Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          qHT96nfzF3bloe8SLfdzDSAA1Pw7HZwtpCnI1yJQwMw=
Subject key identifier:   43:68:7B:67:14:9E:89:96:7F:73:EF:2A:28:28:89:D8:58:38:85:7B
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       018F88246E11E50F0C1593C91DAF122E1BF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          117E
Signing time:             Fri 17 May 2024 20:00:39 +0000
Manifest this update:     Fri 17 May 2024 20:00:39 +0000
Manifest next update:     Sat 18 May 2024 20:00:39 +0000
Files and hashes:         1: 7-tubwSPDf-2wpFzfQMH8x7t5Q4.roa (hash: MVFpIxvv8V5Wh2/kMNTWeVVwMo1ZGNO2A8IkLKtsxXE=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: ET/is36iDubJuqw/gRO55yKYqaMjCm3ZaXYtpYxqUYM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:6e:11:e5:0f:0c:15:93:c9:1d:af:12:2e:1b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: May 17 20:00:39 2024 GMT
            Not After : May 18 20:00:39 2024 GMT
        Subject: CN=43687b67149e89967f73ef2a282889d85838857b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:eb:93:19:51:56:c2:cb:8b:81:79:81:4f:
                    be:24:c8:fe:fc:e2:c3:cd:d6:3b:07:3e:b1:0a:e9:
                    85:7e:a9:c8:43:2a:c2:c7:ca:76:27:84:39:9b:e6:
                    96:a9:c9:31:1a:d6:7a:97:8c:ef:3c:b0:ff:1f:d3:
                    04:fe:4d:68:2d:34:66:7c:94:35:ca:c9:33:8c:99:
                    08:e7:74:32:f8:e8:5e:99:5f:23:46:b8:2a:59:57:
                    92:fa:74:37:51:62:c1:12:36:4c:81:49:2d:85:22:
                    d4:6d:70:11:79:c1:1d:89:39:97:b8:cb:64:36:2c:
                    76:f5:a6:50:47:0a:38:dd:34:13:e1:61:2f:51:2e:
                    a3:0c:40:46:42:d8:d7:2c:07:78:e4:df:63:65:3d:
                    3c:37:2b:79:ca:8a:d2:98:00:f6:b7:bf:dc:b7:98:
                    cd:29:03:0c:06:2b:21:ec:ec:ea:32:31:cc:8f:96:
                    ed:98:67:9a:5c:3a:e8:72:0b:34:b3:51:8d:aa:fa:
                    72:0f:46:a2:5d:b2:1b:04:a5:41:4c:96:54:5f:e3:
                    0d:fb:90:e2:ed:23:1b:37:55:fb:43:b6:df:04:85:
                    38:75:78:34:b2:08:c8:b5:07:4f:58:03:a0:c1:5a:
                    fa:8c:81:0d:54:e8:10:e8:88:4e:63:bf:58:4f:ce:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:68:7B:67:14:9E:89:96:7F:73:EF:2A:28:28:89:D8:58:38:85:7B
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ff:6a:bd:1f:cd:71:20:d1:fd:56:ff:8f:87:96:b0:c6:85:
         ba:e6:d7:b2:6c:27:2f:a6:e8:64:6d:fd:ea:f9:cb:9b:53:9b:
         99:33:2c:3a:ce:6b:c1:ed:85:4e:07:8e:14:1a:13:36:4e:9f:
         e7:83:de:c5:26:0e:7e:c9:f6:9f:0f:69:9a:40:b8:ec:d4:d2:
         24:b0:21:f1:01:84:47:dc:e7:49:c6:18:64:b4:35:9d:66:bf:
         ee:88:63:3e:1d:c1:ac:a5:61:fa:87:77:ea:c9:29:ad:a5:a6:
         16:a7:80:4b:12:32:ca:ea:ec:95:b0:ca:f7:a5:a6:11:da:da:
         0b:19:fc:6a:fc:f6:b7:c6:3e:64:f0:59:4c:65:9a:84:07:e1:
         71:09:c1:3a:77:10:ca:74:4d:51:91:8c:97:06:c7:ce:47:85:
         ee:53:6f:fd:7b:a6:da:39:31:6b:fe:ef:a2:95:39:4d:84:ab:
         14:f5:c2:1b:d6:88:5f:93:d5:81:84:04:db:b1:4f:47:63:67:
         88:3f:30:aa:ed:4a:28:9c:ea:f7:94:68:a8:c9:44:d7:ef:b5:
         94:53:27:17:72:8b:d6:ba:23:b7:9a:df:ec:b4:a4:bc:10:64:
         04:ad:cd:ef:a2:3e:eb:cd:11:a6:ac:1a:47:f2:4a:b7:7e:39:
         34:b1:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:27:16 2024 by rpki-client on console-ams.rpki-client.org