Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File:                     xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier:          hH0W6R2lHyt/HLE4CBpN+35hHFADAgXyJkXPVqWRIFA=
Subject key identifier:   31:34:C1:36:55:56:22:7A:3F:2C:23:96:33:4A:5E:6C:CF:A7:14:16
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer:       /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial:       018F86A3C21559100789CBD83A978101338C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 13:00:29 +0000
Manifest this update:     Fri 17 May 2024 13:00:29 +0000
Manifest next update:     Sat 18 May 2024 13:00:29 +0000
Files and hashes:         1: 3MfigbHeBY_Obz2C18RZij3852o.roa (hash: kfAQUcqYHG9HXKAkl80srOXg0bTJSwBp2fQnxABBplM=)
                          2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: vJBk62rp3gk8Udc9P5lDZh16hdMPw/djZ3CfGLynAxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:c2:15:59:10:07:89:cb:d8:3a:97:81:01:33:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
        Validity
            Not Before: May 17 13:00:29 2024 GMT
            Not After : May 18 13:00:29 2024 GMT
        Subject: CN=3134c1365556227a3f2c2396334a5e6ccfa71416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:5c:b3:72:90:c9:bb:68:62:6a:a1:9b:bc:
                    5b:8b:ee:a9:57:7f:d7:31:47:87:e2:a0:f2:a4:d7:
                    48:f2:be:af:d4:5a:80:f3:a0:72:b6:56:8f:11:f9:
                    64:1b:ae:34:0a:7b:47:f4:94:f7:da:1b:84:ae:3d:
                    57:c2:1c:2f:5c:da:7c:5c:9f:f6:c9:1d:04:78:fd:
                    96:28:e3:58:b9:88:6b:1c:0f:67:c5:7f:7d:e5:a3:
                    ed:a9:4a:b2:85:2b:3c:dd:cd:25:9e:63:50:da:47:
                    24:ce:56:22:73:85:c5:0b:1c:d8:dc:8e:50:88:63:
                    04:45:fb:f2:fc:d2:57:71:cb:ff:02:ed:83:f5:61:
                    45:eb:1f:c9:40:d9:fc:a6:bd:1c:c1:42:6c:7b:04:
                    d9:2d:43:0e:38:3d:e4:00:fd:72:94:b4:0b:7f:32:
                    b8:0c:cb:7b:c1:bf:77:0e:16:f2:26:47:21:6b:e9:
                    89:de:84:68:ec:83:9d:e8:f7:40:8c:7b:a1:dc:22:
                    a0:84:f5:ba:58:00:cf:32:19:2f:d9:84:99:dd:cb:
                    95:c4:43:fa:8a:63:37:09:f8:ce:52:a9:ce:20:7d:
                    31:54:ab:b8:b5:e1:bf:c6:c4:88:4a:eb:8c:96:d3:
                    ba:a0:bd:e6:54:35:a3:08:8d:ea:8a:79:75:59:80:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:34:C1:36:55:56:22:7A:3F:2C:23:96:33:4A:5E:6C:CF:A7:14:16
            X509v3 Authority Key Identifier:
                keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4c:e9:28:88:87:1a:bb:de:44:4c:ca:e9:fb:a4:da:78:b6:
         82:7f:00:63:69:83:d8:5f:e4:e2:03:88:6e:ec:76:6d:7e:4b:
         31:b0:86:9a:03:8d:9c:87:77:f0:1d:95:6e:57:df:ad:34:f8:
         5d:3c:0d:98:fd:96:e4:d9:f7:8c:c0:5e:5e:6b:a7:01:d7:2c:
         ce:f6:4b:f6:b8:4d:3b:6b:03:d2:c8:dd:5c:4f:9f:fa:e4:0a:
         12:3f:78:45:17:79:d3:15:a5:65:48:24:03:96:5a:ad:1a:f4:
         a8:2e:0d:4f:84:4f:c9:9f:cc:6c:88:17:5e:ed:00:b6:da:38:
         b0:f7:7a:46:7c:54:64:9a:a4:c2:42:2f:94:0b:b1:f1:6b:79:
         16:31:88:3a:ba:dd:3d:ea:b8:53:99:07:3a:d9:6f:3c:ba:b3:
         8d:ed:68:f5:90:6e:ee:31:4c:21:85:ac:5d:18:4e:52:85:de:
         bb:a5:1b:51:f0:79:57:a6:92:9d:9d:5d:21:85:e4:34:c9:0c:
         58:cb:18:68:01:ad:ad:92:c2:3a:f8:0b:9b:11:65:c8:de:16:
         3e:32:1e:d6:0a:2c:50:0c:ec:ee:7d:25:90:31:8d:1f:1c:af:
         09:de:be:46:07:ea:9d:b8:c2:68:41:0f:7a:a6:01:5e:2d:65:
         f6:28:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:35 2024 by rpki-client on console-fra.rpki-client.org