Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File:                     hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier:          ApyE7yg/DxXyhVBmNZKC9lD6EUTMhTRvFx79QskkLc8=
Subject key identifier:   5A:4E:F1:A4:92:9D:5D:2C:29:31:09:6A:BE:B8:8C:0F:8E:04:EF:71
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer:       /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial:       018F86A379CD50A644585F03E64658AF3FA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number:          119E
Signing time:             Fri 17 May 2024 13:00:11 +0000
Manifest this update:     Fri 17 May 2024 13:00:11 +0000
Manifest next update:     Sat 18 May 2024 13:00:11 +0000
Files and hashes:         1: 7anSGolHHEUtE9eQp3FaQpx0s5k.roa (hash: xG+2GmGLBL0vL/CNhG9LqHQ9O78oNR276EBaVnrzFiM=)
                          2: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: /I/9yGOtbXzHxR3GMAK2nCOhLZC/0cSCxy8nY4SRwcI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:79:cd:50:a6:44:58:5f:03:e6:46:58:af:3f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
        Validity
            Not Before: May 17 13:00:11 2024 GMT
            Not After : May 18 13:00:11 2024 GMT
        Subject: CN=5a4ef1a4929d5d2c2931096abeb88c0f8e04ef71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:d0:56:87:5e:e1:d1:68:25:88:0e:3b:15:
                    a9:6d:3b:19:85:77:49:79:10:67:ec:f6:54:bd:5b:
                    ac:cc:96:52:8b:7a:e9:76:a7:55:dc:7c:0d:c2:cc:
                    e7:8d:fe:11:82:54:48:dc:0f:74:ac:02:a4:97:ac:
                    84:ef:15:29:8a:8c:34:26:c1:2b:a1:eb:23:c8:75:
                    c1:b5:eb:31:66:d2:22:d8:07:9e:a3:c0:6c:98:5d:
                    6e:f0:3b:1b:76:71:b8:79:e6:e9:81:4b:c9:ce:58:
                    ea:bc:7b:88:01:11:a2:cd:7d:9a:13:66:5d:81:0a:
                    2d:ed:74:76:3f:d9:c1:5e:ad:f4:29:82:d3:36:08:
                    2c:4d:03:f9:2d:30:3d:06:bf:88:47:c4:4d:56:08:
                    16:f7:4e:7e:cb:52:12:94:bb:b9:e9:36:db:40:d1:
                    37:c9:b7:75:59:99:a1:34:8e:88:bd:29:32:51:07:
                    1a:c4:45:c5:b0:d3:18:a7:be:cf:bb:2c:b8:41:ce:
                    90:89:97:ff:75:43:07:d8:41:74:e1:51:0b:92:fe:
                    51:d8:24:26:c1:3a:7a:ae:cd:47:8f:29:b3:85:6e:
                    9e:68:23:21:b1:a2:0a:a7:44:e6:18:6a:3d:d4:cf:
                    e5:69:ce:e3:19:bc:8c:5c:e1:29:cf:9e:bb:1d:60:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4E:F1:A4:92:9D:5D:2C:29:31:09:6A:BE:B8:8C:0F:8E:04:EF:71
            X509v3 Authority Key Identifier:
                keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:fc:7b:e5:78:50:6e:ac:b9:4f:bf:a0:71:09:48:9f:f4:
         e1:1a:d8:30:8b:bd:6e:65:d1:32:d8:b3:ee:e4:7e:30:3c:64:
         4f:ba:35:21:97:e4:08:60:ad:73:66:9e:a3:0a:17:08:79:61:
         c1:3a:99:6c:b9:3b:38:47:c5:4e:f3:13:fc:60:94:54:a8:f6:
         10:0c:b4:73:be:e8:8d:be:00:ec:c9:90:75:93:86:d1:a3:d1:
         e5:dc:ed:14:91:6f:61:2a:2b:51:d0:e0:19:3d:07:ea:26:ef:
         43:f9:fc:af:42:47:4f:aa:64:34:19:0d:c5:3b:60:7a:d0:6d:
         30:f0:ea:8b:6b:16:d6:67:22:65:05:8f:1e:cd:56:9d:a3:de:
         b9:a8:11:45:13:d7:4e:5e:5c:9d:f9:46:58:5c:08:c5:1b:e7:
         fc:5f:89:d7:5c:40:76:b0:76:08:89:4d:97:cd:56:55:aa:b8:
         90:39:51:3f:b4:9c:57:39:4f:19:5e:9f:41:21:9c:b7:bc:a8:
         7c:19:cf:4e:6c:8f:05:11:e7:a8:f7:65:d4:a4:07:33:ae:a0:
         dd:69:62:5d:51:4c:0a:4b:13:df:e7:e5:58:fd:79:ac:6e:d6:
         04:cb:46:92:c7:53:e7:1d:ee:0f:4b:0d:3f:58:5e:fd:ef:2e:
         b1:5f:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:03:20 2024 by rpki-client on console-ams.rpki-client.org