Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File:                     tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier:          m92T7daj5opbDPmiNnG5tfjQp7M7YlG6AvZyuVAFoWo=
Subject key identifier:   76:DC:A8:09:22:C3:47:86:D8:64:74:41:8E:D3:BC:CF:DC:DB:BE:44
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer:       /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial:       018F8891FDAAFBA5F4BE8269833B4A8C9F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 22:00:19 +0000
Manifest this update:     Fri 17 May 2024 22:00:19 +0000
Manifest next update:     Sat 18 May 2024 22:00:19 +0000
Files and hashes:         1: QIgkonbYLvtZRLlFpSZzUhjokKY.roa (hash: D441YNc8p0FXzRIy7y83NRdv4AekmEtu4a1SEnoE1X8=)
                          2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: syXpV7RfaGIu5t5dtjLLVPpo1CKzCbdpEz6uBEodd88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:fd:aa:fb:a5:f4:be:82:69:83:3b:4a:8c:9f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
        Validity
            Not Before: May 17 22:00:19 2024 GMT
            Not After : May 18 22:00:19 2024 GMT
        Subject: CN=76dca80922c34786d86474418ed3bccfdcdbbe44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b9:47:04:aa:6d:54:81:24:96:76:41:d7:0b:
                    35:47:1e:4e:4e:d0:db:32:8e:bd:65:bb:a2:cb:ac:
                    76:51:aa:00:ed:ff:9b:67:29:f8:09:97:56:8c:04:
                    a2:58:de:38:c9:b5:8a:4c:ae:0b:ff:f4:b8:37:7f:
                    75:72:51:7e:12:62:d1:ab:29:a9:62:bf:3b:f6:41:
                    d2:c9:31:07:71:2f:a0:30:77:33:a6:20:7b:11:15:
                    c8:f4:8e:c6:37:af:19:7b:04:c1:82:8d:75:0e:25:
                    bc:2d:bb:07:e0:56:37:e4:11:84:98:02:7a:45:e6:
                    43:28:b5:ca:9d:73:e2:5d:88:89:32:8c:6e:ab:41:
                    12:7d:6b:fa:47:31:5e:14:95:b1:63:1e:fb:fa:0c:
                    04:98:bd:8e:8a:61:8b:2f:0d:d1:d0:88:76:2d:50:
                    82:b8:ab:24:b0:f9:a3:02:43:23:09:43:ce:4c:a7:
                    cc:a6:86:13:65:5e:85:16:30:d4:39:35:79:2e:98:
                    9c:df:00:68:9f:a4:c8:f4:ab:5f:77:de:c6:f5:ff:
                    40:02:9c:33:01:e2:af:78:2b:54:1b:cc:e0:4c:df:
                    93:a2:64:d1:f0:5e:4c:96:5b:84:dc:02:13:27:5d:
                    31:83:c0:db:3a:3a:30:35:c5:46:67:40:1f:95:99:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DC:A8:09:22:C3:47:86:D8:64:74:41:8E:D3:BC:CF:DC:DB:BE:44
            X509v3 Authority Key Identifier:
                keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:d2:c9:98:7e:ef:92:60:8c:fb:a1:36:38:af:76:22:80:
         95:cb:ad:c5:f3:d0:a5:a5:3d:db:42:a0:a9:3b:de:19:2e:56:
         b0:54:18:c9:6d:15:37:84:47:a4:97:a9:29:6a:44:9f:59:ca:
         07:b6:2f:29:d2:bd:5f:3d:ec:d9:28:44:66:65:53:48:36:49:
         86:b0:7a:2c:84:7e:e4:85:a1:b3:34:78:64:73:2f:ae:8e:b6:
         32:1c:d1:dc:ab:a9:7c:35:2b:46:a2:d4:15:20:f2:13:cd:5a:
         84:9c:82:16:ee:48:00:6c:69:95:80:33:44:ff:4e:50:89:43:
         dc:6e:88:27:34:42:98:48:d1:ec:3a:ef:2b:33:96:9d:44:f9:
         88:77:41:6c:42:5f:7b:a6:ce:97:91:c3:1f:4a:bf:c6:20:c8:
         e2:f6:ff:83:02:44:f2:07:53:41:b8:8b:ee:82:e1:aa:5c:de:
         c9:10:4b:7b:01:c9:6d:da:d4:da:61:c7:3d:41:e7:6f:2e:de:
         de:a6:ee:a0:df:fe:8c:b1:54:69:c6:54:f2:9c:36:c5:e5:6a:
         61:9e:c0:63:d6:43:77:05:47:23:fd:d0:98:8f:70:e8:16:25:
         68:24:07:96:52:03:6a:e0:2d:0f:e3:79:c1:eb:14:e6:12:bd:
         ac:f6:e3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:38:05 2024 by rpki-client on console-ams.rpki-client.org