Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File:                     2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier:          0BD0O63UcmMhTdkIfF3Jy7sftYAuluRfazEamuJbLlE=
Subject key identifier:   77:79:A1:3E:1F:89:9D:A1:47:08:3E:14:45:21:79:07:64:27:47:CB
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer:       /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial:       018F2192F2A014F24F635525F20E200E35AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number:          115D
Signing time:             Sat 27 Apr 2024 22:00:29 +0000
Manifest this update:     Sat 27 Apr 2024 22:00:29 +0000
Manifest next update:     Sun 28 Apr 2024 22:00:29 +0000
Files and hashes:         1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: 8yv4CIe8PkyH5sU2297/panARhPnNmeypzxfFiHhH4A=)
                          2: 5eLaNlSPKZSWm5E5UhOvaVFxTqc.roa (hash: IFPmp2bjNy08Sh2w2U198tiz0CIK318eXRMH/ayKoyk=)
                          3: ClBpqHBk3_kiZEqUFElQaUBmFWM.roa (hash: 5dGpDt19ysT4nFbvGjXB+f8lkmqa9pEP5UJDLKga284=)
                          4: n2smnIg8lz32xSWjzMSi7HtpmMA.roa (hash: 1Lw/5v88j7y8/knixxbPWlHmR2e7HOM+hAg9eO9unpk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:21:92:f2:a0:14:f2:4f:63:55:25:f2:0e:20:0e:35:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
        Validity
            Not Before: Apr 27 22:00:29 2024 GMT
            Not After : Apr 28 22:00:29 2024 GMT
        Subject: CN=7779a13e1f899da147083e1445217907642747cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:71:13:78:b7:b1:6a:e6:25:00:fe:e6:f2:
                    65:71:aa:f9:07:4f:a9:73:c2:58:ce:a8:e4:58:13:
                    3e:8c:fc:e2:a6:9d:ad:a0:f1:96:72:6e:25:04:40:
                    d3:0c:50:51:71:72:57:1e:70:9b:ae:4d:d5:2e:9a:
                    04:83:cc:65:9e:29:28:6c:1c:85:1e:f8:ae:32:b6:
                    6f:d5:20:5b:0a:c2:d8:b7:bd:42:6f:39:00:8f:c5:
                    f7:bf:76:91:5d:5e:96:90:c6:20:ac:6f:63:da:9f:
                    c3:10:d9:c0:65:cb:db:4e:37:a8:78:00:88:17:98:
                    05:fc:f7:66:a0:25:85:d3:a6:81:e8:51:fc:d2:3e:
                    c2:a5:20:58:e9:be:ea:94:13:09:75:7a:ed:46:c7:
                    24:95:c8:61:f5:60:eb:cd:cf:aa:ba:54:b6:f4:84:
                    f0:40:16:3f:62:3b:34:50:a1:12:4a:21:e5:91:46:
                    18:a4:93:24:84:cd:b0:01:28:23:21:52:35:ea:40:
                    98:62:f3:5d:56:0f:32:8e:b2:a2:70:26:10:df:f0:
                    cd:f0:e9:d2:84:c6:bb:a0:d3:fb:4b:ec:2f:41:bb:
                    df:83:ae:00:70:a2:28:cf:39:ca:f9:a2:e2:77:c4:
                    bb:10:41:dd:5d:80:b0:9a:e1:40:a8:30:e6:73:5f:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:A1:3E:1F:89:9D:A1:47:08:3E:14:45:21:79:07:64:27:47:CB
            X509v3 Authority Key Identifier:
                keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9f:43:22:df:cd:06:ac:fd:07:02:b0:41:04:7a:ae:3c:fa:
         32:ad:6c:c7:be:85:44:f0:99:0a:67:20:d0:ba:0d:ab:aa:3a:
         e7:e1:43:59:7d:02:6f:84:e9:8f:37:f5:4c:0a:96:02:64:f0:
         60:9b:08:bf:1e:af:82:47:0c:50:c0:16:6f:8e:be:d2:90:66:
         1a:f3:bf:b1:55:39:d5:5f:ca:42:ff:90:2f:17:1c:93:c6:3f:
         ab:21:af:d6:78:e5:c8:29:ca:5e:c8:46:26:b1:5f:a9:5e:04:
         2e:12:6a:23:3b:ba:83:8d:7c:ed:da:15:69:1e:eb:66:6e:4f:
         a8:66:04:9e:a2:74:73:30:ad:13:18:88:f2:41:b3:d3:fb:9a:
         da:0d:09:a6:81:6f:98:bc:ab:a4:06:59:0c:34:88:5d:c3:d6:
         32:44:5b:72:4b:70:80:5f:82:3e:24:8b:63:fe:18:5f:e5:4a:
         b4:ad:8e:d2:ef:01:f5:1c:4b:34:c9:14:ec:b2:e5:3c:71:e6:
         f2:3f:1e:e8:a2:6a:20:f6:b1:fa:cf:27:c1:77:28:22:42:bf:
         10:3e:35:8c:0e:5c:cd:59:3d:87:31:6c:a9:5b:46:65:e1:30:
         85:b1:c5:a4:2b:4e:8d:a1:b7:b1:69:1a:2f:a8:43:1d:a2:ef:
         c4:4f:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:55:39 2024 by rpki-client on console-ams.rpki-client.org