Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File:                     pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier:          TR1ulH+ydayhv5jTnPFNIdPoCms23xQtFI+k55NrBjI=
Subject key identifier:   10:4F:A4:47:E0:2F:F5:A3:A0:2D:23:A6:18:8F:1F:B7:96:47:BE:42
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer:       /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial:       018F86A3E6A9DC14BEB1199C41819AF08224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number:          110B
Signing time:             Fri 17 May 2024 13:00:39 +0000
Manifest this update:     Fri 17 May 2024 13:00:39 +0000
Manifest next update:     Sat 18 May 2024 13:00:39 +0000
Files and hashes:         1: R5lS2Lg87NxOw_FmjeXh2aymlNg.roa (hash: tVVXpacctdbNoeFaAMSz5FYLyy+w4qf2aRry3EZ2u4A=)
                          2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: FRS6qXOp32wUFb0zSLGWr/jiwZuraRsfoaaDtOUtnzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:e6:a9:dc:14:be:b1:19:9c:41:81:9a:f0:82:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
        Validity
            Not Before: May 17 13:00:39 2024 GMT
            Not After : May 18 13:00:39 2024 GMT
        Subject: CN=104fa447e02ff5a3a02d23a6188f1fb79647be42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:fe:0a:21:3b:8d:f9:ad:d4:dc:cc:83:21:
                    5d:6c:4b:bf:ac:08:bd:4d:83:1b:66:18:0b:01:11:
                    6f:ac:4c:a3:f7:38:16:71:6d:f5:91:75:a6:d8:4c:
                    5d:17:2b:e7:83:34:ea:30:30:8a:fe:6a:6b:f2:ce:
                    56:19:7e:66:6d:ab:cc:4a:ce:31:65:a1:c6:ac:29:
                    84:2d:e7:4a:df:de:a6:37:20:47:3e:e1:cf:df:be:
                    f8:e8:b7:7b:b8:5e:fd:df:32:bc:fa:96:6e:1e:f0:
                    49:e3:f4:cf:29:07:0b:50:af:0a:8c:a9:f1:4e:4b:
                    44:72:f9:d9:32:93:d5:7c:1f:5c:bd:58:6d:85:14:
                    11:c4:ae:bc:ae:2d:c4:d5:0e:90:69:51:9c:11:5e:
                    62:46:5a:39:c0:e1:1f:be:61:e4:da:2c:5e:67:70:
                    9c:0c:16:3e:11:db:83:a7:c9:7b:2a:02:c0:8e:ca:
                    c2:e2:60:15:10:72:d5:fc:77:df:d0:2e:22:cc:01:
                    4e:ad:77:62:dc:e7:fb:e1:69:9f:35:c0:52:9c:b5:
                    56:d8:4d:96:7e:d1:8d:ce:80:90:1c:4b:a4:34:70:
                    9f:2e:64:f9:1e:b5:2c:53:cc:b1:37:00:d4:3b:53:
                    63:dc:63:14:de:07:71:d3:7a:94:41:db:1a:c5:19:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4F:A4:47:E0:2F:F5:A3:A0:2D:23:A6:18:8F:1F:B7:96:47:BE:42
            X509v3 Authority Key Identifier:
                keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:80:1c:ea:73:ae:b7:49:ae:fd:f1:60:5a:e4:ca:3f:63:44:
         7c:77:b3:26:86:d2:28:bb:bd:34:1e:7d:e6:0d:f0:d1:24:2f:
         79:5e:4d:ad:08:d3:a8:c1:af:d7:31:99:8f:47:c3:75:65:6d:
         ec:f6:85:33:7a:6b:58:a2:37:70:47:e7:26:00:46:25:e4:ef:
         45:c0:6e:74:14:b5:17:5a:c8:ae:3a:5a:30:2f:5d:42:35:1d:
         28:9b:b3:b1:ef:97:22:eb:96:46:15:16:d8:cc:48:53:c1:52:
         a2:3c:43:65:93:d6:d9:ce:9a:30:47:0c:76:cd:4e:64:2f:87:
         47:fb:6b:69:4e:91:2d:f7:dd:63:d6:cc:f2:5f:df:98:35:a1:
         81:5c:12:85:5e:37:ad:4a:b5:fc:32:66:73:80:ad:90:14:5d:
         b4:72:d8:16:3d:d6:3d:c8:7a:bc:ec:d6:17:4c:3b:b7:c4:81:
         63:16:78:0e:ed:7d:b5:47:a4:33:34:43:a5:3b:eb:8c:41:13:
         2c:58:dc:db:f8:d8:21:82:b7:95:4e:20:0c:d7:23:4e:cc:21:
         1b:a7:9e:b0:0f:77:7a:a3:da:7c:02:1c:88:57:4f:b9:94:2f:
         d9:f6:2a:27:7f:05:b2:17:e5:a3:3f:fa:71:e9:93:39:16:83:
         21:3c:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:22 2024 by rpki-client on console-fra.rpki-client.org