571778E2C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number:          118B
Signing time:             Fri 17 May 2024 18:00:23 +0000
Manifest this update:     Fri 17 May 2024 18:00:23 +0000
Manifest next update:     Sat 18 May 2024 18:00:23 +0000
Files and hashes:         1: 0mJtl2TslcGXCBQlBsdoXI1dp8E.roa (hash: 4KF6XfQJi+NdI1NTZitW9n9CcXvLf3tozeFtW54w/sg=)
                          2: 1-ODO-j2eMJrAvChyVWLYuz0OBeM.roa (hash: x5d4UHbgp3y2HmWMp7UXcbYOOswnUwtFAATeesIJjl4=)
                          3: 5WBjFGfcfwSP9jOwVPtBQp7H0cc.roa (hash: rM5tozWVbWgcarS4QryenO8qUFUaUA7OMB0V60k5m8Y=)
                          4: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: +ienffVJMTPgZUJW9uKLsR3B2bX8Q/2JT2RhtgVvBm0=)
                          5: VILJm2MWYpSCzWh4oWU3UC5hvNY.roa (hash: r9zF10AQZnWYw/cHXnXMNY07+RE6xUl1FVrECoVamTY=)
                          6: jaDfi9fblOGNu47vnUSri-SiRB0.roa (hash: pqZYNrESMftMpFd+mCGSKqEfQr+ZUyWY/nGRk2vJG0o=)
                          7: lPfuFm9-OC41SZt2yQW5Gehxif8.roa (hash: CFwKjbhWpB0UOrIjGhcdNGKOistk9uQ083B6zywqij8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:51:80:c2:9e:36:47:dc:9d:05:71:77:8e:2c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
        Validity
            Not Before: May 17 18:00:23 2024 GMT
            Not After : May 18 18:00:23 2024 GMT
        Subject: CN=bc44ba5cc211af64b3c275b5b534239d378ec8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:4e:3c:bb:70:d0:f9:d6:da:ec:e8:c9:89:
                    80:de:22:b2:91:7d:2f:be:6a:48:da:b7:2a:71:d6:
                    ce:af:20:8e:3f:7a:3e:33:8e:31:86:3a:f0:07:e7:
                    92:7b:df:15:3c:cb:28:eb:8d:63:ea:ff:1f:99:a2:
                    40:a0:fc:f6:11:ed:90:01:89:4e:04:f8:f5:5d:f4:
                    0d:4b:57:1d:f9:3c:a6:f2:58:52:7e:2d:5a:ab:e6:
                    4e:12:eb:77:a2:60:de:9f:1e:a7:b7:e2:ea:7d:d2:
                    f2:f8:b6:89:7e:12:84:4a:27:9e:b7:85:88:e8:8f:
                    f2:26:53:52:8e:09:e8:3a:79:bb:8c:60:26:b4:9c:
                    bb:2b:6a:13:ec:0e:a7:b5:6b:6f:31:f3:ca:f6:7c:
                    eb:6d:23:6d:a8:b0:61:98:17:4a:66:8e:a1:10:2f:
                    f9:d8:36:a0:cf:e1:7b:2f:9e:f4:a2:a8:41:6f:00:
                    5f:72:02:e6:f6:fa:41:b4:b0:47:02:56:be:95:79:
                    e7:17:74:c1:ea:75:71:1d:2d:a6:ad:4a:38:0b:d7:
                    56:93:c6:7f:56:29:57:fc:58:3e:71:5e:4c:bc:4f:
                    38:9c:69:67:af:bf:bf:26:36:6e:55:f3:96:ab:5c:
                    25:e6:67:be:a2:ef:ab:1c:d7:cd:f0:64:49:b8:c4:
                    dd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:44:BA:5C:C2:11:AF:64:B3:C2:75:B5:B5:34:23:9D:37:8E:C8:EE
            X509v3 Authority Key Identifier:
                keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2d:aa:95:59:df:42:fb:32:42:e7:9d:ca:9f:82:dc:a3:21:
         2a:48:80:1c:33:64:15:91:d1:2e:be:70:d6:3a:ac:e3:df:1e:
         4e:ec:8d:15:e7:f3:23:21:3d:93:e8:7e:dc:b6:80:48:50:4c:
         90:7e:9c:be:fa:30:48:e9:f9:59:69:16:51:a2:41:7b:54:71:
         97:6f:c7:b1:0f:7e:ff:fd:75:2d:12:88:35:8f:a3:33:e5:0a:
         45:78:fd:09:1a:32:a6:e0:86:aa:2d:68:a9:b9:11:ab:3c:c9:
         83:11:94:65:ee:67:53:d3:81:45:bf:40:ba:eb:e5:e9:72:68:
         1c:fc:c2:61:7c:5c:f6:e3:75:0c:9c:5a:2c:03:12:5d:cf:a1:
         54:a5:b9:f8:9f:fb:d6:ba:bf:3b:9a:7b:2d:1c:fe:8d:37:49:
         6d:26:9e:25:6c:d1:e6:15:55:c9:85:29:9e:e7:e7:c8:9a:01:
         f7:c8:40:74:50:d7:78:20:c6:d4:fa:07:98:8e:14:87:b2:a6:
         f8:77:ef:ac:fd:40:bd:a7:2f:d6:37:ea:2a:37:c9:8d:05:a9:
         9d:10:8b:cd:08:41:92:85:a5:d5:b4:15:bc:b1:53:26:be:6b:
         67:57:e6:50:31:e0:72:4c:c1:24:ea:81:cc:26:31:39:e2:d2:
         e5:e2:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:47 2024 by rpki-client on console-fra.rpki-client.org