Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File:                     a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier:          nBMc+rSrWoF1ows9IxSDOTtjl0IZYwkwgSkS+nLdnKI=
Subject key identifier:   3E:B7:28:66:AF:0F:F0:DA:36:3A:3A:79:C9:DB:A0:1B:1C:D1:00:D5
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer:       /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial:       018F904BBE778FA717BA2CAA3A3C32A825BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number:          117F
Signing time:             Sun 19 May 2024 10:00:33 +0000
Manifest this update:     Sun 19 May 2024 10:00:33 +0000
Manifest next update:     Mon 20 May 2024 10:00:33 +0000
Files and hashes:         1: RU8vqclw2CmRy1BNfdwspWe7dA4.roa (hash: kaVVt4eqQGNQKeABpdNiJXeFVrBcafz15UaKDbs0PQU=)
                          2: TkzmdKdpmagrf7kEdNjlEjiH9PY.roa (hash: yREBMToKxfFyM2WgcA6rsQQofM7SzDvHaIudvYoJZj4=)
                          3: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: p2JMf3zEMhYDm635AMP9NsmR7srbDrAKS7Odf8NdKv4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:4b:be:77:8f:a7:17:ba:2c:aa:3a:3c:32:a8:25:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
        Validity
            Not Before: May 19 10:00:33 2024 GMT
            Not After : May 20 10:00:33 2024 GMT
        Subject: CN=3eb72866af0ff0da363a3a79c9dba01b1cd100d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:eb:32:c9:b3:c8:a3:06:06:95:f7:f1:35:
                    f7:39:64:f1:fc:db:00:7d:bf:74:0e:bc:ac:d4:46:
                    9a:d1:d1:96:d2:45:c0:5b:15:85:1e:a4:2d:af:a1:
                    8c:a3:1d:8c:45:73:0d:aa:e1:d9:b5:3e:a0:28:99:
                    bf:20:ed:ce:15:1a:1c:5b:f9:87:71:2a:fc:0f:6a:
                    60:7d:d6:9d:bc:83:b7:5b:dc:2a:e4:2b:4b:df:e9:
                    be:eb:ee:4d:87:14:45:ed:ee:d1:84:6f:fa:aa:38:
                    32:05:a4:fa:5d:9b:08:b3:37:18:ca:0c:e0:48:f8:
                    db:58:f3:9d:00:31:ea:0d:d4:b1:c8:a0:ea:b1:70:
                    ce:b2:54:a0:e3:e9:d5:e6:fa:b9:8f:47:00:4d:67:
                    0b:11:5e:bd:3b:8f:49:29:fe:9c:48:ba:3d:a3:52:
                    33:dd:9f:7b:f1:cb:31:58:40:56:43:34:59:fc:60:
                    d1:5e:21:8f:a3:30:70:31:ac:3b:e9:cb:af:bc:ff:
                    a0:a8:38:f0:05:ab:5d:31:1b:89:e2:b9:ac:d0:2d:
                    ff:7b:e6:15:5e:c1:50:35:1a:50:aa:e8:49:0b:1e:
                    3b:49:65:11:23:b8:f7:dc:3f:42:0c:82:a3:f1:4c:
                    52:20:6a:92:d9:06:d9:bf:84:68:dc:27:24:39:4f:
                    c8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B7:28:66:AF:0F:F0:DA:36:3A:3A:79:C9:DB:A0:1B:1C:D1:00:D5
            X509v3 Authority Key Identifier:
                keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:47:5b:b6:0f:5a:dd:eb:53:0a:d1:5e:f1:f3:e5:b9:63:63:
         ff:88:29:3f:31:df:4c:b6:ef:79:17:e4:4f:1e:7d:9a:8a:01:
         64:5c:10:b8:40:b3:b6:52:8d:6e:a0:a0:e4:72:4c:43:43:7b:
         8e:85:3f:6f:7f:a3:57:26:f3:03:56:d6:95:00:ba:28:e6:da:
         53:2c:16:0e:1b:b6:55:8d:e0:a5:1c:9a:80:53:44:99:e4:87:
         b7:4a:e2:70:77:41:94:7e:5f:37:73:09:a3:2a:bb:7e:08:d0:
         4c:23:0a:d4:23:a3:b6:b0:b9:69:61:1f:fc:c2:3a:14:fe:81:
         e5:79:9c:d6:fd:f1:6f:89:01:11:93:fe:27:15:c4:c7:8c:a7:
         73:42:84:4e:02:f8:1d:81:cb:08:d1:e4:ba:11:9d:6e:d8:36:
         b3:f8:05:fa:d4:96:fa:0e:bc:66:b4:ec:49:f6:11:27:f5:28:
         eb:1c:17:4b:74:b0:2e:f0:be:35:c1:fc:ce:30:71:2f:fe:cc:
         66:b5:d1:b1:6d:61:1d:92:94:f9:f8:59:71:61:d8:c0:ce:57:
         5d:a2:8e:ed:72:9f:d5:a8:ca:f9:83:0f:04:a2:48:57:a9:a0:
         89:ba:b3:00:28:5b:19:2e:1a:23:8d:44:6c:c0:bb:ff:87:9d:
         fb:a5:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:50:23 2024 by rpki-client on console-fra.rpki-client.org