Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File:                     djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier:          t0CvRjlOz7oevBxsRjikqjbEZUKhp8qyZDGAyxJ/7Xs=
Subject key identifier:   9A:6D:75:C1:DB:C6:89:4F:7B:37:06:57:94:93:E7:D3:08:48:33:FF
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer:       /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial:       018F885B11023B1372C97DD91172E70DFBD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 21:00:20 +0000
Manifest this update:     Fri 17 May 2024 21:00:20 +0000
Manifest next update:     Sat 18 May 2024 21:00:20 +0000
Files and hashes:         1: cAjdz7Xu7ueH6R43vRBqBSNGC8M.roa (hash: h2M+86n5ASejK4D4yO2L+LedSyISFaiNiuFwuZXUV1s=)
                          2: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: Z4zagZR2dZPgKoA3cTtYJPAoCGTp0EZ6BOQjga1pnKc=)
                          3: fZIvVN01Gw7WWF_4FKQx4KIx5-8.roa (hash: MZykPxCIQSWJ1GWxUBgNCque3AgkO/A+tfohP+K4SZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:11:02:3b:13:72:c9:7d:d9:11:72:e7:0d:fb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
        Validity
            Not Before: May 17 21:00:20 2024 GMT
            Not After : May 18 21:00:20 2024 GMT
        Subject: CN=9a6d75c1dbc6894f7b3706579493e7d3084833ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:83:97:2f:9d:29:a8:f3:b6:7c:3b:50:94:
                    b8:f7:12:aa:5c:70:ce:56:b7:0b:d2:3e:ad:9e:0f:
                    76:82:41:eb:c2:87:1c:2c:40:92:f0:c7:9c:b3:c2:
                    61:91:57:a4:c3:5d:b1:be:77:31:89:c7:67:dc:37:
                    33:65:ec:40:6f:37:a1:05:45:25:2f:24:65:bd:a4:
                    8b:53:66:d4:42:62:d8:ad:24:2e:b6:94:7e:1a:d6:
                    8f:cb:4d:06:9f:85:f8:0b:45:8a:4a:1a:c9:c8:d5:
                    89:c8:b7:26:e7:e3:3e:bb:3a:fe:4f:e5:be:ea:03:
                    68:1d:de:28:51:41:7c:3d:b9:ef:60:c0:44:1a:68:
                    41:f8:d0:ec:1e:77:f4:fa:f3:0e:a6:55:8b:df:a9:
                    8d:69:89:a9:30:f8:17:3f:bc:7d:b1:67:46:bc:ea:
                    dd:9d:57:f4:c1:85:f2:cd:34:33:8b:38:7e:92:73:
                    8d:a9:54:68:6a:5d:a5:e9:fd:e1:df:89:6f:d7:b6:
                    e0:2f:c0:2e:e3:5c:a4:15:6e:fa:f6:64:39:5f:89:
                    d7:52:79:1e:73:9f:f7:e8:d6:e9:31:91:ed:a3:ac:
                    dd:94:b9:2b:af:21:0f:30:a9:3b:fd:1f:48:e7:3f:
                    ce:9a:37:13:56:72:2c:9d:86:87:04:54:f9:8e:cf:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6D:75:C1:DB:C6:89:4F:7B:37:06:57:94:93:E7:D3:08:48:33:FF
            X509v3 Authority Key Identifier:
                keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c4:74:e1:dd:f7:dc:e2:b1:59:ad:28:86:8f:34:f4:85:25:
         a1:15:26:2d:1e:cf:33:6f:9e:70:b8:81:6f:6a:c7:b8:05:2b:
         23:b9:be:22:51:39:e1:25:fe:2d:30:7c:81:0c:7f:65:92:3b:
         5c:0a:c5:c7:a6:1c:80:31:80:00:2d:af:21:cc:89:19:d5:f0:
         59:b1:59:53:49:08:64:74:1a:c6:9f:d9:18:7b:6f:a0:a6:21:
         5a:84:db:3b:e1:ff:ff:30:bd:a8:5f:fc:1b:bf:de:e5:b9:cd:
         cd:85:c0:62:c4:ef:57:0c:f4:5d:ce:3b:db:3f:49:ad:45:86:
         52:73:8b:ff:bd:2e:be:f3:cf:10:ba:a8:54:0a:d0:61:bd:ec:
         55:2d:11:e4:73:a3:87:04:d5:53:97:03:35:00:2d:b1:e5:51:
         41:4b:b9:49:cc:e9:9d:23:da:0f:74:99:fa:81:0d:21:25:66:
         c9:cc:7b:12:c3:a7:07:71:f8:61:64:c4:d7:18:c2:55:52:d6:
         de:dd:27:2e:08:83:a0:5d:a4:a1:ab:8a:5f:56:cb:c7:41:61:
         13:8a:58:b0:63:92:1f:6a:ed:dc:61:81:7a:d5:75:b6:48:d2:
         77:78:7d:db:e3:d6:81:ad:1d:07:72:6a:1e:60:4b:3a:11:b5:
         62:e3:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:48 2024 by rpki-client on console-ams.rpki-client.org