Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File:                     N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier:          dmad+aHyRt5CWCKPIL/HSWiFWdwEbGETcKNSplDwHyk=
Subject key identifier:   D5:02:E9:6D:B6:B9:FC:BE:01:FF:FB:70:80:BA:34:D5:2D:11:D6:49
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer:       /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial:       018F885AEE33F1FE59E0CF596B35811A39D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 21:00:11 +0000
Manifest this update:     Fri 17 May 2024 21:00:11 +0000
Manifest next update:     Sat 18 May 2024 21:00:11 +0000
Files and hashes:         1: 5-HMcFvnsCJI33YwXZovEwtQ1oI.roa (hash: dGV417RRGDACdiiN4lkQi5+zvgVsL3BbOULbJ9+eM9Q=)
                          2: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: zphzR5RfHbGKZHMnFN6Xg0JliXha8IeOh80VdXsQ7HQ=)
                          3: edrlLIkqJ_2N7AMB9h-CpUba8uE.roa (hash: gDHbGCWqYjAJ2hniEGI7DDq5BSYMtGcQ74CQSxQXNnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:ee:33:f1:fe:59:e0:cf:59:6b:35:81:1a:39:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
        Validity
            Not Before: May 17 21:00:11 2024 GMT
            Not After : May 18 21:00:11 2024 GMT
        Subject: CN=d502e96db6b9fcbe01fffb7080ba34d52d11d649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:82:ec:c7:f5:66:52:22:2e:f4:ce:ec:3a:
                    72:7a:3f:b2:5a:12:52:9a:35:fb:31:49:7f:2d:44:
                    ce:50:f4:88:64:cf:fa:d1:a3:1c:2d:87:e5:8f:89:
                    d9:98:bd:2e:d0:02:4d:c8:e9:1f:35:aa:36:c7:63:
                    8a:a4:bc:c6:31:a6:3c:e1:63:51:9f:7a:c9:e2:11:
                    b9:c9:ed:b7:86:8f:3c:6d:8b:a1:48:44:4d:0b:51:
                    7b:4f:41:85:22:38:04:f3:75:b1:65:73:8d:a2:a2:
                    30:a6:09:fc:6a:fa:9d:bb:f8:ff:7f:d1:de:71:b1:
                    1d:08:51:49:c7:52:c9:da:47:d9:a9:d5:24:21:3c:
                    5c:d4:40:39:27:76:86:b8:e8:0d:b2:85:56:d3:15:
                    82:bc:68:9a:b0:3e:39:77:d7:fd:a5:3f:8d:32:42:
                    2d:5f:3a:ae:11:9c:1c:e2:e0:82:d2:76:c2:25:53:
                    1d:d1:4a:53:fe:c5:fe:d1:8a:e4:c7:93:73:86:9d:
                    bb:0d:a2:60:22:46:ec:6a:99:4e:22:81:7c:81:b0:
                    3f:e1:d2:0d:2f:86:b1:b0:93:6f:47:3b:48:04:ff:
                    36:aa:4c:98:b1:4d:8c:23:3e:df:2e:e0:95:d1:0f:
                    6b:59:3a:c5:05:b3:ee:45:5c:28:9f:08:31:7a:13:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:02:E9:6D:B6:B9:FC:BE:01:FF:FB:70:80:BA:34:D5:2D:11:D6:49
            X509v3 Authority Key Identifier:
                keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:65:37:ca:05:dd:00:cf:58:9d:78:12:3b:52:fb:cf:03:3a:
         48:a7:5f:ce:7e:5c:31:f1:d9:bb:e9:88:00:b7:d4:fc:95:ba:
         d4:1e:04:56:9b:c7:9d:01:3f:87:e1:46:ea:14:e4:09:16:70:
         9a:c4:27:c5:9f:34:1f:86:fa:f5:0c:de:ff:d7:a7:cd:85:1c:
         f3:76:ea:17:92:23:46:e1:6d:12:d5:8f:bc:b6:22:fa:7a:0c:
         e8:c6:4e:1e:96:a4:ce:f2:0b:89:94:e6:33:c8:4b:15:ad:59:
         ad:8f:8d:0d:f8:04:db:38:b8:62:35:4d:a4:6a:85:8d:2f:00:
         f0:77:85:fa:62:56:70:6f:a3:56:73:86:2d:87:aa:9b:0b:f7:
         69:63:fd:09:b0:89:64:2a:67:77:24:5c:98:df:4d:4b:ea:df:
         a6:c4:5f:6e:30:f0:4c:47:47:e3:94:bb:29:10:4f:fb:a5:ed:
         b3:24:32:7c:82:21:42:16:a5:86:9b:b3:fa:e8:b1:03:7e:78:
         e6:51:7b:be:7a:98:77:69:45:c1:b9:db:41:c6:5c:95:51:86:
         11:f5:7d:a8:3c:7e:99:dd:35:fe:bf:05:f7:4b:fb:77:11:e8:
         b8:a5:d8:26:a5:ff:36:c0:a1:bb:0e:e1:63:76:32:bd:ec:9d:
         3b:65:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:13 2024 by rpki-client on console-fra.rpki-client.org