Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File:                     b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier:          n6uOEg2aUuyE9kiG5PcKFTo1FSRMOCMFjMi/h8EvNPU=
Subject key identifier:   8C:47:13:10:42:59:74:76:60:1D:D6:C8:FE:93:D8:AF:FE:17:9B:5E
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer:       /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial:       018F877F3FAAF64BE2B6A4F3F38F96941DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number:          11A4
Signing time:             Fri 17 May 2024 17:00:14 +0000
Manifest this update:     Fri 17 May 2024 17:00:14 +0000
Manifest next update:     Sat 18 May 2024 17:00:14 +0000
Files and hashes:         1: O2nsO_zBTWwDn-2vm4XK9sP4KCE.roa (hash: nLg4kyNKM+4Qshfky2sOfNYg5aLUHgU0usxtk9d/KzM=)
                          2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: yWhfmdzt39YJDsRSDisiSAqy4pZ0zvZktXBTFgciPvU=)
                          3: drGycoCjFZpiaBETqqTsTvtNmYU.roa (hash: ilnWuFckkCZOi6nFIQVcfv/JK8c2CTYUbcPx1fzLY94=)
                          4: eDd9SqgElFtOWHbQUFFgXN2mM8M.roa (hash: A4+aRVBhb8ovUfhm/RQlAi/l9uHJ2xyytcwmI7wJQ10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3f:aa:f6:4b:e2:b6:a4:f3:f3:8f:96:94:1d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
        Validity
            Not Before: May 17 17:00:14 2024 GMT
            Not After : May 18 17:00:14 2024 GMT
        Subject: CN=8c47131042597476601dd6c8fe93d8affe179b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:23:74:3e:87:69:fa:43:20:4f:87:2e:92:a6:
                    68:cc:58:ad:02:92:6f:88:5c:de:f1:b4:5b:3d:4f:
                    ef:f0:e5:0c:07:0e:4f:93:84:4d:3c:bd:9c:64:5b:
                    18:ab:c2:84:e7:b6:92:01:91:dc:b8:7b:82:73:2f:
                    64:a5:55:c9:e2:ec:a1:34:27:b8:c1:8b:93:9c:8d:
                    82:9f:ce:d2:f0:36:b4:7a:08:85:69:db:ee:3b:dc:
                    bd:96:10:18:40:ad:7c:ce:28:2e:fa:12:1e:90:50:
                    44:a8:02:fd:aa:79:86:42:9f:bc:92:11:41:0f:ac:
                    11:36:5d:e5:a2:46:95:34:ed:4b:51:ac:bf:be:48:
                    83:d9:35:94:99:76:3c:30:21:04:2f:6d:4a:ae:f0:
                    ce:1d:92:11:c7:99:f4:25:72:7b:02:a8:dd:58:90:
                    23:fc:e1:0e:19:93:fe:02:00:71:40:f1:7c:4a:f8:
                    b9:87:b9:2d:50:a3:8e:71:8f:75:66:63:98:51:d4:
                    b8:1b:57:f0:7e:78:b8:c6:22:b3:58:23:68:dc:9d:
                    56:91:81:b9:2d:cb:4f:59:e9:86:ae:ee:fb:5c:87:
                    1d:40:e7:84:5b:d9:fa:a2:b7:75:bc:ba:85:d4:57:
                    5f:49:a9:55:d3:85:a9:20:84:26:33:25:8d:c6:37:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:47:13:10:42:59:74:76:60:1D:D6:C8:FE:93:D8:AF:FE:17:9B:5E
            X509v3 Authority Key Identifier:
                keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a4:3f:5e:ea:81:05:28:bc:1f:02:6b:64:c5:a0:f5:c7:9b:
         76:5a:6a:3e:30:f1:5a:3f:94:1a:d1:b1:f2:c6:dd:ca:58:3f:
         12:85:54:c7:b5:77:3e:4a:0c:3f:2a:2a:f4:1e:4f:a2:6b:16:
         58:ea:8c:61:e0:58:49:0d:7b:63:13:8c:59:c1:ac:e2:f2:01:
         24:9f:35:43:95:d2:20:90:58:e1:ce:96:4e:ab:6a:51:b1:f7:
         e1:fd:a3:d0:51:a9:2e:43:90:18:df:65:23:f7:4c:d7:05:c0:
         2b:bf:d1:fe:e8:ce:1c:f5:9f:cb:fe:ff:f5:ca:1f:7b:ac:05:
         5c:ea:16:cf:23:55:2f:2f:1c:59:7f:3f:77:92:ab:8e:d2:3e:
         e7:0c:17:94:fc:a5:07:df:b1:37:c9:c4:12:21:d0:95:7b:0e:
         7c:d0:ea:c8:12:b4:ad:cd:ba:67:75:0b:cf:96:9a:6c:a1:4f:
         67:d5:00:9e:db:84:07:b3:72:85:71:55:9a:07:04:74:59:85:
         92:e2:36:ec:fe:34:65:24:33:4c:96:04:43:fd:43:dd:61:17:
         8f:7f:31:87:5d:f2:6c:13:c4:eb:1b:53:f3:2b:c0:0b:8f:b7:
         00:78:72:12:7c:eb:fd:12:f4:53:de:d6:aa:78:b7:5b:f5:07:
         90:96:5d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:20:58 2024 by rpki-client on console-ams.rpki-client.org