Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File:                     s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier:          2sicphlUN4eXfCVNXrbj8fXgB5mUGJP4bnGpq0n7Aeg=
Subject key identifier:   2B:76:E2:4E:5A:5F:FF:E2:E6:92:B1:90:C8:BA:1D:DA:C1:42:10:B6
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer:       /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial:       018F87ED0D0EDE63E39EADB5A63BE55CC3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: O8jJLDx2wBEIyqe_ChlorDgmbpY.roa (hash: VbeMWG3z87PhijudkJs35stOP9LFAk+RmusM0BqOw5A=)
                          2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: P5d3a2ASHTvR+J5E0dWMXtI9Wrf+rJ/AgZW7oUBFE1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0d:0e:de:63:e3:9e:ad:b5:a6:3b:e5:5c:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=2b76e24e5a5fffe2e692b190c8ba1ddac14210b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:e5:07:05:7c:af:0e:ad:3a:15:33:18:b2:
                    77:d6:c2:40:16:12:10:df:e6:da:14:5e:8a:04:c3:
                    4a:85:8f:41:df:ec:8c:61:ec:a5:42:6a:07:b2:61:
                    19:3f:3c:d5:1a:e5:c9:28:84:f4:7f:17:eb:89:0f:
                    df:7d:39:b7:dc:ee:90:f5:f9:a0:ef:59:fd:9e:65:
                    08:c6:92:5f:e5:1d:43:42:f1:80:3f:0e:0f:3e:2c:
                    27:0a:f8:17:9f:da:66:35:c6:01:a2:17:86:a3:43:
                    ce:64:57:5f:44:77:32:ab:4f:06:7b:e2:c8:c9:29:
                    a3:5b:43:50:09:c2:1e:7b:bc:bf:1d:0f:df:17:5d:
                    62:ce:bc:f5:4b:47:03:b6:ea:7c:a1:2a:f8:68:37:
                    5d:e8:93:7c:22:7b:2f:44:a9:99:af:94:b8:95:dd:
                    d4:6d:1d:0b:cc:a5:5d:94:b9:73:ae:6e:fc:2e:34:
                    2d:b2:2d:86:55:33:ff:94:36:92:bf:3a:01:24:6d:
                    b2:26:6c:66:c7:d2:6d:f6:e4:43:0a:88:38:06:cf:
                    31:21:37:4b:9c:d2:d3:0d:26:cc:35:d9:3e:cf:68:
                    cd:82:13:b3:55:81:1a:25:16:3c:7c:c6:9e:cf:ae:
                    1a:ed:73:a0:a2:22:07:90:57:92:48:89:79:24:78:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:76:E2:4E:5A:5F:FF:E2:E6:92:B1:90:C8:BA:1D:DA:C1:42:10:B6
            X509v3 Authority Key Identifier:
                keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:76:83:c6:63:a9:9d:86:1e:56:10:5c:d1:8e:23:6d:51:9d:
         80:1c:05:85:e9:e6:da:48:0c:2c:9c:55:cd:1b:7a:8e:98:e9:
         96:09:c0:d8:02:99:73:8b:77:c8:a1:dc:ea:c6:94:40:6c:f9:
         08:6c:f8:94:68:e7:1a:51:36:f6:d0:bc:3c:da:99:dc:af:61:
         8e:83:66:43:2c:88:9e:84:7a:be:5c:ac:ac:21:5b:60:b5:6d:
         3e:ae:cd:6b:6f:6b:9d:d8:8b:30:28:e4:af:4d:34:e9:94:5d:
         3e:02:17:34:29:59:b5:4a:00:cd:6a:97:c7:ef:21:39:f9:3e:
         8e:e4:b8:09:0d:f6:12:f7:29:4e:69:1a:59:3c:3b:c5:57:30:
         93:1d:c9:2d:c5:ad:78:7d:ce:bd:60:8d:26:6a:c0:95:fa:05:
         2b:0f:d4:23:d2:88:91:98:2e:ef:13:f8:53:ec:f4:e5:bb:cf:
         63:7d:d3:b0:53:5f:8f:3d:3c:80:99:6b:62:bf:b1:51:84:d3:
         fe:c8:c2:24:c5:a6:01:80:5d:ca:18:08:f7:30:11:92:e6:a9:
         2e:c2:af:2c:1f:cf:97:65:17:33:a0:d1:ca:30:f4:42:ac:b1:
         ee:f1:92:90:62:d7:7f:ac:4e:2f:75:db:c0:c2:8c:70:45:42:
         a2:a1:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:49:25 2024 by rpki-client on console-ams.rpki-client.org