Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File:                     SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier:          wmr2yQrBPNW6PTeGmJioYKXXFPaVDau5HiwdYzqo4JE=
Subject key identifier:   EC:B5:7C:56:B5:F6:29:C5:18:67:89:ED:2E:33:2D:CE:10:59:25:73
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer:       /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial:       018F88920BF65A305A92A2CE35CEFDDF4FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 22:00:23 +0000
Manifest this update:     Fri 17 May 2024 22:00:23 +0000
Manifest next update:     Sat 18 May 2024 22:00:23 +0000
Files and hashes:         1: 9J-hVVMxPO-FlhvuCZ6xowBsK58.roa (hash: FWIHmjn0c1e5ckIQrgocJ2xOjbPgibtsdofcG9S2BkU=)
                          2: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: qv7OlRoTmpa6Ah2kQd12HpOfVuyRLYKpxW5jrguUbDc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:0b:f6:5a:30:5a:92:a2:ce:35:ce:fd:df:4f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
        Validity
            Not Before: May 17 22:00:23 2024 GMT
            Not After : May 18 22:00:23 2024 GMT
        Subject: CN=ecb57c56b5f629c5186789ed2e332dce10592573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:47:f7:90:c7:fd:1c:7e:91:56:ef:b2:40:
                    c4:e7:5a:04:25:97:eb:48:b3:70:29:de:20:d1:28:
                    b3:07:97:1d:9c:fb:40:92:7d:71:e9:c2:17:e8:03:
                    66:10:41:11:84:88:06:50:d4:85:17:f4:65:12:ab:
                    ba:ad:60:63:1d:f5:a6:7e:58:26:cf:7b:23:f8:5e:
                    89:6c:fa:b8:02:39:8f:5e:91:2c:ed:64:26:44:74:
                    fc:ed:e4:96:40:50:3c:d4:b0:b0:b5:b4:9b:4a:b2:
                    91:4f:fd:d8:ef:a3:49:82:75:9d:34:b1:2d:22:a4:
                    2b:d3:ae:f1:a8:d0:e9:4e:9a:3c:52:f1:f7:7d:88:
                    c6:7b:b4:61:82:41:a2:72:ac:3f:c2:b4:4d:09:4b:
                    a5:55:7d:a4:6a:19:50:55:89:c0:03:dc:df:65:b1:
                    56:0d:11:d8:09:23:cd:3e:b6:93:7d:91:99:27:74:
                    a3:69:09:41:08:43:ff:a1:a9:17:da:f7:8a:8a:d1:
                    3b:a1:79:87:e0:a7:6d:6e:dd:98:0d:31:b8:62:56:
                    9c:0e:0e:7a:87:44:04:18:90:9d:3a:c9:20:47:e9:
                    be:2e:c4:16:22:8e:90:bc:e3:a1:27:f8:64:a7:5a:
                    2c:db:52:b3:fb:a2:bc:24:2f:27:94:fe:e4:c3:9e:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B5:7C:56:B5:F6:29:C5:18:67:89:ED:2E:33:2D:CE:10:59:25:73
            X509v3 Authority Key Identifier:
                keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:45:04:41:57:90:27:d8:c1:a9:76:6d:07:13:43:95:17:27:
         ee:bd:74:c7:0a:7b:57:ae:b1:0c:aa:2c:12:e6:8b:83:be:3e:
         0a:81:ff:f4:92:53:6c:93:c8:ea:9e:4d:dc:8a:e6:f0:1d:1a:
         63:5c:51:1b:c0:e5:7a:d4:37:f5:af:18:6f:db:5c:0c:35:1b:
         e4:4f:28:4c:cb:76:3a:dd:da:15:4d:2a:b5:6b:44:c6:7a:a7:
         97:45:da:8e:89:ac:82:e6:b7:07:5e:f6:6f:bc:ab:6e:1d:3d:
         30:4c:ed:37:3f:4b:20:d6:b2:df:42:a5:d5:4d:d8:2b:9e:42:
         0a:94:26:81:e6:0a:19:3f:ea:42:9e:3f:9e:4b:9e:93:a7:be:
         7e:f1:ec:bf:39:ec:40:7e:fb:22:73:13:b5:a0:70:d1:62:f8:
         9e:eb:4e:9b:36:5a:6c:a3:d0:fe:b8:6b:1d:5c:ba:67:f3:5b:
         b0:8a:97:c7:29:8f:76:cf:5f:3c:04:98:5a:c3:83:5c:9f:1e:
         90:11:d8:56:a5:e3:66:bf:41:3b:b2:ee:da:cf:85:e0:d8:7d:
         1d:5e:03:a4:39:7f:8a:bc:b4:ee:d0:73:00:c4:d4:c4:f6:25:
         36:0a:6b:85:34:37:6c:c2:5d:d3:aa:c4:bb:0b:86:62:7d:b5:
         80:85:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:30:38 2024 by rpki-client on console-fra.rpki-client.org