Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft
File:                     pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft (raw, json)
Hash identifier:          G7mJD9JhQp+xmqiBhq8NpInOhTnF9oXcB+Df6+VuZ7U=
Subject key identifier:   79:29:38:BF:0B:A3:71:C1:B3:83:A7:85:00:59:A2:03:7A:5A:D6:EA
Authority key identifier: A5:3C:57:B4:56:F0:6B:FE:B4:62:1C:96:A0:05:EA:CF:60:C6:F6:14
Certificate issuer:       /CN=a53c57b456f06bfeb4621c96a005eacf60c6f614
Certificate serial:       018F8748A5C6C878BB38BA6D7C72D8E27DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTxXtFbwa_60YhyWoAXqz2DG9hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft
Manifest number:          0120
Signing time:             Fri 17 May 2024 16:00:36 +0000
Manifest this update:     Fri 17 May 2024 16:00:36 +0000
Manifest next update:     Sat 18 May 2024 16:00:36 +0000
Files and hashes:         1: D_e1tLXQE7Aql_lUnPz50O5DPaU.roa (hash: y93A9Mu597t7e1ps1zJKPdmSiGSMbZDtbuCiNUmAIT0=)
                          2: pTxXtFbwa_60YhyWoAXqz2DG9hQ.crl (hash: rH3+xuU0FcDtw+GKv6l1NTieXcSNKkwZKfmx790sWaM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTxXtFbwa_60YhyWoAXqz2DG9hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:a5:c6:c8:78:bb:38:ba:6d:7c:72:d8:e2:7d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53c57b456f06bfeb4621c96a005eacf60c6f614
        Validity
            Not Before: May 17 16:00:36 2024 GMT
            Not After : May 18 16:00:36 2024 GMT
        Subject: CN=792938bf0ba371c1b383a7850059a2037a5ad6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:75:9f:fa:87:33:37:db:43:bb:4b:4b:0e:
                    93:c8:80:f5:6a:7b:89:dc:e9:d2:e5:c1:4b:b2:2b:
                    66:68:86:c5:01:0e:50:f9:47:bf:d2:97:06:a9:78:
                    05:ae:9e:35:10:bb:28:a7:68:9d:54:d5:12:de:48:
                    9f:a8:22:4c:a7:d1:f1:21:06:24:46:d2:32:c4:d0:
                    8a:b5:89:0f:73:09:5d:12:94:02:cb:55:fc:d8:e0:
                    17:f8:4d:e1:71:61:c1:ae:d6:a4:c8:89:9d:c9:31:
                    51:9c:2a:c7:78:bc:aa:af:f3:5b:14:e7:be:78:89:
                    4b:7d:0f:4b:df:1a:12:da:fc:71:c5:25:08:d7:00:
                    fd:9a:fc:18:33:29:8f:3f:21:d4:b0:94:2a:9a:c1:
                    7a:25:ab:c4:18:7c:5a:bb:5a:a1:6e:02:68:26:82:
                    38:9d:f5:ce:fe:0a:53:c9:4b:07:f7:42:79:0e:64:
                    cb:06:e5:ce:21:cc:2e:2c:f1:91:3a:30:01:7c:9d:
                    b0:6a:5e:c6:fc:95:44:b4:04:d8:67:e7:03:47:68:
                    01:ff:4c:86:f0:7b:fc:69:f3:8e:c5:91:7a:6a:5b:
                    9c:a6:ba:c0:70:68:34:ca:6c:ac:84:ea:ee:93:ba:
                    2c:d8:13:e4:10:18:b8:31:46:82:c4:34:94:e7:af:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:29:38:BF:0B:A3:71:C1:B3:83:A7:85:00:59:A2:03:7A:5A:D6:EA
            X509v3 Authority Key Identifier:
                keyid:A5:3C:57:B4:56:F0:6B:FE:B4:62:1C:96:A0:05:EA:CF:60:C6:F6:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTxXtFbwa_60YhyWoAXqz2DG9hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47788a-1609-407e-86d6-ec40e1da35d0/1/pTxXtFbwa_60YhyWoAXqz2DG9hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:6a:a6:12:26:f7:d5:4b:fa:5a:09:82:f0:06:50:3f:cf:
         3d:b0:68:9e:82:1f:ec:11:b0:38:0a:76:26:1a:26:a1:dc:31:
         50:55:b4:78:85:23:e0:cc:f1:55:1b:94:ae:1a:a9:e5:43:64:
         1f:2c:e5:dd:66:8e:f5:8b:49:ac:6b:b6:44:3c:a9:11:ae:a0:
         8c:a1:ce:ae:2b:54:d4:5a:8d:90:4a:4e:02:ac:1c:82:f3:f0:
         59:24:48:f5:61:49:9d:96:5d:81:71:8b:d0:f0:09:00:09:cb:
         66:fe:c0:7e:d3:e1:8d:2a:bd:36:60:0f:8d:2e:b4:62:cc:cc:
         86:14:6b:2f:95:6c:51:76:3d:37:11:4e:7f:66:3c:4a:ad:fe:
         87:a7:f9:39:8c:f0:ce:7c:3b:1f:35:b4:69:b1:0f:38:48:38:
         f1:e0:08:5e:6a:76:4f:20:ac:ca:ee:a3:60:51:d7:b6:6c:c3:
         02:ea:5c:6b:94:cd:6a:f0:63:f4:92:c7:55:1b:86:ae:35:9c:
         e1:b4:b8:72:1b:f6:90:96:e0:a4:5b:00:52:56:1e:3b:0a:91:
         23:1d:6b:22:c7:28:7a:9b:f9:56:d4:1e:7c:3f:35:c7:7d:fa:
         52:f9:54:34:de:89:97:83:74:cb:b8:dd:85:e8:4e:3c:e8:07:
         89:0b:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:19:45 2024 by rpki-client on console-ams.rpki-client.org