Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File:                     hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier:          zUrI19SaEQpwMIkeaYIekqBi0XmUU8OdnWhUL2nwmuw=
Subject key identifier:   8E:E1:F3:A3:B9:C9:B7:37:73:96:D0:6A:44:91:D4:E3:2B:A9:F4:9E
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer:       /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial:       018F87488FD1D6D50BDF7A5E662BC24067B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:00:30 +0000
Manifest this update:     Fri 17 May 2024 16:00:30 +0000
Manifest next update:     Sat 18 May 2024 16:00:30 +0000
Files and hashes:         1: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: 4GTkNRmxkM7NFxwcBPE+BZ8598VpvFVjy1Ydl7vEfys=)
                          2: lXSMv5TFzlF7U2Yh0nY5GDwpj-c.roa (hash: FKMUlxVgcBTYivayVo/DvcyzO/qRZ0ZmrGpT6jFmeho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8f:d1:d6:d5:0b:df:7a:5e:66:2b:c2:40:67:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
        Validity
            Not Before: May 17 16:00:30 2024 GMT
            Not After : May 18 16:00:30 2024 GMT
        Subject: CN=8ee1f3a3b9c9b7377396d06a4491d4e32ba9f49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:d9:68:3b:55:d1:b3:19:85:5c:bb:22:3a:
                    1f:89:7a:8e:d4:8a:20:f4:e7:50:65:b4:7b:96:d2:
                    65:4e:22:80:e0:78:1e:52:a5:27:55:12:9c:cf:14:
                    b6:ce:5c:a9:2a:35:d8:3f:a8:61:1b:13:23:fc:40:
                    0c:3a:d8:cc:3a:65:8c:0f:ab:4c:56:85:38:55:83:
                    62:e4:48:0d:87:24:11:82:48:27:85:bf:2e:94:52:
                    36:f8:7d:2d:22:a2:0a:f5:fb:57:2d:48:c8:5f:d5:
                    b4:21:b7:0f:63:2c:c0:97:d3:2d:29:67:c6:4a:f9:
                    c6:cf:60:cc:ab:d4:5a:79:95:3d:ff:ad:33:45:13:
                    84:95:fe:f1:03:ce:78:59:3c:18:a9:4d:e4:18:47:
                    e9:26:3a:90:3b:e0:07:d0:61:0b:ac:ca:e1:cb:5a:
                    b5:dd:6c:5e:fc:27:f7:ce:b3:3f:2d:e9:c1:75:d3:
                    4b:c7:79:84:fb:56:63:2a:d7:c9:22:2c:96:4c:b9:
                    5f:57:38:86:dd:c5:2d:22:a1:db:44:d0:66:27:de:
                    25:15:9c:28:d7:d5:6a:e9:60:6a:36:cd:3b:92:94:
                    6b:07:d5:2a:ee:64:27:95:d5:96:51:d7:b1:6a:ea:
                    f0:15:85:22:f3:31:b2:8b:8e:0f:11:99:c4:43:ee:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E1:F3:A3:B9:C9:B7:37:73:96:D0:6A:44:91:D4:E3:2B:A9:F4:9E
            X509v3 Authority Key Identifier:
                keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:31:81:a7:81:18:cb:e9:ac:43:aa:1d:77:28:6a:ff:e0:
         9c:7d:ad:b1:c1:de:7a:1f:d6:93:a9:a7:b8:26:35:c8:f3:33:
         34:68:00:21:46:6b:56:e1:b8:5f:21:7e:68:ea:f0:7b:55:a8:
         7d:4c:0d:e3:1f:40:f2:01:6f:f3:fe:64:08:03:0f:38:6f:f8:
         9f:88:37:fc:53:a9:f3:d3:52:aa:f5:e7:13:69:cd:c8:32:c1:
         d4:7d:03:87:81:d6:1e:cd:22:47:2c:fe:a1:9e:15:e1:39:0d:
         6f:bf:47:fc:47:e2:a5:74:63:15:34:e3:0b:ab:f7:a9:ab:2e:
         0e:eb:67:da:f8:61:e3:ae:57:77:d3:2c:08:13:01:09:b5:32:
         2c:7d:8b:6a:a4:3d:4e:65:fa:e4:31:e0:30:ef:6c:a8:04:33:
         d3:cf:10:40:83:d3:3a:d9:cf:96:07:74:a5:ac:04:73:07:a3:
         59:56:fe:29:0a:b3:0a:5a:18:7d:e4:e4:be:08:fd:e3:c5:ba:
         79:f2:f9:8a:c9:a7:2f:76:45:cf:18:fa:51:3d:5a:11:d0:fa:
         05:0e:dd:a6:8b:28:42:1f:80:fa:9d:6a:f4:46:b6:86:0f:e1:
         f2:0f:d0:cc:c8:be:b6:d7:f1:17:22:cd:1d:69:ba:42:97:db:
         38:43:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:10:55 2024 by rpki-client on console-fra.rpki-client.org