Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
File:                     h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json)
Hash identifier:          vn4arZKcUTrkKVFXvrHxD2sSp3RN7nv0aEqqit9WtHI=
Subject key identifier:   A7:FA:6D:E0:97:62:ED:4F:48:B2:DB:E1:FF:12:95:2D:C4:75:F4:95
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Certificate issuer:       /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial:       018F87ED727C92E35C3092AB663EEFB88205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 19:00:36 +0000
Manifest this update:     Fri 17 May 2024 19:00:36 +0000
Manifest next update:     Sat 18 May 2024 19:00:36 +0000
Files and hashes:         1: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: AipDGCBaskWmE8tZ3nNivYz4Ei1HwxagBHsKV7a/h/Q=)
                          2: tAjb-3-tber-s7itP04i4bDSFic.roa (hash: 3MNpQbhT+cqYED0aqzlpEJsPnXyZ9LjwuS1FOR2Zdrw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:72:7c:92:e3:5c:30:92:ab:66:3e:ef:b8:82:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
        Validity
            Not Before: May 17 19:00:36 2024 GMT
            Not After : May 18 19:00:36 2024 GMT
        Subject: CN=a7fa6de09762ed4f48b2dbe1ff12952dc475f495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c5:7a:ee:2c:0c:19:8d:04:54:5b:ad:c4:39:
                    e6:dc:47:6e:89:ed:63:b9:7a:50:7a:df:82:2d:a0:
                    0f:10:68:3b:ac:46:f1:5b:24:5a:b8:3a:00:ac:71:
                    7d:8b:5f:34:50:52:40:45:2d:0a:c5:3b:0e:31:f1:
                    89:7a:83:ba:ea:50:db:7e:65:61:d8:d9:78:66:44:
                    14:cd:45:8e:37:cf:6b:70:fe:02:65:23:99:e9:fd:
                    09:cc:5c:0e:fc:93:c5:f1:74:c5:b6:51:6d:0f:94:
                    26:f9:4c:3e:f8:04:e2:fa:3e:0a:4d:ad:6d:7b:ab:
                    ee:a1:80:bc:31:60:0e:e0:a6:5e:09:8e:31:35:3f:
                    50:bf:b8:6f:8a:89:43:6f:fa:ca:ce:4d:fb:0d:4e:
                    fa:31:e7:43:f8:03:0d:e8:aa:ab:f0:ea:96:10:d6:
                    57:7a:49:cd:0e:24:9e:e9:73:aa:c0:55:a8:7e:cd:
                    78:2b:dd:e7:23:b0:3e:57:6d:2e:cc:ea:f4:8e:ce:
                    e3:cc:a7:0a:43:fe:79:3d:dc:0b:ad:9e:01:6a:b4:
                    56:3d:17:6b:00:2f:90:a6:58:9d:31:36:ad:6b:ea:
                    26:be:6d:e5:ee:26:f7:64:b3:77:14:20:16:9a:81:
                    d8:64:1a:0e:08:1e:7b:c5:f5:84:ff:10:de:8d:c0:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FA:6D:E0:97:62:ED:4F:48:B2:DB:E1:FF:12:95:2D:C4:75:F4:95
            X509v3 Authority Key Identifier:
                keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:27:52:97:6e:77:dc:b7:3c:08:2e:a9:78:14:3a:eb:fd:1a:
         d8:f0:d3:f9:a3:a4:ae:49:1e:cc:c0:9b:b6:11:20:00:ec:12:
         d0:63:46:34:5a:7e:f3:7b:06:23:b8:dd:02:2b:9e:53:83:48:
         be:1a:bd:e1:4f:37:9d:a6:f8:7b:01:86:b6:41:c8:e4:d1:39:
         4b:c6:55:28:6a:3b:e2:1a:b5:fb:66:8a:c1:41:b8:15:59:65:
         34:18:af:14:0e:fb:7d:5e:7c:93:c5:17:72:b7:6e:b9:82:54:
         0f:1c:c8:41:ee:c6:4b:da:3c:2b:61:14:c7:70:83:4c:23:66:
         e0:39:21:a2:ae:9b:d5:88:7e:06:5e:97:5f:59:64:83:03:f2:
         4f:f4:1e:a0:bb:72:f9:19:d0:d7:25:45:a9:d8:4d:9e:d1:7a:
         34:e6:1f:b9:3c:0f:12:c9:9c:dc:c5:fb:79:14:55:6a:37:69:
         a9:6c:2c:4f:78:76:10:c5:d9:e7:e7:38:02:75:55:0b:a2:96:
         0b:e3:ac:7b:80:b3:0f:31:a1:8f:65:40:4f:1a:b1:98:a3:22:
         ed:46:a9:87:e3:45:4f:43:68:84:2b:4d:e3:b9:57:e1:24:50:
         ba:d4:ee:6a:2f:4d:74:08:e7:21:50:2e:af:58:89:a4:89:9b:
         90:34:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:51 2024 by rpki-client on console-fra.rpki-client.org