Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File:                     hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier:          QhRuTjbq8JnAa0HwJFGOko6w1ADoWOl17jJCPaEXaxs=
Subject key identifier:   52:11:9A:2D:A2:76:E8:47:7E:8A:15:3F:0D:5F:B5:A9:E0:6B:AB:BB
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer:       /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial:       018F87ED00294E18E27C4D4CA5D258C32DA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:07 +0000
Manifest this update:     Fri 17 May 2024 19:00:07 +0000
Manifest next update:     Sat 18 May 2024 19:00:07 +0000
Files and hashes:         1: GtsLEV1Hinby9hlDphJyDpzxXhw.roa (hash: hsJ5T/h9WCAzlj+iUuyfS0V1NXC3Y5krlFIyjxCxr5M=)
                          2: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: 60VVOGXXAKNQigYJkF/igOjLD6/qAvYheIjKFX59QpY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:00:29:4e:18:e2:7c:4d:4c:a5:d2:58:c3:2d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
        Validity
            Not Before: May 17 19:00:07 2024 GMT
            Not After : May 18 19:00:07 2024 GMT
        Subject: CN=52119a2da276e8477e8a153f0d5fb5a9e06babbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:89:f7:d4:7c:49:20:e1:de:97:e4:1e:fd:
                    2c:f2:77:32:ec:27:66:03:d7:28:ad:2c:91:83:71:
                    7f:89:bc:9f:8d:b6:3e:e4:b1:93:e3:f5:0a:15:31:
                    cf:4c:84:94:df:20:29:77:a6:6f:65:26:a3:09:c7:
                    75:cf:46:06:f4:55:22:87:52:2f:08:eb:e8:2a:37:
                    d7:9b:a9:6d:f8:d8:5d:ad:c7:82:7b:41:7f:2f:57:
                    69:fd:6e:9d:22:ce:9a:90:b0:b9:22:b1:85:54:6b:
                    dd:1a:77:b3:eb:f0:d0:79:76:e0:fa:1c:17:40:f8:
                    86:ff:fe:7f:9a:30:09:bc:0b:d4:38:f3:98:8a:cd:
                    e8:ea:2d:e5:81:73:65:7c:53:86:7c:8c:14:07:3c:
                    b8:d7:be:2f:01:fd:84:6f:57:63:b1:5e:8f:e7:01:
                    eb:a8:2f:d5:c9:d8:41:71:f4:57:d0:03:ef:1d:4e:
                    5a:ce:44:fb:50:27:0a:35:f4:a1:f3:d1:a1:fb:06:
                    58:43:84:d4:fd:9a:7f:24:d0:74:38:90:2b:5f:2c:
                    ac:1e:15:64:af:ec:e8:7d:6c:06:9b:ea:3c:f5:94:
                    7c:c3:ef:ca:45:85:29:31:dc:58:7d:e9:55:6c:97:
                    96:e1:00:a1:24:d8:40:40:05:56:f4:d1:00:bb:ae:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:11:9A:2D:A2:76:E8:47:7E:8A:15:3F:0D:5F:B5:A9:E0:6B:AB:BB
            X509v3 Authority Key Identifier:
                keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:08:06:6e:ce:a5:5d:fb:6e:2e:91:d8:5b:9d:62:e8:18:
         c3:90:c6:e7:24:25:6d:c1:c9:f9:31:f4:68:a4:82:4e:99:a7:
         c5:c6:fa:e4:22:9d:eb:7e:25:e9:b5:5f:85:f1:30:81:b6:3d:
         c1:63:98:e6:7a:64:f5:2e:4d:4b:63:db:89:d5:7b:d2:28:94:
         37:94:bd:be:c1:bc:ab:d3:de:43:b9:c5:2e:34:3f:bc:bd:49:
         6e:fc:e9:11:37:e5:d2:ad:89:02:5b:04:4f:af:7e:6f:0b:70:
         03:28:ae:d2:0b:e9:5f:cc:d0:a2:f6:6d:85:d6:d6:2b:c6:20:
         12:65:6c:15:d9:2d:99:8d:8a:7c:c3:d7:3c:b2:61:4a:da:28:
         42:51:6a:e5:76:07:3e:f2:9a:76:fb:af:fd:6a:79:f4:b9:72:
         48:19:d0:bb:b8:13:8b:91:43:4e:28:a6:f7:a1:79:d2:c4:d1:
         f5:bf:ae:00:79:8f:ee:b3:ca:84:21:2d:c3:71:90:46:1f:90:
         24:28:41:f5:e7:0a:eb:d2:91:5c:d8:1b:c2:47:a7:1e:36:79:
         ef:e4:1e:b9:2a:f1:6e:50:88:ad:70:3f:e8:4b:1f:35:a2:da:
         37:fa:19:d1:6f:28:db:f4:a3:0c:bd:b4:8c:96:8e:a8:1f:b5:
         c5:2d:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:12 2024 by rpki-client on console-fra.rpki-client.org