Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File:                     ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier:          2E/Rz+SG1bbyUN/GbkMnk4Vqj/KoLtW8jhGxNXLfFfM=
Subject key identifier:   77:69:C8:4E:07:91:81:47:A6:17:86:57:2A:3A:9C:2C:C9:50:9F:ED
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer:       /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial:       018F874AA74A897D76E0CDAEBDC400B182AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:02:47 +0000
Manifest this update:     Fri 17 May 2024 16:02:47 +0000
Manifest next update:     Sat 18 May 2024 16:02:47 +0000
Files and hashes:         1: bDvh1ILjTKTQZrxe6LzmavKyf0I.roa (hash: V3PFbM4ooaMCIuidN/SRn8a0M6KLI+73WzYKwcqcTVw=)
                          2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: ghmq34Y2Frjrdfv1vf7t4n/kBQ4HFHY2FKErIhc4vSQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:a7:4a:89:7d:76:e0:cd:ae:bd:c4:00:b1:82:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
        Validity
            Not Before: May 17 16:02:47 2024 GMT
            Not After : May 18 16:02:47 2024 GMT
        Subject: CN=7769c84e07918147a61786572a3a9c2cc9509fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:ad:2c:43:7d:00:c2:31:aa:d1:1b:89:14:
                    0a:6f:4d:2a:cf:e3:e9:a2:24:4f:ee:00:93:65:a7:
                    f2:2e:66:02:4a:c1:0e:ea:2e:fd:a2:7c:7c:a5:e1:
                    0c:de:18:32:f8:69:8c:c0:2c:e7:45:63:d7:47:fa:
                    d8:3c:74:5d:d6:2e:37:5d:7a:05:62:93:e3:19:7e:
                    3b:14:77:a8:99:d5:f2:04:7b:66:f5:a0:c0:bc:04:
                    6d:4f:66:30:02:6a:d6:39:8d:e4:bb:69:c6:06:00:
                    9d:6e:25:66:7f:29:74:2f:79:6b:56:8e:71:64:31:
                    b3:f1:ac:30:67:1e:fb:65:e3:b9:89:4b:a8:97:d9:
                    6d:67:d0:45:48:2e:0d:b4:11:b0:54:07:83:ae:4a:
                    8e:1d:5a:85:cb:c3:c7:6a:fb:ca:e1:4f:9c:76:2d:
                    6b:3b:bc:b3:f3:65:3a:cd:a8:e1:c9:96:d6:24:a0:
                    5a:9d:22:33:ff:2b:87:b8:c2:49:3f:95:d1:16:ac:
                    ec:42:bf:c8:75:6c:74:1e:5e:66:8f:08:83:79:34:
                    34:cc:50:3f:80:bc:e0:24:22:96:ef:4b:c8:08:88:
                    8f:6d:42:94:61:06:6b:17:45:39:a0:a5:87:c9:05:
                    a2:68:86:6c:00:c3:ee:37:21:b8:9a:13:5b:f5:07:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:69:C8:4E:07:91:81:47:A6:17:86:57:2A:3A:9C:2C:C9:50:9F:ED
            X509v3 Authority Key Identifier:
                keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:47:48:ab:d0:b3:eb:4f:7e:f9:23:20:10:66:a3:d7:20:32:
         53:52:59:9d:d2:b3:3b:5d:a2:45:5f:07:af:8c:33:9c:ab:32:
         a9:01:61:5b:c6:73:5a:e2:57:aa:54:06:50:bf:5e:37:1d:4e:
         e8:b1:9d:27:1e:7e:28:37:3a:1d:03:3c:2f:c0:c0:77:9f:6a:
         4c:f6:75:79:7e:e1:71:ee:d0:d5:ca:8b:c9:81:e5:b0:a4:af:
         8d:ea:d3:15:0c:99:d2:6c:9e:18:a3:a1:60:3d:fa:e3:d7:84:
         cc:74:d4:5a:ef:a2:c9:64:72:c6:31:80:37:2a:0f:9f:65:05:
         91:80:83:1b:8b:e3:7e:98:32:20:a1:5b:44:15:d2:8a:c2:2c:
         75:b8:52:b3:c5:2c:fa:d6:20:cf:83:fc:72:42:43:fb:da:b4:
         10:10:97:e4:5e:55:39:8f:88:2f:db:fb:b8:7f:c4:1c:af:69:
         12:fd:6c:de:e1:af:b3:61:7d:6c:ef:3a:b0:64:bd:7f:03:3c:
         89:e8:b7:96:ed:c5:aa:08:47:cc:1a:4b:44:a2:c7:03:27:d0:
         21:81:2d:54:0b:24:11:f1:21:34:cc:3b:5c:ad:59:0e:3d:cd:
         ee:b0:e3:6d:e9:d8:aa:6c:c6:15:3f:53:70:5b:5b:df:a6:92:
         8d:5f:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:13:38 2024 by rpki-client on console-fra.rpki-client.org