Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File:                     xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier:          KAzX1byCnkimimElKmt6m7GNLCzzbfWBOmNVPYcEhEg=
Subject key identifier:   F5:BE:FD:D9:CD:54:CF:4A:31:B5:8D:66:D6:EC:4D:DA:61:85:8F:36
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer:       /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial:       018F88923D3A3250B52492D51328B9EB707D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 22:00:36 +0000
Manifest this update:     Fri 17 May 2024 22:00:36 +0000
Manifest next update:     Sat 18 May 2024 22:00:36 +0000
Files and hashes:         1: pFdz3dqde8bMzGeMAT6M3y0bzQQ.roa (hash: F+GosuyLgCPmN20Zx8V03FWlKOht+90USZqo6M9tkEY=)
                          2: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: BoHvMKQwdUxoHaAdgfMNgSprd4hebXys2XGs2gb0H8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:3d:3a:32:50:b5:24:92:d5:13:28:b9:eb:70:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
        Validity
            Not Before: May 17 22:00:36 2024 GMT
            Not After : May 18 22:00:36 2024 GMT
        Subject: CN=f5befdd9cd54cf4a31b58d66d6ec4dda61858f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:ad:32:6e:96:0c:05:a9:21:84:94:e5:3b:
                    a8:c8:22:ae:9e:ea:5f:cf:f5:9b:bf:b5:61:b5:a2:
                    12:fa:5c:59:f0:0f:63:5f:11:fb:10:07:c1:14:c4:
                    fe:df:69:f7:ca:7c:9b:cd:f1:06:ca:93:f7:45:02:
                    dd:89:74:cb:23:95:4c:82:ee:30:fd:22:57:9e:de:
                    35:23:8c:a3:d7:49:98:57:f8:c2:67:69:d2:9b:f0:
                    a2:a2:8e:a3:56:6d:72:89:22:ff:cc:ee:6b:64:4b:
                    41:da:88:69:ad:20:b9:72:17:6c:bc:b2:19:7f:21:
                    41:c4:50:ec:cf:68:f0:fd:90:ee:2c:f9:b4:a2:e8:
                    4c:30:d0:b3:86:a8:50:8b:23:c6:ea:10:08:77:4a:
                    73:3d:b3:71:03:22:5d:44:c7:6f:ae:7d:a4:85:f3:
                    e1:53:77:85:a8:c4:2e:ed:f1:3e:5d:e7:85:de:e1:
                    2b:df:8f:28:cf:7b:c9:d4:bd:f3:03:9c:04:f2:80:
                    6b:dd:1c:38:63:e0:ec:ef:95:1e:6f:66:3b:27:a7:
                    f5:fe:45:96:e5:f4:78:6f:5c:d3:04:ef:67:43:a2:
                    8a:67:02:fb:7c:27:73:63:cc:4c:0d:b0:4f:9a:3f:
                    a0:e6:54:6e:1d:4d:db:ee:c4:df:80:e4:1e:f8:2b:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BE:FD:D9:CD:54:CF:4A:31:B5:8D:66:D6:EC:4D:DA:61:85:8F:36
            X509v3 Authority Key Identifier:
                keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:a1:99:81:08:c5:ff:f3:23:31:16:89:92:79:be:a5:08:
         35:6b:80:3e:3f:ce:d0:3c:7a:7c:18:03:58:fd:44:c1:47:40:
         dc:f1:b9:fe:9f:f2:1e:6c:5e:fe:9b:c6:32:58:c9:4d:ad:0b:
         81:1b:71:c3:86:50:ab:9b:97:c7:29:9b:20:d6:6e:97:97:0d:
         bd:47:e9:62:35:c3:97:5f:92:d2:33:84:29:4f:33:81:ea:74:
         00:ed:11:af:1e:f5:22:d2:e2:5c:f3:36:3e:d3:2a:9b:f0:69:
         b8:79:d9:c7:55:c0:7f:52:81:67:c7:85:42:46:e9:37:c1:a3:
         22:ca:72:94:46:1a:74:19:e4:50:28:94:75:e8:6d:4f:b9:73:
         e9:85:d0:cd:52:a9:ab:8d:c7:aa:29:4a:0d:fc:a2:5b:5b:e8:
         d6:87:26:ee:71:71:5e:3b:90:ca:07:83:cb:db:ec:ee:4e:d4:
         42:0f:8e:a4:94:98:1f:c9:40:b3:67:a4:ee:92:94:87:60:0b:
         f6:02:07:ae:27:53:e4:13:f7:36:54:67:4e:76:91:7e:66:16:
         ad:73:67:39:dc:ec:ac:34:49:24:ab:1d:a8:9d:c4:bc:e0:b9:
         6f:bb:7e:1d:8f:e8:04:0d:0f:77:72:ff:87:c9:f4:91:30:43:
         06:6e:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:35 2024 by rpki-client on console-ams.rpki-client.org