Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
File:                     Z2JE3gGQpt1aiZorN7ACua5jLIY.mft (raw, json)
Hash identifier:          QGR6LJPmZUZlHPcW5oohwaVpHZsWSW2P/w4VGUJjr4I=
Subject key identifier:   AB:53:46:47:39:21:59:02:C2:68:2D:55:C5:D6:07:BE:F7:6A:0D:82
Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
Certificate issuer:       /CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Certificate serial:       018F9797527496B5A075051B09B19B38B9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
Manifest number:          117F
Signing time:             Mon 20 May 2024 20:00:27 +0000
Manifest this update:     Mon 20 May 2024 20:00:27 +0000
Manifest next update:     Tue 21 May 2024 20:00:27 +0000
Files and hashes:         1: 5AH1h4NyVjQ13ETy-e_gxxUeMO0.roa (hash: YDzcaiAcRe3E+XVxNNIlIo8aFfopUyxWoIIuZFhkJmA=)
                          2: Z2JE3gGQpt1aiZorN7ACua5jLIY.crl (hash: zkO9uAyaDm4lQITnQFWrx5mzADBvkkKpgr7H3DvjgDs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 16:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:97:97:52:74:96:b5:a0:75:05:1b:09:b1:9b:38:b9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86
        Validity
            Not Before: May 20 20:00:27 2024 GMT
            Not After : May 21 20:00:27 2024 GMT
        Subject: CN=ab53464739215902c2682d55c5d607bef76a0d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:72:f7:f5:c8:eb:c3:25:84:8a:61:4e:fe:
                    9e:bc:9e:b8:d6:ae:7d:a1:a3:ce:f6:44:49:a9:ca:
                    8e:27:87:84:3f:98:11:cc:ed:f0:d1:d4:1d:d1:42:
                    93:f8:b1:ab:1a:ae:63:a8:95:5e:90:da:70:46:fe:
                    d5:15:ce:70:77:59:ea:8e:84:0b:b2:ef:98:7b:e6:
                    71:15:46:4f:0e:29:4c:ae:5a:03:e3:f7:bc:5d:24:
                    2d:a4:6a:b5:d9:4c:51:e6:ca:e3:60:bf:0b:0b:39:
                    46:08:95:7e:84:c4:71:ec:59:11:68:7c:5d:a5:75:
                    d3:47:f2:1f:af:46:74:0b:91:26:08:a3:ea:34:ca:
                    e4:20:b9:18:ad:db:d5:71:85:bc:ae:43:f6:a7:1f:
                    81:df:26:a5:af:99:e7:b8:6c:b5:db:ad:53:ce:13:
                    60:03:89:5a:91:59:49:5f:b3:e9:fb:20:0f:5c:1f:
                    55:16:2c:ea:50:59:f6:e0:d7:6b:15:35:39:2e:3c:
                    6c:93:76:88:a9:02:eb:46:c1:ab:93:e6:c6:06:31:
                    ee:a3:76:0a:82:17:6e:74:8f:38:65:6b:7d:4b:b9:
                    e0:06:31:81:d1:05:0b:de:73:f4:41:ee:e5:c7:32:
                    df:4d:30:96:8e:e6:b2:38:7a:6b:8e:d6:cc:89:86:
                    cf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:53:46:47:39:21:59:02:C2:68:2D:55:C5:D6:07:BE:F7:6A:0D:82
            X509v3 Authority Key Identifier:
                keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:58:99:5e:ff:22:45:77:91:90:ad:58:d8:31:64:26:9c:cf:
         f0:2f:7f:8e:aa:ba:f7:16:0d:e5:58:e5:c2:7b:04:ae:1a:e4:
         5c:b8:94:24:1a:38:30:ee:aa:ac:d4:fc:d5:e7:56:12:09:65:
         78:68:0a:f1:de:d2:d9:37:00:86:da:2e:09:26:58:f3:eb:7d:
         2f:68:79:fb:a4:ee:25:d2:03:e1:7b:ea:fb:e4:08:14:ca:b4:
         5e:c0:a2:c1:3b:99:7a:83:a9:06:69:23:e2:c4:d4:02:c0:be:
         5c:cd:50:e8:4c:37:95:f2:19:cf:dd:16:c8:b7:86:96:84:b4:
         99:60:d8:f7:5f:60:63:90:d5:09:00:78:e0:8e:5e:18:14:9c:
         a1:ed:e0:cf:c3:07:1c:6f:79:e4:ca:33:7a:4d:c8:ff:c4:66:
         be:2b:8f:ff:3c:d5:87:db:23:59:54:61:1d:0e:b6:92:62:37:
         3a:2f:02:70:35:51:34:98:5e:00:bd:2a:24:99:3e:3f:8a:a2:
         32:15:15:c9:02:f0:db:0f:7f:4d:4e:cb:36:99:f2:81:8b:14:
         de:6e:3b:07:21:b2:3b:57:9a:44:33:d5:43:a2:de:71:d0:2e:
         31:a9:5c:d4:fa:94:bb:94:cc:a7:90:f2:6a:43:91:f1:2a:83:
         19:be:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:47:11 2024 by rpki-client on console-fra.rpki-client.org