Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File:                     Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier:          Hw4iJMdjjWT+Ibnp4lmOd5bhf5PmJNjYRrjLUcL0eTU=
Subject key identifier:   C1:6B:9B:E1:BA:70:DA:12:D1:26:8B:01:14:F6:74:4E:8C:4D:7F:FC
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer:       /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial:       018F874AEE444C39D1ECA501FDEB5BABC8F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 16:03:05 +0000
Manifest this update:     Fri 17 May 2024 16:03:05 +0000
Manifest next update:     Sat 18 May 2024 16:03:05 +0000
Files and hashes:         1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: 1r6+Y1HT1fzkRR4P950URowmRL7pwCCgm5aWa9hb2M8=)
                          2: nII3pZwQDU7j1fij2uYYFJylgMk.roa (hash: cwmNAtyDJwjgsjaTPG6eEoLJLHxYgkQ6MZBYpvCELZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ee:44:4c:39:d1:ec:a5:01:fd:eb:5b:ab:c8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
        Validity
            Not Before: May 17 16:03:05 2024 GMT
            Not After : May 18 16:03:05 2024 GMT
        Subject: CN=c16b9be1ba70da12d1268b0114f6744e8c4d7ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:72:a1:f5:49:c2:24:af:87:6c:b1:eb:9a:da:
                    2f:72:cf:d0:b9:b6:22:35:42:e9:74:c1:81:35:e9:
                    3f:c9:90:49:e5:6b:cf:9e:64:25:83:c5:db:ce:39:
                    17:4f:b3:a4:d0:b7:86:92:de:d4:51:75:2b:f7:e2:
                    ee:3e:06:e4:28:3c:54:16:56:76:4e:86:cd:c1:d6:
                    30:29:4f:c8:31:61:ba:b7:ba:53:6d:79:5d:a8:11:
                    4f:a9:6a:c1:cf:55:8a:3c:4e:97:be:05:58:bc:85:
                    26:2f:2f:7f:23:80:93:6b:d3:15:8c:21:f3:98:e7:
                    58:74:05:e9:9e:d7:b9:8d:6b:6b:2d:b2:ad:a8:ce:
                    e7:c3:07:a4:ee:59:8f:64:45:38:99:79:9a:88:d1:
                    16:5b:aa:37:c2:58:47:56:9b:67:55:6f:45:6c:c1:
                    16:09:a2:0d:37:ac:a8:26:9f:18:2b:e5:7d:a8:39:
                    df:2d:a3:75:66:6e:62:6c:03:2b:e7:e6:e0:a6:8e:
                    14:c9:b1:f4:b1:05:9f:e8:c7:c9:48:47:22:74:91:
                    9f:f5:b3:1a:5c:af:45:a7:b6:c3:e4:56:e7:e0:a5:
                    a0:f8:53:a6:51:d0:4f:26:9d:87:e7:8c:5a:4f:c2:
                    6b:25:39:c5:70:b2:3c:ac:95:15:69:59:ba:97:92:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6B:9B:E1:BA:70:DA:12:D1:26:8B:01:14:F6:74:4E:8C:4D:7F:FC
            X509v3 Authority Key Identifier:
                keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c8:1b:05:48:86:b3:5e:99:50:f9:63:df:3a:36:a0:de:35:
         61:61:ce:39:0c:57:69:c8:ae:9c:50:3b:1f:36:0a:7d:78:9f:
         1b:4d:30:d0:a0:af:32:4c:b9:9d:61:27:58:ac:c7:b3:6e:7e:
         fc:7f:1c:2e:2e:8c:70:5e:20:a4:8c:49:a7:46:57:e6:b2:9e:
         15:50:7d:50:b7:16:7b:93:86:bf:5c:73:a0:c3:cf:7b:07:30:
         7c:83:3b:59:28:80:a1:ab:43:a8:2b:d6:2d:a0:8c:de:9b:18:
         d6:4e:cf:88:0c:87:6e:20:b1:32:ef:88:92:69:3d:c7:30:8e:
         c2:76:87:e3:3b:c0:d4:b8:ed:77:db:9f:00:ad:c0:5e:35:33:
         36:81:6d:3f:f1:38:aa:26:cc:28:f4:64:cb:9b:b1:63:19:30:
         2a:55:10:bc:77:d4:e2:3b:3e:66:1a:de:0a:5c:79:5b:df:fb:
         10:f2:5a:9a:0c:7b:d9:37:6a:f0:55:13:62:d7:d7:c1:c4:ba:
         43:1a:15:1a:69:fb:2c:56:2a:4a:c0:be:90:a5:57:28:a5:0c:
         0c:0b:db:16:ee:ef:6c:99:99:02:93:7a:cb:fa:38:38:82:3c:
         03:66:09:16:56:15:26:8b:d7:c6:69:b8:2e:54:a7:7e:f4:dd:
         70:f6:e2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:35:22 2024 by rpki-client on console-fra.rpki-client.org