Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.mft
File:                     XTnRW9L8yEdxumqimqVEKLIc72A.mft (raw, json)
Hash identifier:          zB3Q3O68SYcyr4rKDWGRD1CUKAVRGrJuhJ0IHIYV1x0=
Subject key identifier:   C2:7D:BF:AC:2C:67:D8:CB:5B:36:79:2B:48:1D:8E:6F:55:CA:9E:52
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Certificate issuer:       /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial:       018F88249875C3F23167EF32FD499EF1A6F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 20:00:50 +0000
Manifest this update:     Fri 17 May 2024 20:00:50 +0000
Manifest next update:     Sat 18 May 2024 20:00:50 +0000
Files and hashes:         1: Aer--S5t61XoJfZ3KLxRKr2QYoQ.roa (hash: 7nLasY/2xCLcwCEuGIY2Vj4yb3jeeTm2AlPZpYewP00=)
                          2: F88YM7kxk9UHt0Ss9UGG-DB2e1c.roa (hash: dRKwNP779BbMKBJfKM3cPYjR6NDU4I4avCSE+3a9IyU=)
                          3: LgX62EaqoZpkW7MhPzT3zCSQ6is.roa (hash: Mg71Qztu8f0t12o6GjxwlKTWnpQOVl7ed4NSXsNMQrw=)
                          4: XTnRW9L8yEdxumqimqVEKLIc72A.crl (hash: aN/FY2G2eroVq7V87fsmELlpOQoeDz+Mf3ZxH6noDtk=)
                          5: ik00-FcrG4kEClEGn8UQi9wjHAc.roa (hash: fw4YnhGUvOtKRHSvlNJA4jBGXkqYND2lkS2Bc03WIPg=)
                          6: wqK3FOzJ1TS01XVGxDFeoBFE4I4.roa (hash: RLgg0bpypFuMrpRUFWPxvPw5NCUNokCtUyTAA/Pl8N0=)
                          7: yLbFcXmNVD0W5bvdCadiFI9_w3A.roa (hash: g6+BFrdsU8/kLIGvBYRDM5yap604q/Bt56uSks+olcY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:98:75:c3:f2:31:67:ef:32:fd:49:9e:f1:a6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
        Validity
            Not Before: May 17 20:00:50 2024 GMT
            Not After : May 18 20:00:50 2024 GMT
        Subject: CN=c27dbfac2c67d8cb5b36792b481d8e6f55ca9e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:2e:6f:d3:2b:74:7e:98:55:03:99:c2:a6:
                    ce:ab:a6:16:db:cd:34:b1:e0:05:db:ea:29:aa:73:
                    ae:b8:1f:64:39:22:75:61:4f:c5:f0:2c:83:cd:a0:
                    89:7a:22:b6:61:1a:b1:cb:5a:38:d7:eb:eb:87:05:
                    75:40:e9:5d:fa:1e:e6:58:93:59:c5:17:33:3d:10:
                    45:d0:de:da:53:fb:77:6d:87:03:19:9a:c8:b4:b8:
                    44:d1:eb:b4:97:ec:8a:80:06:64:a3:aa:ad:90:69:
                    9b:d5:f8:69:79:77:5b:4c:77:44:1d:b7:fd:a4:f6:
                    67:0a:8f:9c:5f:e3:ec:56:47:a9:00:01:e1:35:e3:
                    8e:7f:6c:b8:97:60:98:46:81:0e:bd:74:d9:a3:80:
                    b6:2a:70:ad:be:f0:80:6b:05:48:2d:0b:29:a3:45:
                    cb:39:75:cc:5a:c3:b4:a4:22:5a:a3:3e:d1:cd:81:
                    f7:36:52:47:37:40:67:d2:41:3f:ed:7a:5b:a2:9f:
                    8d:53:47:e4:96:d7:54:f8:ce:2e:9e:55:9e:04:28:
                    8b:24:c2:d9:a5:5a:30:07:01:6a:68:2a:6a:57:2e:
                    7b:3a:18:5f:2d:fc:91:3f:2f:f4:7a:6d:90:7b:c7:
                    90:95:0b:da:9f:46:82:df:d3:86:2f:85:04:14:71:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7D:BF:AC:2C:67:D8:CB:5B:36:79:2B:48:1D:8E:6F:55:CA:9E:52
            X509v3 Authority Key Identifier:
                keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ec:28:23:99:e1:bc:38:c9:48:4c:b4:d1:ca:f8:b5:b0:42:
         62:b4:ae:5d:1d:e8:a4:03:19:81:c4:86:ca:e1:57:78:fe:ad:
         14:c4:83:27:1b:19:06:51:c3:53:1d:b3:a9:a8:f7:66:70:d5:
         13:60:c0:45:f0:a3:8d:02:cc:26:aa:bc:c0:72:22:87:df:f4:
         b8:c1:3d:7d:58:6d:d1:78:a7:e2:66:59:6f:2f:12:e0:b6:f7:
         00:15:30:6a:1b:fc:e0:8e:47:34:17:3f:a7:a7:93:59:e8:e5:
         56:a3:e8:f2:96:ec:79:2e:67:92:7f:51:9e:f1:1d:34:0a:1e:
         85:ab:bd:d1:30:3c:53:7f:e6:2f:c7:bf:a4:11:0f:68:a9:e0:
         2e:36:83:bd:56:44:c5:d2:98:1c:ac:41:52:46:30:2d:30:e3:
         17:7d:df:c0:4b:6d:28:19:fe:5a:f4:93:c5:7a:88:7f:b5:01:
         dc:36:d1:e6:de:ef:ac:b6:c1:00:5c:43:96:17:df:38:80:bc:
         37:9a:28:3f:ba:f4:08:23:5a:8b:80:c4:fc:b8:5e:89:56:6d:
         b0:42:36:a5:3d:77:0e:ca:e8:da:78:0b:43:4e:40:5e:3a:a8:
         f3:fa:8f:a8:d0:f3:64:77:06:87:36:6e:16:bd:1e:5f:3d:c7:
         5c:6d:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:26 2024 by rpki-client on console-ams.rpki-client.org