Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File:                     p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier:          FnQQBTWqBenOErLz4DgaP46ZYj+p0UNZEka6YVEbTRE=
Subject key identifier:   EF:9A:73:C8:81:76:4D:4D:E1:6F:17:56:E4:DF:2C:73:9C:6E:FF:B8
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer:       /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial:       018F8824848DD7C6FB60021A20F885C3451C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 20:00:45 +0000
Manifest this update:     Fri 17 May 2024 20:00:45 +0000
Manifest next update:     Sat 18 May 2024 20:00:45 +0000
Files and hashes:         1: IewQAT7PoAhii9IOjHj5WasXGjI.roa (hash: nYg/sgldywLDJ7YamopjWyAm7ro3sAvIFHFy8gDadl4=)
                          2: NH7Q-GkSSe-JI4WpKy3ObSAIPnY.roa (hash: 4yXzMifE4ikZsK3z81G0Bet/aht7oP2Xs7sqd3MPMI4=)
                          3: mvKlnp01Neqhpw7xiWPPxve9E1o.roa (hash: cj+JxWgVcGKDiMoOgtcCq5LVm/7nmtJ1s1vejUOzIR4=)
                          4: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: FHdc/3NRhi6CGmcidnI1UFTptefoc8GtsNLviy2i70I=)
                          5: yuWYmozkx1wv-d6rHUVXUk5JNSg.roa (hash: jRYFllQB+S07a1fBdnliSUMtzIiAfHKqb80rZCEm9P4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:84:8d:d7:c6:fb:60:02:1a:20:f8:85:c3:45:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
        Validity
            Not Before: May 17 20:00:45 2024 GMT
            Not After : May 18 20:00:45 2024 GMT
        Subject: CN=ef9a73c881764d4de16f1756e4df2c739c6effb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:61:c9:39:f3:ee:16:73:c7:93:00:21:6b:
                    a6:16:57:3f:a6:1e:1f:ee:47:3e:80:be:50:29:e0:
                    af:1b:6e:c2:47:95:20:5f:7f:c7:7f:9c:49:a9:db:
                    bd:ab:53:b1:dc:91:f6:65:86:8f:7f:f4:1a:8e:67:
                    0b:86:b4:8f:4a:a5:16:f0:e8:d7:54:b9:e2:b7:ab:
                    33:fc:25:f0:00:4b:f8:8e:65:7a:42:8e:67:ca:17:
                    8c:ea:d8:73:a1:7d:7b:5a:b5:c4:14:48:a5:f3:31:
                    bb:91:32:e8:02:75:bc:34:ab:e2:bc:2e:ac:91:25:
                    37:b1:f5:a8:a4:50:12:3a:cf:b8:36:9b:3c:57:ba:
                    b9:78:72:d6:36:e5:20:df:ac:92:19:f0:37:f3:8b:
                    8e:9c:58:b0:e6:b6:14:00:7f:8d:a4:2b:25:17:0b:
                    91:d2:df:72:f4:a5:3e:f4:67:75:8c:cb:e1:d7:57:
                    d3:ce:da:d4:4c:16:10:f4:c9:45:8c:20:05:dd:3b:
                    92:c9:31:9f:15:e4:c6:f6:2e:5b:4c:50:ab:bc:6d:
                    d4:d4:d7:e5:52:ee:18:74:b2:3a:ec:50:6e:bb:77:
                    a8:83:df:bf:73:ea:38:e7:05:02:6c:e0:38:39:51:
                    1a:c1:ed:ae:0d:bd:04:0e:90:35:2c:79:25:05:32:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9A:73:C8:81:76:4D:4D:E1:6F:17:56:E4:DF:2C:73:9C:6E:FF:B8
            X509v3 Authority Key Identifier:
                keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:97:df:d4:e1:4a:e6:c0:c5:8f:d9:72:f6:75:b7:51:52:23:
         f7:82:a9:91:db:5d:34:a5:80:71:65:32:1f:9b:f8:40:79:42:
         f1:45:20:49:00:59:31:72:fa:f8:a0:2c:aa:d3:d1:a4:6e:3d:
         80:e1:7f:69:bb:16:8b:b7:35:2c:80:29:35:41:61:07:85:bd:
         3f:92:85:4b:e4:64:3c:3b:20:b6:a2:a5:e6:a6:d3:fa:4f:96:
         9a:27:66:22:01:63:80:78:28:dc:61:d9:3f:be:7b:12:8a:b4:
         10:f0:85:89:db:18:ba:73:fc:b1:2c:3f:fe:3c:ab:ea:83:b3:
         df:0a:8d:74:0b:40:a1:08:27:39:c8:cd:4c:19:e6:c8:42:ac:
         9b:9c:6d:9f:2b:07:f6:8d:3a:16:24:23:2f:46:bf:c7:44:e5:
         c0:57:f7:d4:98:ac:97:49:6e:d3:d7:88:03:e0:b7:24:e3:fd:
         ec:c6:0e:2b:a5:69:56:9b:ab:7d:7a:94:7d:39:23:cf:d0:17:
         d5:c2:58:e4:0c:3f:31:26:1a:f6:96:e3:b1:6a:77:85:f1:88:
         fb:9f:6b:09:49:09:99:94:e5:01:dc:3e:5c:c2:3f:8d:4e:29:
         80:c1:89:99:e3:dc:de:14:17:46:91:4c:2a:58:68:ac:55:80:
         56:93:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:27 2024 by rpki-client on console-fra.rpki-client.org