Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File:                     aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier:          2njOzmn4rLepfDYMIADZyrR0CURWqNl/PoF2ijTJi+w=
Subject key identifier:   78:F7:33:1F:C2:10:E5:5F:08:4C:F2:3A:29:D9:48:05:FC:4C:58:67
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer:       /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial:       018F87B690529476D1F658D6F93EB3C9FC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 18:00:39 +0000
Manifest this update:     Fri 17 May 2024 18:00:39 +0000
Manifest next update:     Sat 18 May 2024 18:00:39 +0000
Files and hashes:         1: L3g8IVnVziqn8e93RfyuXnHvOS0.roa (hash: Vwlv389/azoc6eqSH7ZOUEY5pusU9QqF7xCdf5wEPeU=)
                          2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: a2Zgm/6z+fClBeT2bmIzbZKuJhmK2X64YnAVAhcI+wE=)
                          3: hUP90rVS4Bpdr3-_3xZFf6QV9CY.roa (hash: xYYw4KjNZ6tHKSTCPNMaONdgSy7RfQpmsYUoFxQNlio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:90:52:94:76:d1:f6:58:d6:f9:3e:b3:c9:fc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
        Validity
            Not Before: May 17 18:00:39 2024 GMT
            Not After : May 18 18:00:39 2024 GMT
        Subject: CN=78f7331fc210e55f084cf23a29d94805fc4c5867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:e5:e1:b9:ea:ac:4a:79:b3:6a:16:12:01:
                    37:54:3e:a1:e0:f0:9c:19:71:bb:de:74:39:13:42:
                    bc:fc:15:fa:42:33:9c:73:2a:fb:2a:75:8e:d1:4b:
                    62:69:8b:8c:2a:9d:4f:d5:7a:8d:c7:c5:b7:97:ec:
                    ec:e7:0b:16:15:cb:cb:21:e4:64:04:8d:d0:5b:28:
                    5d:b7:4c:f9:ce:5c:e9:a3:11:88:82:7f:37:ef:bf:
                    2b:e6:e5:2e:cc:48:a6:60:8d:36:37:d1:da:53:b9:
                    ec:7d:4b:15:f3:08:44:d2:b2:90:83:86:15:93:d3:
                    b3:83:4a:31:ce:fe:14:e9:57:08:77:87:23:63:8b:
                    7b:05:aa:00:fb:eb:45:7f:4f:57:b7:67:73:0d:bf:
                    92:2d:4f:ad:7a:70:10:e4:3a:78:86:d2:2e:16:b0:
                    7f:3f:21:88:3f:59:c1:4d:2d:3c:d0:8d:4e:e8:e0:
                    62:35:f3:1b:2a:ff:e1:82:62:52:3e:2f:a7:30:8d:
                    25:36:ba:94:0d:f2:5c:78:dd:ee:92:56:83:3e:d7:
                    56:c6:1c:9f:c7:74:f6:4e:7a:f3:7b:39:fd:3c:af:
                    95:da:9d:c3:b5:26:c8:7b:a3:a0:53:ae:85:05:99:
                    79:1a:98:49:73:f1:65:55:3e:9c:e6:67:ab:e3:7b:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F7:33:1F:C2:10:E5:5F:08:4C:F2:3A:29:D9:48:05:FC:4C:58:67
            X509v3 Authority Key Identifier:
                keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:eb:cb:4a:c5:b6:fb:06:fa:b2:b2:a5:47:b5:69:46:3d:68:
         e5:71:b9:9f:61:67:29:3b:d8:b8:ec:f9:a9:ac:54:7b:c0:b8:
         a0:6f:74:ab:51:c8:0a:ac:fc:e9:55:0c:de:8f:7e:e9:ef:fd:
         57:35:e0:f7:b7:21:5a:72:95:3b:8d:a3:8b:44:cd:a6:d9:55:
         f7:c2:a5:83:1c:43:b9:c0:77:f5:48:e8:60:fe:54:93:5d:31:
         8b:85:3f:2a:23:ba:63:da:c6:cc:b8:ee:f0:96:75:1c:05:56:
         49:57:7a:03:dc:86:7a:4e:9c:d2:a0:ef:fb:4b:ad:e6:5f:89:
         63:5d:65:9c:56:cf:ce:d0:39:4c:20:52:09:25:d3:7a:33:c1:
         56:d4:88:ad:4f:6e:c1:5d:3e:80:99:74:a0:f6:17:a1:19:d8:
         58:95:5b:79:1b:6e:5b:65:64:8d:24:6c:06:19:53:d7:70:f3:
         6c:3c:02:dd:ce:40:58:ba:78:b6:99:ec:2c:ea:13:0c:42:fe:
         41:e1:63:dd:c9:00:c5:40:4d:dd:6b:c6:d7:1d:9e:d7:5f:39:
         1b:34:2e:6b:85:c9:72:e2:88:5f:b2:b0:87:9a:a5:05:6b:d7:
         42:d0:a4:a2:be:22:c2:6b:fb:1d:82:05:12:51:07:1d:da:d9:
         f0:85:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:13 2024 by rpki-client on console-fra.rpki-client.org