Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File:                     hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier:          S+lIVNcAyqGJNs1Mhg3xgL8XtcgtQEejRdX19tk2Png=
Subject key identifier:   D3:88:6B:D5:52:79:31:A4:43:A2:B0:C5:54:5D:A7:A1:06:EE:0A:77
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       018F885AE4D85272BDD28FB4B0773E72F1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 21:00:09 +0000
Manifest this update:     Fri 17 May 2024 21:00:09 +0000
Manifest next update:     Sat 18 May 2024 21:00:09 +0000
Files and hashes:         1: 8pMpA6MDQoTasFGr2o3hi5QkSw8.roa (hash: uWFMpKg6rOQC9RogrB7NUxF2KAXzg10hSRVagxNe8Zs=)
                          2: afdJYObpHyQiaIUJ0iep-2LBv1E.roa (hash: WOYATKZAlK9CLfH1+pQVQO3MDNblR3aiBTQ/jOOmqM0=)
                          3: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: tYZqYs4X1ihiWr+dE32DnvAOmapr1zYqiuwlnWXA4N8=)
                          4: wRew0_7uJJnsW-wA2z9MIcR1yAE.roa (hash: OslDVbURcyavypb3pjZIFK/vrgxlUIEvu03Iialq8y4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:e4:d8:52:72:bd:d2:8f:b4:b0:77:3e:72:f1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: May 17 21:00:09 2024 GMT
            Not After : May 18 21:00:09 2024 GMT
        Subject: CN=d3886bd5527931a443a2b0c5545da7a106ee0a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:6e:21:c3:51:8c:74:6d:9a:33:60:82:0e:
                    f2:79:b7:db:a5:bc:3d:18:78:40:ad:76:f3:6b:e7:
                    65:72:a4:e1:02:0f:cd:61:c7:fc:32:20:11:00:8e:
                    85:86:49:ea:88:37:ca:e9:b2:de:52:6f:0c:c8:0f:
                    ff:85:5b:bc:21:d0:42:86:77:3a:a3:8b:07:37:83:
                    69:d3:bd:ee:e2:c1:07:f9:4d:50:45:d8:d5:10:86:
                    18:9c:cc:42:56:6a:5b:fc:a7:0b:16:4b:9c:57:d9:
                    54:ea:e0:12:00:b3:1f:0f:d5:ed:c9:85:87:7a:80:
                    3d:a8:c5:8f:55:af:7e:0b:67:73:ef:79:4a:fe:dd:
                    e4:27:16:58:c3:f4:d0:ee:35:8b:28:e1:9b:cd:b4:
                    31:34:20:6d:c1:73:02:47:83:20:24:a4:08:ab:00:
                    a1:61:b7:f4:a9:fa:32:6a:66:76:5b:66:f6:c0:ab:
                    67:4d:30:73:a3:35:92:1b:50:1c:82:88:18:9c:2e:
                    95:03:a2:e0:89:7a:b7:d0:3c:a7:ce:ec:02:e7:42:
                    0a:50:2f:a8:1a:3b:6c:52:d9:55:63:b6:95:5f:bc:
                    04:da:1b:ab:57:7b:88:3b:50:c8:a8:1b:90:41:70:
                    ea:2d:c3:cf:43:9c:df:22:cd:94:46:c8:31:65:c4:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:6B:D5:52:79:31:A4:43:A2:B0:C5:54:5D:A7:A1:06:EE:0A:77
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3f:94:cf:41:88:ca:7d:31:8c:ec:f4:60:9f:ba:e8:fa:84:
         5d:18:d8:b5:87:be:9e:ba:09:61:6f:06:f9:20:b2:fe:86:f8:
         65:9c:aa:1b:44:7e:b7:1b:56:31:fd:04:7a:56:d1:5c:c4:84:
         3e:d0:38:6c:4e:f6:07:10:09:46:13:45:bc:ac:06:63:25:a3:
         05:b2:b2:9c:04:b5:5a:c8:ed:07:6c:f1:fa:ee:e5:82:fc:5e:
         a4:d1:62:27:7e:68:54:34:f2:01:72:62:a4:ca:cb:c2:51:19:
         86:0f:37:de:a9:0e:ff:cc:3c:30:1c:44:bf:ee:d8:2f:ce:28:
         d4:51:ad:f3:fc:a2:1d:ce:1e:97:d1:27:a8:5e:b3:41:53:f5:
         3f:a9:92:92:10:92:44:86:e4:94:a8:a0:2d:83:f4:24:9a:7b:
         96:35:8d:9c:4e:68:75:b5:67:11:08:d4:cc:f6:34:72:77:b9:
         2f:3a:f8:6b:36:d8:e3:b5:fe:0b:a0:e9:e9:af:3a:67:11:16:
         8e:bf:64:98:f1:a1:ab:44:41:cf:bb:69:0f:31:ea:f3:8b:93:
         6b:3a:30:c3:2d:10:34:6f:02:c0:c2:f1:ac:6c:53:e5:98:fc:
         ec:ff:a4:08:8a:28:bc:e3:f1:6a:29:dc:8e:05:eb:3f:a2:23:
         2d:8c:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:43:32 2024 by rpki-client on console-fra.rpki-client.org