Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File:                     dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier:          d+VgYvdr8eJxFG7t6zIi13dTTVM2nsFhX2ex+B1i0k0=
Subject key identifier:   E6:1F:DE:50:60:43:39:5C:AA:CC:F9:5E:55:6D:75:9C:45:3D:FB:CF
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer:       /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial:       018F889220EFECA3DBE8F8FA12F255FA0106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 22:00:29 +0000
Manifest this update:     Fri 17 May 2024 22:00:29 +0000
Manifest next update:     Sat 18 May 2024 22:00:29 +0000
Files and hashes:         1: J45z5LMEFH9agYI1cjx7U42hhSI.roa (hash: 1IjeUVM4mWR2KlK5BVflB2pS1saOHOSFe/bnXpzaPyA=)
                          2: Xjg8vjiT3U92qhWXD7hgZElvyKo.roa (hash: A2NYZR13LLWOaczpv15r3ELOUSkLwrsjQu52Wv52uyQ=)
                          3: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: vbyThoKaYN1BloMNoOMr8TCGUCMDKDIC5MlLKwwiCZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:20:ef:ec:a3:db:e8:f8:fa:12:f2:55:fa:01:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
        Validity
            Not Before: May 17 22:00:29 2024 GMT
            Not After : May 18 22:00:29 2024 GMT
        Subject: CN=e61fde506043395caaccf95e556d759c453dfbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bb:6d:ac:19:26:f5:fc:fa:40:da:97:94:80:
                    74:37:3f:73:9f:c5:29:38:9d:eb:00:f3:cb:28:c0:
                    07:d2:aa:49:7c:2d:83:c1:ec:a0:f3:c7:95:21:c7:
                    ff:3f:0a:0f:0e:74:35:c9:c7:a9:a5:82:42:93:23:
                    81:c5:af:c6:58:7b:8b:98:9f:42:2e:b2:35:70:31:
                    f4:27:ab:dd:19:ad:85:cb:c6:ef:a3:aa:d1:be:50:
                    62:05:ba:d6:de:a5:2b:35:5a:4e:13:fb:4c:c4:8f:
                    ba:a4:43:4e:9d:f6:7b:5c:53:c9:a2:3a:fa:49:68:
                    04:5e:37:8e:8f:35:50:5a:d6:6a:ac:cb:f2:0d:71:
                    33:97:67:00:70:3e:21:b0:11:3f:30:e7:1d:e7:f9:
                    b8:a3:88:9d:87:a6:3a:4a:dd:12:30:01:0c:33:2a:
                    07:9d:3a:e6:ed:d1:9b:28:79:96:b2:5e:4a:e4:1a:
                    fb:19:86:df:1f:c6:54:27:22:06:1b:12:2e:a1:7f:
                    20:c1:71:2e:5a:68:1f:a4:bc:dc:ab:ae:d3:44:9e:
                    1b:4f:10:c3:04:e7:a8:e3:bb:c0:b6:72:57:c5:2a:
                    a4:62:e5:0f:1f:f6:2f:85:c3:d3:84:8b:8f:d4:12:
                    1d:74:b3:6a:a8:cb:27:0e:79:6f:e0:b3:da:11:12:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1F:DE:50:60:43:39:5C:AA:CC:F9:5E:55:6D:75:9C:45:3D:FB:CF
            X509v3 Authority Key Identifier:
                keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:51:66:d4:57:55:40:bf:97:dd:8e:da:9b:1e:33:b6:ee:48:
         46:c6:1c:f2:95:66:4d:99:3b:9d:39:73:c9:2a:77:fa:5f:a7:
         64:bc:3e:09:fa:a1:84:2a:25:b2:b0:cc:77:d5:80:bc:a7:bd:
         47:55:02:9f:f6:f6:2e:00:9d:88:bf:b6:75:48:c2:88:a6:7a:
         0c:04:c8:15:93:3e:41:af:b2:f4:88:e3:c0:d8:1e:c6:b2:2e:
         14:bf:2d:8a:f5:b0:7e:e9:0c:6c:c1:27:92:77:db:5f:12:5f:
         1e:e6:04:16:43:a6:72:6e:62:f2:a3:ab:c4:0d:1f:45:88:8e:
         04:1f:de:49:3f:6b:18:98:99:71:3d:14:ac:65:da:ca:93:d3:
         bc:3e:12:2e:e1:f3:fc:9c:a1:d3:8d:9d:d2:22:f0:bd:e7:b2:
         2b:28:a0:37:86:22:be:8c:03:74:d8:62:da:f4:bc:65:eb:5a:
         f5:e4:51:ec:bb:29:a8:99:e0:22:da:19:ad:2e:35:b0:a7:0f:
         76:73:61:ae:07:4b:bd:33:2a:f7:e9:a4:70:42:df:85:d1:d1:
         2d:e5:fb:28:83:93:c4:89:92:40:07:d6:c0:e7:42:c6:eb:e6:
         a4:ae:87:a8:3c:73:53:e6:3d:48:96:41:20:c4:b1:ca:3f:c7:
         41:33:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:04:35 2024 by rpki-client on console-fra.rpki-client.org