Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
File:                     ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft (raw, json)
Hash identifier:          Oa1tauzayFftHfc7An2NlTpPlldZ25hkqLgGRXLc7+0=
Subject key identifier:   47:49:EC:D9:57:6B:B1:40:90:1A:A7:F0:17:59:01:23:90:E2:8F:5E
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Certificate issuer:       /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial:       018F9571C8D2D4376017F41C4ACAEE4C1E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
Manifest number:          117E
Signing time:             Mon 20 May 2024 10:00:13 +0000
Manifest this update:     Mon 20 May 2024 10:00:13 +0000
Manifest next update:     Tue 21 May 2024 10:00:13 +0000
Files and hashes:         1: aL4nJN9PPGKxsFsQ0vICblhJsRs.roa (hash: Z3A73uR4k4x7GkOnpRIDXQMebGCrBLzHMZWZbzcZcL8=)
                          2: cJPu1yZaXNjNVzwGZ1v-VWLIp7k.roa (hash: o5tlkLnjUQWB7eZWeZ5CYiLbE63nepmYktmxhg4jBA4=)
                          3: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl (hash: D+qv41nojCp9e/x2AM8Uu4ZFbLWa0+KF1D7mR9jhAKU=)
                          4: yCZlVliol25kNDspmKTwkEKwb8Y.roa (hash: X9C9Eqtr7lwcD57bw7sTfOwpa8+ji4uCCx556S6Eo/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:71:c8:d2:d4:37:60:17:f4:1c:4a:ca:ee:4c:1e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
        Validity
            Not Before: May 20 10:00:13 2024 GMT
            Not After : May 21 10:00:13 2024 GMT
        Subject: CN=4749ecd9576bb140901aa7f01759012390e28f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3e:f7:90:48:04:26:3d:f5:6f:bb:ca:3f:3d:
                    d8:9d:77:e2:13:53:6e:03:46:17:78:19:5a:d9:c2:
                    71:d9:68:bb:c7:bc:2f:b7:7d:dc:f4:39:e8:17:99:
                    0d:b4:95:6e:e4:a9:09:ce:e9:8f:95:d6:a3:9e:db:
                    31:fa:b7:eb:39:b7:d9:c2:11:5a:5c:b0:3d:c4:15:
                    6f:e3:35:d0:7e:7c:9a:64:10:e0:81:5c:dd:e4:a7:
                    6a:35:45:9c:80:d5:88:eb:ae:dc:83:87:fa:14:23:
                    d0:83:17:7a:2c:f2:3c:c6:22:3d:27:04:e4:ca:82:
                    31:a6:f5:9e:4d:08:fa:ad:20:89:88:fe:b3:54:3a:
                    06:b4:a5:17:df:0c:75:4f:97:db:b6:b3:23:e0:6d:
                    ee:ba:81:af:fa:41:c0:be:88:f6:2c:d7:eb:8b:50:
                    44:37:2b:98:73:fe:a4:55:88:87:9a:e3:ef:f1:eb:
                    ce:41:cb:0b:b1:90:28:19:21:37:9d:47:7f:6f:ce:
                    23:aa:1f:6c:0f:7c:0e:63:2b:cd:46:5b:97:9d:f6:
                    c3:3d:19:93:b9:72:c8:e3:f8:11:81:18:56:40:2e:
                    b0:54:ef:02:06:06:bb:40:90:bc:e8:a8:e2:c9:af:
                    74:cb:af:4a:6b:64:1e:83:f4:04:15:bc:c4:4e:4e:
                    1b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:49:EC:D9:57:6B:B1:40:90:1A:A7:F0:17:59:01:23:90:E2:8F:5E
            X509v3 Authority Key Identifier:
                keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6c:97:da:10:8c:e8:61:1b:52:41:7a:c0:83:4f:80:23:ad:
         d2:e5:d9:48:f5:a5:b5:d8:d3:66:33:d6:19:e9:20:96:08:38:
         9c:0f:c6:22:0c:a1:83:38:5f:50:01:ee:e4:59:75:04:66:e9:
         2f:ce:6c:30:36:74:80:de:ee:a2:41:76:91:08:08:c6:dd:58:
         b5:44:08:0e:09:fc:d5:df:ff:18:aa:f6:3d:63:4d:73:3e:39:
         06:e7:1a:cc:70:56:34:29:02:41:63:3c:cf:11:81:20:58:7f:
         2c:c3:07:03:27:52:db:64:38:9b:36:ae:ed:89:4f:1b:0f:25:
         08:5d:f0:0a:4d:95:14:3f:83:cb:c1:6a:58:a0:ae:54:98:d3:
         ba:cc:0e:bb:62:38:5e:72:a4:e5:a4:6f:1f:30:92:7f:b2:aa:
         fa:b8:fd:48:ea:6c:34:6c:1d:3e:e3:ea:a2:4d:ed:17:be:77:
         c2:1c:1d:c2:5f:c0:6e:ae:9d:b5:80:41:01:72:76:db:da:b4:
         72:f8:c8:c7:55:48:6e:4c:61:4b:a4:1c:0e:a8:57:d7:9a:24:
         01:2b:9d:97:66:f9:c9:39:f6:c0:eb:69:2c:61:04:c4:e4:49:
         40:16:cb:7e:b9:21:2c:05:91:f6:53:36:86:4f:c2:83:8c:79:
         6b:fd:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:12:44 2024 by rpki-client on console-fra.rpki-client.org