Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File:                     Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier:          pivlXad5u5ZgZnpob9C0P4srA9rW366/h0Ra2YL5QAY=
Subject key identifier:   A3:83:00:AC:6F:5D:F5:35:57:34:81:E2:11:F3:E2:86:D7:AA:66:22
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer:       /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial:       018F88242FAEAF0569759E2F187FF56774F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 20:00:23 +0000
Manifest this update:     Fri 17 May 2024 20:00:23 +0000
Manifest next update:     Sat 18 May 2024 20:00:23 +0000
Files and hashes:         1: BuFiyi9ZRv5RgWL6cZqrS73zm5Q.roa (hash: xEw1dpu0AXmgn5oPMT0GbQR9hSP2U6Dg8filuqfGL54=)
                          2: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: 3DZUYS236i5u9Q0OH1Pf06iM1DtwAzwtGLcDGSaNWFs=)
                          3: yNTYvd9yHKYkLSoGZi0dJmk_EQc.roa (hash: P55m1SXHNTft+IIYMWtD/p+6Nsag8H2lp1Z6gL0rkK8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:2f:ae:af:05:69:75:9e:2f:18:7f:f5:67:74:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
        Validity
            Not Before: May 17 20:00:23 2024 GMT
            Not After : May 18 20:00:23 2024 GMT
        Subject: CN=a38300ac6f5df535573481e211f3e286d7aa6622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e9:6b:7b:bd:8a:4d:90:db:63:6d:2e:16:b5:
                    df:f9:87:97:ad:d6:73:f0:40:55:a4:7b:da:a7:15:
                    f5:8d:0b:cc:cd:df:c0:e9:2b:98:ab:10:1c:e3:d4:
                    47:f5:14:fb:ed:8d:74:54:7e:ea:36:6e:14:78:1f:
                    7a:28:82:fd:9c:2d:06:62:f1:4f:c6:0a:d8:a1:55:
                    42:82:7c:c5:49:f8:03:af:a8:d4:a5:bf:b3:e5:8c:
                    2a:6f:e6:da:4b:59:59:77:c1:fc:b5:21:2e:42:f5:
                    0d:eb:40:df:6b:58:55:34:3b:56:be:d4:61:6a:27:
                    28:41:ba:30:83:07:a7:5d:fc:9a:8c:4b:1e:a6:96:
                    62:71:8d:88:63:49:ef:9a:00:fd:1e:44:1c:d5:1d:
                    3a:6d:d6:a5:96:c1:2f:20:0e:86:8d:9f:62:f6:0c:
                    99:b7:6a:23:94:35:b8:21:59:a0:72:9a:de:1d:a3:
                    cd:69:69:cb:e4:16:95:3d:13:f8:81:8d:ee:68:52:
                    dc:56:f7:16:95:3e:f8:36:2f:9a:3a:b2:36:10:d0:
                    12:30:48:41:a0:4a:40:43:6f:6d:b9:42:a7:f5:7c:
                    61:13:be:bb:b9:2e:a1:9d:18:e4:65:33:1b:84:da:
                    5c:56:fc:a5:14:68:57:e6:53:4a:08:ea:47:8a:1d:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:83:00:AC:6F:5D:F5:35:57:34:81:E2:11:F3:E2:86:D7:AA:66:22
            X509v3 Authority Key Identifier:
                keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:90:82:53:b4:72:af:6f:d6:bf:00:e4:f4:ea:96:c1:49:
         db:ea:2e:b8:16:da:b5:46:86:5f:b8:55:d9:6e:4a:14:0f:12:
         c9:50:a4:02:f7:54:cc:fb:b1:2c:43:5f:c6:2f:65:c4:a0:e7:
         b5:28:a9:86:0b:bc:b1:90:e4:37:41:44:63:ca:27:c2:6c:b9:
         28:20:e3:28:a5:e1:65:c0:4d:95:a4:38:06:43:83:d2:06:76:
         55:48:27:2a:f8:ac:78:fe:22:c9:4a:22:c3:3c:22:c8:39:95:
         23:49:37:2f:37:ff:a1:17:e8:cf:5f:6c:e3:56:94:4f:38:6d:
         80:ea:fb:b3:9f:23:2b:51:9a:ef:9a:27:9e:06:18:08:40:b3:
         4a:5f:f2:b3:22:c1:a1:51:71:ba:7a:04:a2:92:7f:c2:28:86:
         6d:cb:6b:01:61:fb:a0:be:9e:0d:50:c4:ba:3c:a9:76:df:ad:
         10:99:f1:b7:90:47:5f:c3:e3:d0:ce:9f:07:b4:35:c9:b9:33:
         18:85:27:bc:6d:b6:d7:b8:8a:fe:4b:34:30:f3:2a:1e:27:4b:
         7c:11:d1:58:39:09:4b:68:d1:24:fb:7c:b7:fe:48:b4:24:b0:
         7f:87:60:e9:7e:2f:17:4a:a5:1d:15:8f:19:d0:e9:02:e1:b0:
         c9:ae:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:26:24 2024 by rpki-client on console-ams.rpki-client.org