Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
File:                     aIPzR-OJH1c9-AFa1swzHM6wR2g.mft (raw, json)
Hash identifier:          tzRtADxA2T1xEByG7dlGlSyECxagHiw3rsAizTF8Gto=
Subject key identifier:   57:A6:23:78:C2:4A:46:3B:1E:0E:53:35:C3:30:D5:51:54:F5:4E:26
Authority key identifier: 68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68
Certificate issuer:       /CN=6883f347e3891f573df8015ad6cc331cceb04768
Certificate serial:       018F8748BF6734F8DBBBF05D3EFC178AAE9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
Manifest number:          0120
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: GJuyrZZf_HPzN7N95lUa8s9oTjY.roa (hash: fo3cDaP2aZd3/AhnDJ+r6qdRlYdcjKgCYqfairC2q/M=)
                          2: aIPzR-OJH1c9-AFa1swzHM6wR2g.crl (hash: k5DsM7+5AqWXzol2FrBQ5Okb6rhk3+C1zDLIoMjiKL8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bf:67:34:f8:db:bb:f0:5d:3e:fc:17:8a:ae:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6883f347e3891f573df8015ad6cc331cceb04768
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=57a62378c24a463b1e0e5335c330d55154f54e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:8c:3c:f2:f4:79:b2:67:d4:ef:fd:80:25:
                    80:db:ee:1c:f2:b3:b2:5b:43:c7:c8:cd:2f:4e:44:
                    ea:ea:c5:af:22:bd:b8:86:7a:81:93:d0:89:29:8c:
                    c1:d4:31:8d:56:01:98:79:c1:31:e7:70:1b:1d:fb:
                    2b:f9:dc:4e:4c:16:6f:50:18:9c:7e:01:6e:68:9b:
                    bf:b5:d8:17:f8:fe:06:23:c1:00:81:73:05:d5:ad:
                    56:53:b3:bb:e2:20:55:3e:08:6a:ce:a2:82:c1:60:
                    f5:66:cf:b6:54:ba:28:6e:bc:84:d0:2b:ed:44:dd:
                    71:e0:6b:47:0e:41:4c:c1:bf:af:1d:28:80:0a:9c:
                    9b:21:63:66:9b:1e:4d:ad:dc:c7:6f:e1:63:f3:17:
                    16:16:b0:32:31:e2:35:7d:29:78:ae:51:35:d1:04:
                    95:ef:d0:c7:26:65:2b:d0:01:33:da:5d:b0:4d:6e:
                    1c:65:ca:7a:dd:29:a4:64:d0:f3:8a:24:d3:a4:f9:
                    13:9b:a5:76:4d:8e:3d:1a:10:f8:3c:0e:e9:30:47:
                    f7:1f:e3:40:fa:43:22:78:81:44:99:c8:52:29:e5:
                    02:d6:84:23:0a:d7:2e:44:ad:be:ca:7c:a0:f6:14:
                    06:41:57:7a:0b:b0:af:83:1f:05:c0:bd:4b:12:ba:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:23:78:C2:4A:46:3B:1E:0E:53:35:C3:30:D5:51:54:F5:4E:26
            X509v3 Authority Key Identifier:
                keyid:68:83:F3:47:E3:89:1F:57:3D:F8:01:5A:D6:CC:33:1C:CE:B0:47:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIPzR-OJH1c9-AFa1swzHM6wR2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/618d33-dd92-4d91-b821-e850677cffb3/1/aIPzR-OJH1c9-AFa1swzHM6wR2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:19:98:b8:d5:5d:d2:87:ce:a6:30:4b:e1:32:5a:71:9b:
         09:58:24:30:b7:8e:ab:64:0c:1d:e1:ec:b1:8f:0c:46:da:da:
         a3:b1:90:fe:7b:d8:d2:ef:00:2d:7e:09:5d:d3:e8:a6:2a:b0:
         b1:20:f6:55:bb:42:79:54:4e:67:b1:f9:3b:19:a6:06:0f:60:
         9f:49:bd:8b:f3:7c:26:03:e8:56:a2:6f:e3:6f:55:9b:0a:bc:
         60:29:01:a3:a2:89:61:c6:18:99:93:f9:76:04:28:f7:6b:c7:
         ba:68:48:e2:44:53:c8:19:4f:29:b5:b5:df:9c:da:ba:f7:07:
         ac:6f:6b:a7:74:a9:8e:29:3f:9e:02:28:4a:c4:b6:e0:d6:b5:
         49:8d:27:fc:25:86:12:e8:a1:26:d0:7e:7f:45:cf:94:68:5f:
         0b:ce:4c:c5:05:bc:25:68:1d:67:55:9d:90:99:5c:95:17:7f:
         2a:6b:7e:91:ac:ad:97:de:b4:bb:bd:94:d0:65:0a:54:b2:03:
         34:dd:52:d6:05:13:e8:9e:8a:c8:76:41:1c:0f:10:bf:40:10:
         18:0e:a2:8d:73:79:9c:2a:e9:5e:4e:1c:6d:dd:66:82:1a:b0:
         05:1c:49:b9:75:82:a9:25:4f:b4:52:60:11:20:73:30:0a:28:
         d0:8e:b8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:34:53 2024 by rpki-client on console-fra.rpki-client.org