Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File:                     dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier:          kvP0jQV3TrfvLS0EPUXW+sxeBa0gbpHBbkjxKNmG6FE=
Subject key identifier:   88:03:61:76:ED:A5:41:FE:92:9A:B2:B9:AF:F5:94:C5:41:8B:81:22
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer:       /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial:       018F847E14ECEEE75C6731E3B4CADD6918EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 03:00:06 +0000
Manifest this update:     Fri 17 May 2024 03:00:06 +0000
Manifest next update:     Sat 18 May 2024 03:00:06 +0000
Files and hashes:         1: Q12l_FKSqCZ3jSAka9iTQkPNP3g.roa (hash: cIOs052A1wlVGA1vbrfV/kcldAnFPHgZftY0uuBdHX4=)
                          2: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: MM3OqwseKZMuUMBsnWre1EBs7KWCKs7IohuBK5K7feQ=)
                          3: jJxTZKd8ZsZBCxSo9nJuTu9hpLA.roa (hash: fTEGDhlV4dyTW/fAEKVUVzseX2Qb7OZIWXgijIdW81w=)
                          4: rYAwCYZcmpSYSynBNCjZ675TxXM.roa (hash: H308GDb3XwreeEzdaS7DIJLHeNCZF8XlS5Zx8IuLd4s=)
                          5: wFjn6IhiIVJzS4tGb09EvyHGwbg.roa (hash: TrbkVqfGUEVmNrDtTofqauuiRqiWZlmagROiGBJNEtM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:7e:14:ec:ee:e7:5c:67:31:e3:b4:ca:dd:69:18:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
        Validity
            Not Before: May 17 03:00:06 2024 GMT
            Not After : May 18 03:00:06 2024 GMT
        Subject: CN=88036176eda541fe929ab2b9aff594c5418b8122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:f2:d3:79:cd:b3:c5:88:7e:47:7a:54:fe:
                    ae:b2:8e:9e:ab:74:78:c3:00:78:c8:a6:cc:8d:94:
                    16:2b:c0:76:b2:a1:fa:56:b5:69:23:c0:c4:50:3c:
                    ea:fa:68:f5:09:7f:73:6a:b2:b2:9a:86:32:50:3b:
                    75:ea:ea:42:0e:1c:0c:73:d8:8c:ed:ae:8f:f5:83:
                    65:7b:98:b6:5f:54:7c:6f:b1:7d:41:ba:52:70:52:
                    1c:2e:41:44:0a:70:73:2b:9d:ab:7c:5a:8f:74:97:
                    46:de:4a:07:3a:75:8f:cb:3e:8c:df:24:0c:3d:30:
                    6f:96:05:4f:65:f5:bc:ca:11:09:cb:34:cc:46:ca:
                    08:60:2e:8e:b3:56:d8:26:5b:0a:5f:c0:f1:e9:16:
                    58:0c:4e:fb:a3:a5:1b:25:d5:f5:47:62:c6:db:9b:
                    a1:9a:e0:93:03:b5:39:e1:cf:21:bc:4f:c8:10:7f:
                    b3:0e:bb:bc:9c:5c:4a:b4:da:bd:ae:91:ca:71:c7:
                    d6:7b:f4:e2:db:ad:a9:26:b5:c9:bb:0b:eb:81:62:
                    df:07:56:a0:f4:8e:1a:c5:95:b1:a6:02:ed:f3:0a:
                    10:d8:b5:26:83:77:34:66:03:87:0e:ab:43:25:e6:
                    fb:1e:0a:d2:82:41:b2:f9:c5:d1:a2:0d:1d:ef:41:
                    d2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:03:61:76:ED:A5:41:FE:92:9A:B2:B9:AF:F5:94:C5:41:8B:81:22
            X509v3 Authority Key Identifier:
                keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:7f:0d:bc:ed:d3:1c:a2:40:8d:8a:7d:20:2d:4f:24:92:
         d0:11:f8:36:10:1a:b1:52:6a:06:2a:73:6e:ce:c7:71:63:e0:
         4a:dc:0d:02:8b:2d:c8:16:26:f8:4e:97:b4:23:0b:d9:48:f5:
         88:0c:37:22:a0:f4:4a:2b:d1:11:aa:ef:29:d5:d9:91:31:e2:
         de:a1:5a:21:75:9e:75:a8:9e:e4:04:88:e8:a8:e3:6b:fe:55:
         94:56:51:d7:1a:fb:f1:ea:da:d3:cf:c3:45:4a:dc:22:a3:0d:
         c9:b4:b3:c2:9a:b0:89:89:27:8d:c1:52:a2:49:f7:1a:a9:5f:
         be:0b:04:13:52:ba:d1:25:71:56:26:d5:91:bb:2c:b0:44:c8:
         b2:0e:d3:3e:8b:f4:7f:a5:55:2b:18:65:a0:9a:9a:7d:88:15:
         aa:b7:76:cc:7a:b9:5e:3c:32:5f:bc:10:b8:8e:a8:7d:11:a6:
         68:a3:b4:0d:06:29:a6:61:4f:72:13:cd:3d:d4:da:5b:bf:0d:
         31:a9:87:24:34:f9:2c:69:af:f7:1f:6a:a9:43:68:cf:9c:53:
         be:14:2e:97:0a:e1:c4:d3:f2:ad:57:77:7f:9a:e2:69:f0:43:
         9d:78:53:82:5d:9a:91:d6:55:a3:da:52:17:98:24:fc:90:58:
         78:8b:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:31:43 2024 by rpki-client on console-fra.rpki-client.org