Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File:                     njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier:          AaSLWQa8r/FJ/HZjrIGJkC1UvakKCsPRXUiETVcPpb4=
Subject key identifier:   4B:9F:09:7C:09:AD:29:E8:D4:24:66:2C:5C:A4:EE:B4:B8:68:96:54
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer:       /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial:       018F87ED3AB140B2B94BF0A4E78F8D9240E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 19:00:22 +0000
Manifest this update:     Fri 17 May 2024 19:00:22 +0000
Manifest next update:     Sat 18 May 2024 19:00:22 +0000
Files and hashes:         1: 4YHU0QW0iz7ZCn2aViR7gdX8Vx4.roa (hash: EXFolEfMopqkYE6VfCmkhnNqStqSPdAbRtR7KmwXYkw=)
                          2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: lZAlZkMHJ54hxDGmOh054SgaNTLWvuySVllEvxKkY14=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3a:b1:40:b2:b9:4b:f0:a4:e7:8f:8d:92:40:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
        Validity
            Not Before: May 17 19:00:22 2024 GMT
            Not After : May 18 19:00:22 2024 GMT
        Subject: CN=4b9f097c09ad29e8d424662c5ca4eeb4b8689654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:50:2b:e6:2e:84:e8:90:51:09:b7:9b:e9:
                    8d:02:5b:ed:f1:0f:a0:4a:9d:91:b2:bc:70:0f:15:
                    60:12:0a:58:6b:3d:79:a3:23:6b:39:03:8b:ae:0f:
                    ce:b0:3f:88:c4:a4:ad:15:88:d0:95:30:f6:cd:38:
                    f1:31:c3:00:a6:9d:9c:b4:cb:fe:07:77:3c:ba:25:
                    23:75:4e:de:bb:09:75:d8:1c:e0:4b:e1:b0:1d:2a:
                    fe:aa:20:b4:58:66:f2:ef:43:09:70:f4:aa:2a:87:
                    4d:21:14:28:63:32:ca:a4:fc:10:e5:b8:96:fc:e5:
                    95:08:aa:e7:0c:97:7c:91:58:70:23:a9:c7:a4:1c:
                    69:32:0c:91:27:35:55:e6:11:2e:17:8f:63:37:a4:
                    86:c2:1e:ce:31:72:c5:c6:59:f5:92:45:81:23:f6:
                    3a:3c:cf:ca:dc:bf:89:87:a3:36:1b:74:b9:5f:84:
                    86:11:9d:34:79:0f:bf:9b:32:98:fa:d1:6e:e6:c5:
                    70:cc:66:a4:2c:82:b3:3a:1d:d4:a7:25:39:ae:f5:
                    6e:16:cb:d2:c1:95:27:69:88:8d:34:95:e6:a4:ed:
                    8c:4a:64:cd:5b:ed:0f:6f:9c:90:63:9e:9f:ce:00:
                    c2:ec:7d:a3:4e:54:db:18:f6:a4:98:8c:2a:1d:0c:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9F:09:7C:09:AD:29:E8:D4:24:66:2C:5C:A4:EE:B4:B8:68:96:54
            X509v3 Authority Key Identifier:
                keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:53:40:6e:b5:37:18:29:cb:e0:a7:ff:b5:eb:6f:78:65:19:
         ce:2d:2c:b4:63:12:ff:73:4c:41:74:3e:39:b9:62:fc:64:96:
         23:12:e1:a6:22:b1:97:cb:4c:f5:b9:69:34:20:b0:49:49:0a:
         1b:c4:26:24:f8:65:63:a0:6d:bc:40:e7:ed:05:e5:ab:43:c6:
         72:87:b9:ad:27:f9:ea:2c:78:1f:34:69:ca:00:ca:46:df:36:
         65:c9:f1:c0:70:5f:bc:0b:46:2a:1b:80:69:d7:e8:9f:ce:ab:
         66:7f:04:10:97:bc:c2:52:5c:83:2b:f2:c2:37:7f:8b:9e:fb:
         d7:95:2b:5d:51:e6:32:02:d6:ed:f4:87:84:cf:9c:49:a9:81:
         ae:b7:ad:97:c1:3b:fe:c7:53:96:3a:94:ab:61:bf:7d:a6:4c:
         1b:47:10:c8:f0:64:c8:02:4d:8a:a5:99:da:91:af:0c:00:4c:
         ac:a4:35:5f:31:56:63:fd:b4:42:a9:5e:fd:04:5f:5c:cf:fe:
         38:3c:ec:2b:64:ba:ac:09:2d:31:a6:4b:aa:94:b3:8c:c4:3d:
         1f:7d:be:46:ab:9f:32:7a:d7:43:f4:fd:48:8a:43:9d:6a:f7:
         8f:e8:41:97:52:76:6f:a9:b0:cd:80:35:42:c0:a7:95:08:36:
         0e:5c:e0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:19:58 2024 by rpki-client on console-fra.rpki-client.org