Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File:                     g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier:          fiXNNhdgQJp6xeADsWe2Mn85Q686E8eC3Ko53BKte6k=
Subject key identifier:   F8:5B:5B:31:59:22:24:CF:07:6F:DB:D9:CF:C0:13:9B:E4:A8:B0:A2
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer:       /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial:       018F88920D3CEE8BAA89FDC3A7D4911F4F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number:          117F
Signing time:             Fri 17 May 2024 22:00:24 +0000
Manifest this update:     Fri 17 May 2024 22:00:24 +0000
Manifest next update:     Sat 18 May 2024 22:00:24 +0000
Files and hashes:         1: 2mR7XyS9TGOtkhE1irnRxvk1z8A.roa (hash: Dhezoutf2DrC9umNfUjZaEj8Nm5W2xAjWUvw5AaDRnk=)
                          2: B5WdsEkW5-OF5-zWm3HdrWn2w6Y.roa (hash: lSv/o4e6WbsrzmKM+yeNHbtxUnmuLlnBUaM8nO9pvMI=)
                          3: Sw62IldNSUfgh5SzmwYQA1fxe1M.roa (hash: yMb8/wbBiuaCnwDEGz6uCONG8fmPh0zHxKd0RijEVRk=)
                          4: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: TCuzr+N+P+VK/KwaLRjJJpwLUzbAnlOkkRMFUlxMIFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:0d:3c:ee:8b:aa:89:fd:c3:a7:d4:91:1f:4f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
        Validity
            Not Before: May 17 22:00:24 2024 GMT
            Not After : May 18 22:00:24 2024 GMT
        Subject: CN=f85b5b31592224cf076fdbd9cfc0139be4a8b0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:93:12:10:f4:98:6b:2d:0a:9b:70:79:64:8d:
                    06:ae:85:cd:75:0d:e9:fe:aa:1b:b0:df:a1:e9:b5:
                    78:ff:9b:08:c9:d3:c7:e9:ed:ad:6e:50:f0:ad:64:
                    ec:ba:16:59:4c:54:0a:97:1a:af:81:54:85:63:fd:
                    fa:63:a3:67:70:2f:55:c9:6f:d2:4c:04:86:e3:ad:
                    2f:4d:0e:40:51:d1:88:f5:87:66:3e:6e:e0:b4:3f:
                    41:e0:1a:fd:2b:e0:f3:32:26:63:95:29:b0:2c:12:
                    13:31:81:3a:c4:4e:c1:a5:07:ab:06:e0:e7:d2:b0:
                    8b:fa:6e:4c:01:58:f5:ad:c9:94:01:46:52:1c:ac:
                    10:6d:58:b1:90:5a:81:f2:c3:44:cd:11:10:72:33:
                    67:42:99:06:78:01:5c:08:f1:f5:d8:51:3d:f4:9a:
                    1b:9b:9a:bf:2b:c9:3d:62:38:d0:2b:5e:d6:b3:4a:
                    f2:22:36:a7:2e:42:fe:e0:d0:10:d1:05:46:71:4b:
                    68:e3:df:d8:29:ba:33:08:98:8d:40:bf:77:41:c0:
                    f5:88:19:5a:57:ed:25:90:6d:ba:90:08:0f:c5:76:
                    1f:6c:90:63:c3:ef:3e:a4:99:b4:87:be:0c:c8:9f:
                    29:f9:65:84:e8:ff:78:c9:9a:bd:d6:f6:87:98:85:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5B:5B:31:59:22:24:CF:07:6F:DB:D9:CF:C0:13:9B:E4:A8:B0:A2
            X509v3 Authority Key Identifier:
                keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0d:f4:2d:67:8d:ab:b0:ef:a2:f2:21:7a:35:d2:bc:4d:78:
         bf:95:ef:37:c6:39:42:f6:7c:a9:7d:11:07:1e:1d:b6:1a:f0:
         c9:a7:fd:e8:f1:62:fb:cd:2b:07:f7:10:32:b9:e0:18:1e:e2:
         11:ae:14:17:28:eb:5c:7c:16:00:bf:90:f5:86:72:cf:05:e7:
         2f:6a:ad:f6:11:d7:0f:20:a0:ef:67:66:65:35:d1:ac:ed:3c:
         88:d3:33:04:c4:74:61:38:a2:95:27:5c:da:63:d7:60:89:f7:
         aa:f9:54:b1:52:c0:78:35:dc:ca:a7:df:3d:30:96:26:d0:15:
         04:f1:9d:2c:58:1b:5d:20:2b:b2:37:fb:93:e0:8b:a9:3a:b3:
         11:c4:a2:0e:3f:fb:b0:26:0d:e4:3f:6b:5d:77:54:62:eb:09:
         bc:95:0a:cb:d2:37:6b:b8:48:66:8f:1a:f6:10:49:d0:e1:6c:
         a6:01:c4:d5:69:48:f7:04:c5:14:0c:ec:97:ab:eb:62:fd:e8:
         35:73:69:b2:a1:5e:67:d0:5a:91:d3:96:80:0a:08:5b:f9:a7:
         83:d9:2b:8c:74:7b:30:9d:59:02:d3:34:c7:0c:e6:18:84:58:
         86:ad:70:1d:25:0c:d6:9d:35:3c:f7:c0:32:04:28:00:25:8e:
         e1:93:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:48:42 2024 by rpki-client on console-fra.rpki-client.org