Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File:                     Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier:          Xrc4pqH4LTYlcZSENhGIMnQ/dTLFTdcwjdCnnpsNyQg=
Subject key identifier:   17:0D:C8:5E:46:A3:1F:BF:F2:92:F4:18:AD:E9:DC:2A:2E:16:3A:26
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer:       /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial:       018F87B6841D1F4E5FE308C9281E000A4A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 18:00:36 +0000
Manifest this update:     Fri 17 May 2024 18:00:36 +0000
Manifest next update:     Sat 18 May 2024 18:00:36 +0000
Files and hashes:         1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: LsjohxfVj/tYx8wCag/Gsy/W6mO7oldDUksvCnJy2Zg=)
                          2: pSuZyE2XkeLAS3Mi8WEkirJpQE0.roa (hash: T+kKhoS2q19Yn9jO0M6P2tlqbdDqD6QOYrz7J5tc/xs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:84:1d:1f:4e:5f:e3:08:c9:28:1e:00:0a:4a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
        Validity
            Not Before: May 17 18:00:36 2024 GMT
            Not After : May 18 18:00:36 2024 GMT
        Subject: CN=170dc85e46a31fbff292f418ade9dc2a2e163a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ca:d7:5f:74:5c:c2:73:8c:35:bb:a3:be:54:
                    71:be:50:c5:d5:90:8c:1e:d6:f4:ab:ac:ec:27:a4:
                    56:47:c6:b6:00:9d:ae:47:58:2a:c0:15:66:02:ed:
                    44:9f:42:1e:cb:37:8a:d0:d4:65:1e:4e:37:74:64:
                    70:26:ac:56:68:98:7c:ab:c6:ef:be:38:fc:fc:a0:
                    b4:3b:61:8e:6a:e1:46:f7:3b:93:90:43:04:62:57:
                    81:05:f3:12:71:39:de:a1:b8:c1:13:a5:bc:ff:67:
                    93:36:b5:e3:88:91:17:f1:61:36:6e:c2:76:6d:33:
                    92:1b:b9:86:ad:2e:19:bf:69:c1:f2:31:e4:5f:79:
                    78:e2:ab:eb:d6:1f:09:b8:fd:f6:68:f7:51:c7:89:
                    80:1d:1a:f5:b4:e0:e0:90:ad:54:b9:87:13:90:0a:
                    5c:7c:76:93:11:01:97:2a:9b:13:86:e9:4b:e9:3a:
                    a1:a2:ed:5d:2b:b6:bf:05:70:6c:ec:03:de:fb:fe:
                    f2:31:36:0a:7e:bd:55:5d:20:77:2c:57:04:5d:26:
                    f1:66:b8:58:72:6b:c7:6a:12:70:1c:bb:fe:d4:1c:
                    27:b9:ec:a4:2b:9a:b8:5b:59:f7:f1:e3:84:1a:6e:
                    7f:8f:99:b8:e0:92:4c:87:d7:56:99:6c:4d:5c:82:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0D:C8:5E:46:A3:1F:BF:F2:92:F4:18:AD:E9:DC:2A:2E:16:3A:26
            X509v3 Authority Key Identifier:
                keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:89:04:95:0e:43:25:d2:84:fa:b0:a5:56:99:37:ba:72:
         3e:52:1a:b2:b4:67:b7:df:e1:84:80:e9:a7:95:08:80:34:f9:
         51:3e:f4:08:75:89:92:f3:29:1f:8b:11:67:9a:c3:36:2a:8a:
         f5:b2:b6:a9:77:2d:ef:6d:64:c6:bc:55:19:e9:4a:9b:39:70:
         b7:2f:5b:99:e6:ea:8e:17:f1:b5:eb:a0:37:c2:1c:fa:45:d5:
         a2:28:37:68:f8:6f:d4:da:5e:b3:2b:26:4f:8c:10:85:8b:88:
         59:c0:aa:ed:50:1d:04:b7:77:71:65:58:f6:ac:ce:e6:54:ca:
         85:cb:d9:f4:4f:14:bf:7f:d6:42:07:ff:3a:a1:2e:49:2f:23:
         5e:cb:a6:bb:db:6a:c1:79:81:de:47:f2:a9:d9:91:bd:e2:53:
         b9:77:fa:e0:c0:df:1a:0f:44:56:2b:2b:7f:16:ae:20:ab:e1:
         f2:8f:16:cc:50:f5:bb:b7:99:17:e5:72:06:28:6e:be:2f:07:
         2b:9b:2d:4a:f9:07:82:28:46:02:d0:b5:66:67:84:2a:8d:99:
         b8:c9:f6:41:18:90:75:9f:7c:7e:5b:cb:6a:ff:9b:2e:52:34:
         22:d6:90:29:e5:5f:0a:5d:61:f2:ac:9c:24:29:d9:42:cd:73:
         32:eb:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:04:08 2024 by rpki-client on console-ams.rpki-client.org