Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File:                     jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier:          nvtKggd9moO1i/4v6+xW8f8fzuVOGeEwAwBV4u5mZgg=
Subject key identifier:   9F:E5:09:D0:A8:92:19:14:CC:D3:BB:45:55:50:DC:D6:3D:2C:A4:D3
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       018F874898AEB722D0D53E83B90C03254545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:00:32 +0000
Manifest this update:     Fri 17 May 2024 16:00:32 +0000
Manifest next update:     Sat 18 May 2024 16:00:32 +0000
Files and hashes:         1: 5iuIoZCzvZZQfQqhdJRfyO5Y0Ok.roa (hash: k/hyZPS5vqXSZeFYZYvLSk8Rp6GBrOA39N3xoEljDnE=)
                          2: 73tdHyT9nfniQxf43yegCOxjXw8.roa (hash: ha3F1FcuD9hQXZrtex+NbL6uWx8G/5Ry2SBhRonGKaE=)
                          3: F6rykQHfWJ8H_dHUuSOZ9MJut9M.roa (hash: zNeaMUxHNhmSp3NY9PPZkWRcu9LYouvsB+Dvlz4H1Fs=)
                          4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: 3r+kRP8KWG3NlTW8cQsSRiJCXETMq2K3Y6FNS+SoLQk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:98:ae:b7:22:d0:d5:3e:83:b9:0c:03:25:45:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: May 17 16:00:32 2024 GMT
            Not After : May 18 16:00:32 2024 GMT
        Subject: CN=9fe509d0a8921914ccd3bb455550dcd63d2ca4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:b3:6f:18:ed:17:76:3c:16:73:e0:4f:2d:
                    88:bc:a7:19:a1:ab:41:5c:f7:08:55:c2:06:89:8c:
                    54:ec:d8:a0:c7:f5:1d:e3:3c:ff:1f:ed:0e:f4:cb:
                    9d:f6:01:3e:6a:8d:9c:ef:8c:7e:f2:51:e2:ac:95:
                    f8:31:37:be:ff:22:39:bd:5e:58:d3:7d:ec:9d:b2:
                    2a:d3:cd:89:59:bd:74:51:9b:e4:9f:60:ab:54:ed:
                    0b:ac:76:18:1c:99:43:35:01:74:ef:b0:6d:42:71:
                    67:b7:1c:13:ca:76:c7:f6:48:a5:17:a3:e8:da:32:
                    62:ad:7a:97:dd:9d:fc:a7:e3:bc:83:1f:d6:5b:97:
                    c8:4c:9f:b2:d9:70:76:d9:70:44:81:24:35:90:cf:
                    3e:43:43:e2:f1:a5:98:3c:3f:51:79:e3:13:42:d1:
                    28:2a:7a:a2:a2:a2:c2:87:22:2a:88:db:44:dd:48:
                    48:d8:29:4e:71:a5:32:1e:86:0e:02:5b:ef:1f:e1:
                    f1:55:94:ad:10:66:91:7a:a3:18:ef:70:33:8a:37:
                    dc:76:e2:52:8b:92:90:69:08:68:8c:20:be:2e:1b:
                    7d:92:ae:96:be:dd:a2:d8:39:b6:20:38:ac:e1:21:
                    bf:05:a5:92:d9:f8:f3:d3:5f:c3:da:4e:a9:bd:56:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E5:09:D0:A8:92:19:14:CC:D3:BB:45:55:50:DC:D6:3D:2C:A4:D3
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:56:7e:80:44:67:7f:f5:b2:36:60:9a:1b:02:36:d4:f2:9a:
         f5:ab:2d:54:98:34:46:5c:0e:79:42:a7:db:fd:63:9a:58:44:
         b7:ae:74:89:79:5c:26:4a:41:fb:9c:ea:31:48:0e:cd:ca:41:
         08:57:72:13:9d:32:69:b2:6c:7f:ea:c9:0f:59:89:c3:bd:d6:
         02:62:9a:6f:2f:07:74:b2:5e:72:ca:f2:5b:5e:12:1b:c8:02:
         db:5e:7f:50:37:8f:80:f2:f2:e4:77:dd:b3:6d:5f:76:24:4a:
         43:81:ab:1b:64:fa:e4:44:3e:a8:32:ab:7f:4f:56:2a:c1:19:
         4c:04:5d:06:ab:ed:30:48:e2:db:97:bd:43:b0:8b:e8:86:8c:
         8d:b1:09:d6:79:ce:7e:b9:30:92:09:a3:7d:b0:06:7b:77:61:
         c9:33:55:ea:be:7f:2d:8f:20:bf:41:00:7f:42:98:45:18:77:
         9b:34:68:89:b7:74:ab:1d:8b:4a:25:87:e2:0f:cd:97:d5:21:
         95:36:b5:54:8f:3c:f8:2f:3b:5d:dd:c6:4e:07:37:22:3e:60:
         5e:12:13:2f:72:d5:d2:e2:88:6a:ec:37:10:f2:f6:27:16:f9:
         0a:84:74:73:f0:6a:f1:9c:98:4d:45:f4:7e:e3:dc:86:1a:8d:
         39:27:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:15:17 2024 by rpki-client on console-fra.rpki-client.org