Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File:                     xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier:          0zof40fcTMGXC1sFNc+qADf6+n3DhfOAi4fbR6uWMSE=
Subject key identifier:   79:FD:5F:BC:00:C9:65:FF:32:F3:DF:C0:32:00:01:97:52:05:B8:71
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer:       /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial:       018F885B1DD8E47DF14EDFE09CB65CA5232C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 21:00:23 +0000
Manifest this update:     Fri 17 May 2024 21:00:23 +0000
Manifest next update:     Sat 18 May 2024 21:00:23 +0000
Files and hashes:         1: NU2ucgoxUD9Ll5QUQnA-tVRGbp4.roa (hash: txCh70u8QbDPLIvr6bAFME89YMTmxKrstmr4Ls8D2OY=)
                          2: hlXsROypaaVSV1BMYUNuzr7Krac.roa (hash: 9iyo6yQdVfG3KH09ThzxvwfVcS4/pvopJiWLUGqJkV8=)
                          3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: T/FEh7/+YOFzZWjLzwEeTrpfMe72y8sDiFpsdmKP2Ig=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:1d:d8:e4:7d:f1:4e:df:e0:9c:b6:5c:a5:23:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
        Validity
            Not Before: May 17 21:00:23 2024 GMT
            Not After : May 18 21:00:23 2024 GMT
        Subject: CN=79fd5fbc00c965ff32f3dfc0320001975205b871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:95:44:a3:58:34:33:0e:e2:05:70:05:4f:
                    76:3d:b1:58:23:34:e3:99:54:54:81:3e:db:cb:35:
                    c7:21:ca:bb:69:14:57:b2:87:f7:bb:a3:8e:32:37:
                    90:27:ab:6c:f1:d2:46:37:51:5c:44:a3:50:8e:1d:
                    69:bf:ca:f6:6f:ab:13:fd:cc:9b:7c:31:78:fa:e1:
                    94:cf:52:80:5e:af:72:b1:0a:9b:d2:e9:a1:61:d1:
                    c3:f0:4c:01:71:e0:b7:9e:e1:ea:70:c8:07:0d:4f:
                    9a:5e:4d:5a:76:fd:db:78:75:59:3f:c4:c1:83:82:
                    8e:10:bc:8f:69:2c:52:8a:87:34:10:cc:4c:be:aa:
                    87:ee:07:eb:ea:92:6e:98:3f:2e:b2:21:3c:42:f7:
                    11:94:6b:5d:a1:fa:bc:c1:0b:f8:87:c3:f4:6b:d3:
                    18:eb:f9:65:b8:58:76:72:10:f1:c3:f1:e4:fa:f6:
                    91:f0:e5:1b:7a:12:ee:84:8d:76:0b:09:54:1d:58:
                    41:32:54:3f:f5:43:39:bc:10:8b:a7:92:cc:e3:9c:
                    e0:ba:de:1e:78:02:c3:35:bc:3e:b3:fc:e3:39:f7:
                    bc:d8:6e:36:d5:b5:63:d2:6d:14:15:9b:80:a8:6b:
                    f8:1b:0d:ca:b6:eb:96:56:2a:70:a6:12:2b:07:30:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FD:5F:BC:00:C9:65:FF:32:F3:DF:C0:32:00:01:97:52:05:B8:71
            X509v3 Authority Key Identifier:
                keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:cb:fa:60:ad:ea:2d:93:0a:59:07:fb:16:75:ce:f6:91:c5:
         33:10:cd:32:9c:e0:b9:96:d7:82:ee:e9:fc:a9:8a:98:97:d6:
         98:6b:c2:b5:6c:08:80:2a:95:1c:e0:71:35:5c:69:86:55:36:
         5e:81:b6:25:4f:57:1a:2d:87:c5:88:ba:a0:13:4e:27:ac:cd:
         18:75:82:bd:2c:9f:fe:c5:9f:c4:ce:74:40:c8:35:c1:20:46:
         6c:af:19:58:1b:0c:86:6f:19:d2:1f:f3:5b:4e:df:1e:94:de:
         a3:13:4d:6e:3c:d6:2c:a2:e0:da:7d:0b:5e:49:bf:12:63:94:
         ae:85:33:62:78:aa:74:4c:f1:1a:aa:5e:63:63:14:4a:de:a7:
         e5:6a:20:a3:93:24:20:bd:2e:e3:b5:a0:3a:64:01:d9:c9:16:
         9a:6a:f1:3d:0a:f8:f5:aa:47:d6:a2:a9:df:91:ce:41:c2:01:
         49:08:65:71:9b:5e:26:9a:16:37:37:40:27:ed:9c:9d:94:20:
         c6:6d:d4:bd:bd:4e:13:02:c6:30:ca:a3:39:9a:9b:f3:0c:a3:
         d4:57:ae:0c:a0:1f:12:50:92:b9:b0:eb:18:28:20:1a:f6:b7:
         6a:9a:f2:ec:a4:40:81:8d:4f:08:28:97:63:5f:13:99:fa:f4:
         fc:f4:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:30:35 2024 by rpki-client on console-ams.rpki-client.org