Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File:                     rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier:          vRK5ipOaOMwFt+I8z3ak1BaP5tVZUSj1HRyxVYIA9Ws=
Subject key identifier:   D4:5F:5F:43:B9:25:8E:BA:18:65:B3:A9:D7:80:73:39:CD:63:39:70
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer:       /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial:       018F874935266CF2C1355E9859AFFB15F3B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:01:12 +0000
Manifest this update:     Fri 17 May 2024 16:01:12 +0000
Manifest next update:     Sat 18 May 2024 16:01:12 +0000
Files and hashes:         1: 7TJHC85CIV8tyox3k59tomJvvA0.roa (hash: VBtEJSEAHOxod5wyem4xokQgyq2vHo7Hnvmh7eLGwIM=)
                          2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: W+N9+3Wst8Ouje8V+iVDY3UEogxJoxaYKtXVIwvRaKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:35:26:6c:f2:c1:35:5e:98:59:af:fb:15:f3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
        Validity
            Not Before: May 17 16:01:12 2024 GMT
            Not After : May 18 16:01:12 2024 GMT
        Subject: CN=d45f5f43b9258eba1865b3a9d7807339cd633970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:7e:1b:8d:4e:2e:24:95:d2:a1:0d:3d:94:
                    4d:7a:a7:eb:58:1a:82:cc:ac:43:31:36:f6:0d:3e:
                    65:49:d6:05:5d:b7:93:ee:ee:c1:33:df:7b:e4:19:
                    5b:d6:5d:51:e3:1f:13:2e:62:4a:41:f4:ab:f9:70:
                    c6:e6:cb:fc:ee:da:f6:68:15:a9:66:75:e8:80:5c:
                    83:75:e8:1a:88:35:4a:38:20:dc:f4:46:4d:ba:fa:
                    c6:c4:c2:d5:15:e6:a8:34:99:3e:8f:64:1b:26:fe:
                    f5:c2:de:c8:bf:d2:46:19:e9:2d:22:31:c4:7c:f8:
                    47:c7:00:66:5d:57:79:f4:48:bd:a7:2e:16:7c:b8:
                    79:25:07:b3:07:b6:ba:62:e1:b0:f1:35:c5:1f:9f:
                    4a:9d:bd:b3:f1:d2:bf:bc:80:bc:8c:dc:73:60:35:
                    9d:d4:c0:05:c2:06:1d:ee:61:9a:20:ba:0d:ea:f6:
                    29:13:09:43:f2:f7:a3:ed:d0:08:c7:27:36:5b:bc:
                    54:4d:73:48:85:8f:42:e1:21:4f:d2:6f:1e:45:6d:
                    b9:20:85:6b:25:9e:4d:fd:3b:1a:b4:06:83:d3:22:
                    9a:e6:d4:e4:83:f1:6f:a6:38:f6:5e:61:69:ac:28:
                    8c:54:bd:fd:6d:84:e0:a8:df:30:7b:03:39:9e:6f:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5F:5F:43:B9:25:8E:BA:18:65:B3:A9:D7:80:73:39:CD:63:39:70
            X509v3 Authority Key Identifier:
                keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:34:12:f4:a9:2f:20:0d:06:9d:38:4a:2e:5d:c1:1b:f2:0e:
         7a:af:86:fb:29:f8:44:26:46:e7:c4:af:52:39:fe:a0:ad:19:
         f8:99:30:83:ec:c4:17:1e:9c:12:68:96:bd:2e:68:82:a9:ca:
         4d:96:be:d9:4a:d0:9c:a5:a7:08:5c:fb:2b:fa:16:46:b9:99:
         46:f7:2a:68:fc:7d:10:fb:c9:78:15:0b:ad:8e:9b:08:40:fa:
         7b:cf:64:0c:19:dd:57:fd:bd:cb:9a:71:a9:56:81:65:b1:5d:
         dd:5a:68:da:cc:56:cd:9d:14:a2:ab:fb:35:bc:2c:a5:31:c4:
         48:1d:72:54:a3:8e:e8:79:17:9e:38:cd:ee:7d:2d:af:05:3a:
         03:42:ff:08:38:1d:6e:72:a8:66:c7:8b:b4:da:3d:42:ad:6e:
         e7:05:7b:0e:cd:26:28:60:67:76:7c:b2:38:7b:26:0f:5c:dc:
         4a:57:90:62:4f:fe:09:af:f5:7c:27:84:01:87:65:fe:c6:b6:
         45:5d:af:d4:ca:2b:25:cf:a0:8f:f3:8d:bb:07:39:52:0f:3e:
         0c:93:a6:b8:59:48:1d:03:a6:61:06:70:c1:cf:03:a2:2f:32:
         16:05:41:14:80:d4:90:b8:59:9d:e6:31:d5:4c:97:f9:f1:b8:
         0c:80:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:19:00 2024 by rpki-client on console-fra.rpki-client.org