Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File:                     aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier:          bilJ8CuNWMXF56cJve9eV1cVJhCT6NU8lCzrwcZ2Kl4=
Subject key identifier:   EC:B7:A4:BD:60:E1:39:EB:27:2A:C9:03:15:FA:8D:3F:72:C8:F0:72
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer:       /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial:       018F87B6A0B4268D9A2AC3808534F71AA206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 18:00:43 +0000
Manifest this update:     Fri 17 May 2024 18:00:43 +0000
Manifest next update:     Sat 18 May 2024 18:00:43 +0000
Files and hashes:         1: 0xfgCcpfi4Adzae5haRNQJm1lNM.roa (hash: C/QNbaac0DDMKZrMj5V/Wa7dZ7Q9fKWzJJgH22HXBDs=)
                          2: OfMFr6d9Ce7l0q44kqHmpyX236w.roa (hash: fXw1zqQvqnpvxDHV5zuMu6REI3SsleCTCR6TGM395QA=)
                          3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: j0rwK6jBkee9kFjPP+MsWT7snc263zzkkuQs+RrINpU=)
                          4: f2s1wBOEuzL-F4O06Rwc8qEuX9Y.roa (hash: 9felSVqlmzMCQEpIbnqP5e4A3V39v8OE1eWJTt54Awo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a0:b4:26:8d:9a:2a:c3:80:85:34:f7:1a:a2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
        Validity
            Not Before: May 17 18:00:43 2024 GMT
            Not After : May 18 18:00:43 2024 GMT
        Subject: CN=ecb7a4bd60e139eb272ac90315fa8d3f72c8f072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f5:0b:b9:a8:87:19:a2:eb:78:96:f9:a8:c6:
                    b2:b6:2b:26:27:56:7c:99:7a:84:90:e8:e1:28:f9:
                    87:1f:0a:ff:fa:51:f6:10:74:8c:8a:e9:fe:6a:93:
                    b1:16:8d:e7:bc:21:eb:8b:32:a9:0b:d8:83:69:1c:
                    25:db:48:7d:c7:88:fd:26:be:38:01:01:bf:b8:88:
                    64:bd:f6:23:4c:65:8f:f4:78:7e:29:4d:02:ef:0f:
                    a0:2b:e9:c7:d1:f9:8b:3a:84:e5:fb:03:82:33:8a:
                    e9:5b:48:ea:54:76:30:f5:2f:86:8f:8b:92:96:d6:
                    f9:56:58:a9:23:af:ff:8a:7e:aa:e8:bb:a3:8a:c8:
                    23:e8:7f:95:a0:ad:67:f5:8b:e6:db:fd:6b:c0:6a:
                    86:1a:29:2f:eb:40:4e:7e:f2:22:8b:6c:50:01:25:
                    7c:cb:00:25:96:f6:97:19:3e:31:fe:87:5a:91:45:
                    88:82:21:0c:bc:35:c5:94:a5:84:b8:f6:96:c1:b5:
                    7d:2d:b2:08:46:70:5b:25:a4:52:bf:70:15:07:01:
                    e7:80:24:11:7a:45:f2:68:71:f1:c6:40:37:b7:b0:
                    f1:3d:68:4c:ee:80:db:75:56:dc:11:6f:d7:b5:1e:
                    ef:37:77:52:5c:7a:03:01:ff:57:06:e0:8b:b3:28:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B7:A4:BD:60:E1:39:EB:27:2A:C9:03:15:FA:8D:3F:72:C8:F0:72
            X509v3 Authority Key Identifier:
                keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:93:09:24:8b:ae:f0:15:8e:b3:4e:b0:74:fb:b2:f0:31:11:
         22:d1:bb:5b:b3:14:f6:d0:89:94:e7:64:7b:36:b2:d6:65:d6:
         63:84:90:ec:2d:9b:7a:24:a3:84:74:dc:92:1e:4d:f4:c3:80:
         01:bc:03:5b:c2:f7:32:cd:dd:2c:af:73:79:b0:81:2e:57:34:
         2c:d8:6a:d9:2b:a0:c7:dc:c8:2a:cb:f2:3a:13:e6:a0:23:2f:
         d6:35:3d:9d:26:10:83:dc:2c:d2:7a:00:34:ba:48:ff:6f:1c:
         d5:a2:27:bf:19:df:75:68:ad:b9:18:f7:22:fa:0a:f0:6a:3f:
         41:fc:4a:2d:c7:4c:7a:b3:3d:ca:19:37:68:d1:74:38:80:88:
         86:be:52:4c:e3:66:2d:3b:68:b4:34:c9:de:bd:3b:13:c6:51:
         c3:0c:13:bb:77:c6:56:12:72:aa:66:5a:1d:a4:10:58:53:c4:
         c6:8a:b0:c3:d4:25:93:47:30:94:34:57:bf:1e:ab:90:83:6f:
         a9:84:5a:a5:f0:66:1d:8e:8f:1e:82:06:79:74:c4:fc:e3:62:
         48:cb:92:23:0f:a0:30:41:e1:af:52:e9:87:24:fd:b1:b0:e3:
         46:84:d3:6e:54:41:3c:5c:15:5f:d1:22:70:8e:e4:57:a3:46:
         4a:0b:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:09 2024 by rpki-client on console-fra.rpki-client.org