Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
File:                     EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json)
Hash identifier:          clbZK5sUBvN5VySw+hw8yjLs7DTeJNtUcXTKxtfEjak=
Subject key identifier:   CB:3A:60:A8:AE:76:D6:72:26:20:39:47:DE:D8:C8:2F:FF:D2:5C:92
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Certificate issuer:       /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial:       018F3A40A40FC92A1B057B548EAFA4973674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
Manifest number:          116B
Signing time:             Thu 02 May 2024 17:01:05 +0000
Manifest this update:     Thu 02 May 2024 17:01:05 +0000
Manifest next update:     Fri 03 May 2024 17:01:05 +0000
Files and hashes:         1: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: BC7N+fyYZeeDhwa0Eo9B+gYqyNZnDKE1ZUrY8nVayyU=)
                          2: F_aEh5fiZmwP_Ab1vB3nZAIr3qM.roa (hash: D+J48d5ngLGUEIS3LjR/DLLqOdyVovrnqOzYCvPj7mc=)
                          3: KrwYPYjkTBLxy_cFHXBQtyoKXik.roa (hash: aPQYqENdlMsS0aU+8yi2EjEZAegi5Lk8Fsh4BKzRL7w=)
                          4: Os4V_uoUzWtpbQ6OzJwuKYHZMpg.roa (hash: kUyWI3HvlWziG2f/NGSGYN+snmx3ZTwrybkDoiBDgK8=)
                          5: VgfO7RaufVDcFVeMgpAsBrDLYcA.roa (hash: 1qORJiI0+BIP2JWeD+zNoqHEunmsEGYfGIcMKGxmzvk=)
                          6: asQyemIrgQaOdxx1TKdBw8DqmAQ.roa (hash: fn/9z7AiGvnVm64adMFgGkPsQfxocew0F5mvpzo1tTs=)
                          7: c4qlsVsbd3AwmJFx-KLGTkPy1Hc.roa (hash: GWzoEvplqubkjRrg2BElSVXfmX326SRByKn887h+FRQ=)
                          8: fEJyU8ayQMgGM_AzcEgx18Chplo.roa (hash: 3fb/kwM1XTxTCBQLXLm9fweK1aOaql+nJiFpoftEvY4=)
                          9: ggs1IDloIgZ4eOP7V4Xb06S-xns.roa (hash: BUSV9fURPsRifkrcN5yJQ87/I0YqMgJm3owtiOQUuiY=)
                          10: otvOxfzhuh3JlMmQpDZd4yu5ot4.roa (hash: p309rhUQgKkxGVEOELudSS8osJnVhSn6eGXxbYDckbg=)
                          11: r9W5a75k_9JlOUI7oztKaQ0fjHc.roa (hash: EfsQLa8GhdOW295qX/xMrfGGtpTwt7q79TbE+VMGYus=)
                          12: x-13MQKMlYh1FKuZXBHrIxx4HmQ.roa (hash: DI59oZKoUKh4xqTw8NoIpYFMWnhJd2hWiOIVAIFOd9Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:40:a4:0f:c9:2a:1b:05:7b:54:8e:af:a4:97:36:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
        Validity
            Not Before: May  2 17:01:05 2024 GMT
            Not After : May  3 17:01:05 2024 GMT
        Subject: CN=cb3a60a8ae76d67226203947ded8c82fffd25c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:b7:5d:ad:9f:53:54:4f:5b:1f:6f:e8:81:
                    a0:1a:86:27:d5:90:de:3d:9f:59:b7:9b:bc:70:f2:
                    75:87:94:68:5d:c3:a7:94:49:ec:49:4b:49:07:3f:
                    d2:f9:5d:7d:01:6d:79:8c:af:12:07:1b:81:3c:9f:
                    2b:dc:a4:26:ea:76:3e:71:81:36:06:3b:dd:f5:40:
                    c2:cc:8d:ec:fb:49:38:1a:48:82:c1:15:28:f4:a4:
                    a5:ec:ee:fd:8f:a1:50:59:11:5c:9c:e0:99:0f:6e:
                    af:2e:ec:74:a1:df:c3:93:3a:3e:35:48:98:97:66:
                    37:c5:45:b0:b1:b2:93:9e:cc:31:26:bf:40:c5:33:
                    b4:f0:f0:ee:20:df:d4:da:6d:75:38:4b:63:77:42:
                    2b:70:d5:cd:b9:ad:80:90:b8:fa:b2:b5:07:62:0a:
                    c9:8d:21:7a:55:9f:c1:98:84:7a:70:d2:10:5d:4f:
                    d8:c7:84:6d:cb:c4:19:44:c2:32:da:f1:e7:1e:e0:
                    82:30:a0:42:d1:5c:8a:d6:d7:aa:1b:4f:fe:3d:af:
                    ad:29:5f:06:46:0e:70:07:23:98:a0:05:28:da:28:
                    6f:54:7e:a6:56:4c:9e:70:52:3b:1f:70:95:1d:57:
                    4d:7f:61:71:94:ac:f9:63:3a:a8:d4:43:72:24:3d:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3A:60:A8:AE:76:D6:72:26:20:39:47:DE:D8:C8:2F:FF:D2:5C:92
            X509v3 Authority Key Identifier:
                keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:93:49:19:4a:53:f1:3c:82:c4:e2:87:f0:88:18:40:1e:e2:
         0b:25:36:7d:a1:7e:9e:4c:88:95:25:b5:ac:d8:f2:ff:78:0f:
         30:55:50:93:bd:49:d8:d1:5c:60:04:6a:9b:58:b1:9a:95:1d:
         b3:c2:bb:4f:eb:e1:f5:0a:5e:f4:52:a7:32:5a:02:47:41:b3:
         7f:e9:14:dc:e4:c7:b3:13:c8:cc:c5:0f:29:da:73:8f:51:fc:
         12:38:41:42:4c:3c:83:de:35:b0:7b:41:ca:2a:20:bd:1b:cb:
         5c:d0:99:e3:20:dc:2d:72:79:00:c1:bb:b0:d3:73:da:48:30:
         a3:2c:b6:23:c7:45:f8:cc:bf:9f:cf:87:e3:16:5d:2a:82:17:
         e8:f8:1c:db:a2:48:3d:a4:2f:30:a0:c3:ed:b3:b1:79:84:0e:
         85:90:d6:4a:ab:ce:16:e2:e0:d4:7f:6f:a6:b4:a8:95:e4:36:
         47:ad:04:a6:58:16:ae:cd:82:50:de:84:57:1a:40:f9:00:a2:
         bd:43:3a:55:13:0b:58:01:18:16:9d:b2:24:c6:87:f5:68:d5:
         79:9a:a1:45:cc:b6:b6:f4:29:de:d5:aa:52:a3:d1:1b:d7:5d:
         4e:75:37:b9:12:51:92:d7:b9:0c:a7:6f:6a:eb:7b:fb:ad:e6:
         ce:9d:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:38:23 2024 by rpki-client on console-fra.rpki-client.org