Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File:                     su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier:          8GUlJ0syR7EB0jwHecDY5GBK3Z5BgLmT5f2irBYkq9k=
Subject key identifier:   28:D7:21:BA:1E:D4:DA:6C:93:C5:21:79:B3:D1:B8:3E:E3:4E:EA:D6
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer:       /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial:       018F8C014C64ADEF3F1ADF767F474B9F9B1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number:          117D
Signing time:             Sat 18 May 2024 14:00:46 +0000
Manifest this update:     Sat 18 May 2024 14:00:46 +0000
Manifest next update:     Sun 19 May 2024 14:00:46 +0000
Files and hashes:         1: WHbC46TdN9nz5MkL15H9FBSjyy4.roa (hash: b6nKyxK6ToQmSqgs2r55M4wnKznQgMXtRwTC/+u1i7E=)
                          2: or06vnHu0OlegECluMyQb7vAHNc.roa (hash: BnPis9kS2GHs5VHGoiI6TFPZhglK4BYa+1grzQocPII=)
                          3: qjxLffabLxohlkkPhQCx3jJP5uE.roa (hash: mrA192L+5D7DQiAoyZwJ0PXKKYJ/OuxHy+q2s5DVww8=)
                          4: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: qa3XdvTxWLr8PsZMPXTXMFeK8yAjkt1s1icbWPKI5kM=)
                          5: u2iF4C6V5cUyU-sxZd_oDZu0ufU.roa (hash: rh6p4kUmcmaRa9jfZsU0Bhn4KelUJX2aa448V7kWKaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8c:01:4c:64:ad:ef:3f:1a:df:76:7f:47:4b:9f:9b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
        Validity
            Not Before: May 18 14:00:46 2024 GMT
            Not After : May 19 14:00:46 2024 GMT
        Subject: CN=28d721ba1ed4da6c93c52179b3d1b83ee34eead6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:30:bf:0b:77:7f:f5:9f:60:38:d3:b4:af:a2:
                    2a:5a:f7:ce:20:d8:10:25:05:44:36:15:07:07:fb:
                    0d:bc:79:14:c5:9d:e5:30:4e:8c:f7:49:32:9f:41:
                    9a:7b:dd:86:35:26:22:ba:0e:aa:c4:66:f4:45:1c:
                    e5:24:f9:71:2c:59:4c:1a:3e:7e:c7:32:98:7a:3f:
                    a3:42:ec:fa:60:82:4c:d7:f2:1b:a5:9e:13:83:e6:
                    7c:12:4c:23:6c:66:ed:db:4a:d8:f8:98:de:44:d7:
                    84:81:ff:33:42:0d:5f:ae:70:84:0f:44:39:38:5d:
                    96:e9:66:e1:12:f4:ac:6f:73:5c:af:00:5d:2a:86:
                    a0:86:ad:16:b8:37:0e:0c:73:09:1d:3c:e3:1f:e0:
                    fb:d0:a2:36:98:3b:e5:06:00:04:ed:0e:73:f9:53:
                    9a:60:68:25:db:dd:f6:3f:e5:d4:9a:b5:b9:fd:45:
                    2d:af:1d:88:3e:c3:88:9a:65:6e:f5:d3:5d:a1:fb:
                    29:c8:61:23:34:59:8e:17:13:11:b0:66:aa:e0:04:
                    f0:25:7b:bb:27:25:70:8b:a7:ca:9c:f7:a1:8d:c1:
                    21:2a:73:77:b5:89:f3:fe:66:6a:af:36:6c:76:e7:
                    a8:0d:69:f3:5e:91:0d:83:01:1a:f8:39:60:4e:60:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D7:21:BA:1E:D4:DA:6C:93:C5:21:79:B3:D1:B8:3E:E3:4E:EA:D6
            X509v3 Authority Key Identifier:
                keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2a:7d:79:e7:a4:0f:34:d6:e1:07:67:07:19:8e:f7:0f:8a:
         31:9e:d0:6e:e1:ab:c7:14:a6:33:57:73:62:fa:56:d2:2c:a4:
         b0:ff:0a:06:53:7a:6c:e4:be:d8:c1:17:c5:bd:83:1f:ef:22:
         7b:ad:87:34:17:1d:02:3c:14:cd:b4:0b:28:86:8e:b7:85:75:
         57:69:53:c4:0a:65:44:5e:39:ec:2f:d1:8a:4e:f4:97:4f:6a:
         48:77:79:d5:41:e0:91:0d:65:67:2e:79:82:a0:91:40:fc:d5:
         3a:7a:f4:c1:06:09:83:f9:6f:3a:35:24:1d:ec:07:42:16:b1:
         20:31:f7:f9:a6:35:b8:03:33:c3:77:fd:96:1a:e0:0a:d2:fc:
         46:bb:09:41:c0:4c:ab:be:47:28:b4:08:7b:7d:84:db:25:a6:
         e8:69:a0:eb:73:33:b5:48:90:e1:21:47:d7:8e:d8:d2:2d:e9:
         fb:3e:85:51:10:c0:70:85:98:56:33:0c:dd:10:49:5d:14:38:
         32:be:c8:3b:7b:80:ce:48:07:34:b5:de:d8:7c:34:2c:f9:28:
         08:21:11:71:eb:b9:38:5a:df:98:b0:2a:71:41:11:7f:ea:00:
         95:89:fa:0b:60:28:96:ae:62:05:18:b7:ef:5e:b6:fc:23:b9:
         d8:1d:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:41:35 2024 by rpki-client on console-fra.rpki-client.org