Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
File:                     H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json)
Hash identifier:          dh8nLSNzRHMkPOIzqjZK12VUwY0Joq5AXNRyBLt3eYs=
Subject key identifier:   B3:01:9E:6C:F5:1E:AE:29:F2:B4:98:23:41:8C:2B:93:EB:CA:9C:CD
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Certificate issuer:       /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial:       018F46B2F8CA09BFB6A78F2CD3D2FC4D7D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
Manifest number:          116A
Signing time:             Sun 05 May 2024 03:01:25 +0000
Manifest this update:     Sun 05 May 2024 03:01:25 +0000
Manifest next update:     Mon 06 May 2024 03:01:25 +0000
Files and hashes:         1: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: q2xLX9QrRq8/t9/MFyeoccsqObTrhs03H9KTC4pEEVU=)
                          2: IQ9mkXsk_VOOFgsv0t7hacRUbKA.roa (hash: qwhUX4sWkekXHdNCZorv7/myQdgQ4C6MzSsXdZ5LuRo=)
                          3: Ldc4o9L-5HMwL6CiKLTPZNj10t4.roa (hash: MnLWlh0g5BLxsxCKq3v+1BT4h2/+3tXxViOM9GFNaDw=)
                          4: MQLAZtM7yFr_hR7h_Q0sFiUjo0E.roa (hash: Q6UPvomfMUjtEY5D/bbb2IMqQQUf16FtPI8dYvm2RyQ=)
                          5: NbSFDcOllohrMed4Ihdzk29z_wM.roa (hash: pa6LnH7GySgonVWG9JZW4YXAkqAcW0/PuvgDcBRiQoM=)
                          6: OpmonBFO56vtMRogn9acRiXVcTE.roa (hash: Bhcs7RL3jgxTeM8ESoQ6WKXtdI+kNOY4w1sNhAloyuQ=)
                          7: XCzXDCVJyGO8GS9ksaDduV3e2IA.roa (hash: xK/EVG8zRWt9rCZhhtLmPA8PVNxGjkB5jq5kl0YkqQw=)
                          8: gOSAZ4GuL3kxY6b4ETjFf4zNDwI.roa (hash: Y5xnWnvt/tRPwQ7uSd+1G+UV3H6aVE3wx8GoCC0qfzk=)
                          9: h8hMAL0GKRBTFoJDQgo8opfSZho.roa (hash: Xo0IH7V4CFOHnmhD0d5fbw3JnkHbu9Xg8tKR9fdUJE0=)
                          10: m2BuVig8YErAqgiQAMfe8GMuqZI.roa (hash: xO6BT9PF2WDS0PfgRPTTstrY5haaaxQ5babve0ASmPk=)
                          11: mZYRwxHYqpuJoGgFIZZZQBDfW6Q.roa (hash: jbBCRm7TQ7QaVCzlmsEAPR0XSiCHkzSi9yuauqFaxxA=)
                          12: oo-a44S7TIqo6a7u_RVh26TFcho.roa (hash: ukM9SAQsS8ui5EqZSKgfLauW+kG2GioEvBWuie00C3s=)
                          13: rpPObXxx5bOq5Po7WGWgReVRYQA.roa (hash: IOHAdL9+bZktE2RKxmSvBMUGEQSLCjb+fIQENbNsbqg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b2:f8:ca:09:bf:b6:a7:8f:2c:d3:d2:fc:4d:7d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
        Validity
            Not Before: May  5 03:01:25 2024 GMT
            Not After : May  6 03:01:25 2024 GMT
        Subject: CN=b3019e6cf51eae29f2b49823418c2b93ebca9ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:16:93:2d:1e:c8:40:fd:15:d1:d4:83:90:
                    b1:a2:8a:64:8f:59:ff:32:78:a0:4d:df:8c:c7:a8:
                    99:65:bf:20:da:fa:e1:ba:cd:15:b3:c8:31:20:42:
                    ac:b9:fd:8f:74:d2:a3:5e:25:9c:05:09:14:60:f3:
                    55:74:06:b1:8a:8d:d7:69:ea:20:80:c4:c9:79:33:
                    05:22:f3:5c:b0:53:df:20:70:e7:68:0d:9c:a4:3b:
                    fd:17:08:eb:48:2d:f2:0d:6a:11:31:9b:f8:4a:2a:
                    88:4d:05:dc:23:09:4f:bb:70:16:c6:5f:65:c6:bf:
                    de:e1:46:91:38:f6:3c:dc:85:78:50:5c:39:36:55:
                    e5:03:f1:a6:70:64:85:a1:30:22:0b:6e:58:df:71:
                    20:f0:b7:39:b8:f9:e7:9a:e3:29:5e:d5:2b:62:98:
                    2b:8e:40:11:b7:96:38:e2:c4:d2:08:21:96:f9:a5:
                    69:dc:90:fa:ea:c8:ce:5e:fb:8a:e9:6b:6e:90:e3:
                    e7:17:da:07:0a:d5:da:af:e1:91:f3:f5:95:df:8b:
                    7b:09:79:d5:2e:1d:e4:57:66:13:58:05:0c:5a:61:
                    8c:8f:14:11:71:cc:03:9e:65:79:1b:8d:c2:60:45:
                    61:8a:03:a7:3b:58:3a:56:aa:3d:6c:ac:80:a1:b0:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:01:9E:6C:F5:1E:AE:29:F2:B4:98:23:41:8C:2B:93:EB:CA:9C:CD
            X509v3 Authority Key Identifier:
                keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:57:42:26:9f:cb:1b:67:92:0e:b5:aa:62:3f:45:06:1f:
         a1:a1:19:3d:fa:e3:95:0c:a7:7d:95:01:7f:40:97:85:43:ec:
         ee:6e:bd:6e:87:66:89:cd:dd:94:e2:e6:8c:f7:78:e5:fb:71:
         ab:54:be:a0:bf:4e:7d:53:9c:8b:8d:86:bc:0f:54:71:c5:fd:
         f1:33:29:59:28:5b:c3:72:8a:7d:ad:2e:d0:85:69:74:1f:be:
         3b:03:95:09:31:90:c0:e4:21:a7:1d:94:2e:3d:a4:7b:98:b7:
         79:32:18:e8:e7:2d:3a:ec:1e:0d:4c:76:b2:ea:14:b8:be:d5:
         bd:61:bb:de:79:0d:94:14:73:ff:e7:5c:00:23:a5:38:62:cd:
         44:ab:01:b7:07:79:25:91:4a:21:5b:7a:16:53:b5:a5:55:10:
         1d:4b:02:bf:48:c2:41:3a:04:2b:06:ae:89:6f:be:c3:92:ee:
         71:a1:4b:73:6c:ed:61:73:78:c8:de:b3:c1:83:05:23:6a:11:
         09:a6:8c:50:bd:c1:57:bc:6d:2a:9a:ac:e0:2f:b8:ff:98:ee:
         27:d5:13:14:65:09:8c:c9:61:1a:e4:0c:93:f4:a9:00:47:97:
         89:05:01:42:70:71:1b:25:09:37:49:1a:de:d8:ba:ed:92:f5:
         82:01:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 11:03:45 2024 by rpki-client on console-fra.rpki-client.org