Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File:                     XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier:          +XWGDX5XJW7J3/ksbLTrCalEF1CeEtPn0qOISeCb0Ps=
Subject key identifier:   71:FB:D4:A2:CD:A4:1E:0E:D5:03:7D:3F:40:DA:0F:B1:A6:47:1C:7D
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer:       /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial:       018F86DA500EEE4D2ED6FF721DF142B40239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 14:00:05 +0000
Manifest this update:     Fri 17 May 2024 14:00:05 +0000
Manifest next update:     Sat 18 May 2024 14:00:05 +0000
Files and hashes:         1: T_pTZ8jXPQ_4cXxH6tcxJZIeeAM.roa (hash: zQU/wglo9x021WsD5q0CGQFkzQguLjEJHf1EuLVer8Q=)
                          2: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: 5wvlynU+gRRiZvje9UHsekLr6spGNU7yoncXQwfw5cY=)
                          3: pn2Zi7_sUcr9YxNT3CKu6yNocf0.roa (hash: 3BLB1jcWSjB4ndWoPh9zL8xj88whhTZiF8wT6Yu+MMM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 14:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:da:50:0e:ee:4d:2e:d6:ff:72:1d:f1:42:b4:02:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
        Validity
            Not Before: May 17 14:00:05 2024 GMT
            Not After : May 18 14:00:05 2024 GMT
        Subject: CN=71fbd4a2cda41e0ed5037d3f40da0fb1a6471c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:0f:dc:a7:39:24:68:ae:ae:9c:d6:5d:a9:
                    38:47:c5:bf:ea:45:42:04:32:90:7c:f2:55:3e:a4:
                    58:8d:21:19:38:98:54:49:1a:7f:a1:19:23:d6:c4:
                    6d:a6:9e:c0:8c:70:b2:6a:52:82:43:46:3c:48:3c:
                    7e:1e:f9:40:7e:f8:94:a2:be:79:f4:26:ea:82:02:
                    23:c8:45:e8:64:34:c7:87:1b:bb:b8:c1:f3:9e:c4:
                    e0:7d:8e:1c:f6:15:73:10:34:10:80:56:f0:5c:3d:
                    10:01:96:a8:09:cc:27:60:03:3e:5a:0a:9f:b2:e5:
                    49:05:74:c4:f0:3e:5b:c1:dc:f6:44:52:4f:79:76:
                    d7:5d:dd:a2:b4:64:61:a8:bd:e9:77:d3:64:aa:0c:
                    92:fd:a4:df:cf:ef:70:69:0b:a3:00:57:18:f3:b6:
                    e7:e2:8d:7d:34:c2:c7:15:32:8e:a3:e1:95:bf:57:
                    74:d2:a5:eb:29:73:07:58:11:8c:fc:db:eb:83:57:
                    70:07:e3:4f:f6:7d:fb:30:62:54:03:0e:26:6a:88:
                    a5:50:d4:8c:9e:f4:51:a5:68:aa:82:53:56:e7:ba:
                    e8:30:21:6e:ed:73:f1:2c:bf:0d:87:28:cd:76:e7:
                    3d:dd:bc:be:13:ae:e0:a6:8f:be:a0:e1:65:89:39:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:D4:A2:CD:A4:1E:0E:D5:03:7D:3F:40:DA:0F:B1:A6:47:1C:7D
            X509v3 Authority Key Identifier:
                keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:95:9e:f2:7f:a0:a3:60:78:ad:cd:75:77:c7:d0:6a:b1:6c:
         4f:4e:69:85:02:99:2c:77:b4:60:d2:b0:96:10:a4:c8:37:98:
         fd:cc:eb:2e:f0:5a:00:09:b4:9f:b2:d3:ba:89:2e:d2:d6:1b:
         8a:ae:26:4a:df:aa:e9:ba:d9:cc:03:e5:43:5c:52:90:68:de:
         a3:9e:27:00:26:5d:30:a4:6d:18:8b:31:a1:cc:ca:5a:97:22:
         1d:77:0b:b9:44:73:32:14:f7:45:dd:6b:ec:6c:1e:92:6d:76:
         a6:b4:e9:3c:48:b5:8b:32:43:b8:45:56:08:27:22:4f:dd:56:
         bd:a6:cc:a5:e9:59:4d:5e:1f:75:1b:ca:08:89:24:55:a5:43:
         b1:f7:ce:61:e5:45:d3:df:f1:0b:10:4e:a7:6b:bb:4d:58:30:
         8a:e9:7d:a3:7a:15:db:8b:9e:60:03:fd:28:9f:63:a0:e6:f3:
         fb:5f:7f:7a:a4:b7:b0:5b:3e:47:f9:5f:46:f6:c4:ec:aa:b5:
         62:03:a7:51:b5:39:b8:35:0a:31:5d:fe:d5:3d:94:ff:68:dc:
         49:98:f8:1b:02:e0:9c:cc:9c:73:57:f7:b9:95:65:d5:e6:e6:
         f9:e1:a4:44:44:64:d2:f7:c7:7a:26:eb:64:88:6b:8b:8b:1a:
         92:c4:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:21 2024 by rpki-client on console-fra.rpki-client.org