Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File:                     koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier:          pOjBCmmJQSFDDY3Xz1DYHRGdDFBtUTJW6C9k/Qf96gc=
Subject key identifier:   C0:7E:F6:88:55:93:48:AE:CB:D2:98:D5:03:62:0B:0E:46:D3:04:FF
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer:       /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial:       018F885B29EA1D95E2F58C29816A29368622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 21:00:26 +0000
Manifest this update:     Fri 17 May 2024 21:00:26 +0000
Manifest next update:     Sat 18 May 2024 21:00:26 +0000
Files and hashes:         1: QOvI-aPjyBYHDsXiNNA1Huh3oo4.roa (hash: ckgU1+HuLWudEmEFVpgG2rQHbph4ywnNyAzoIk/yUY8=)
                          2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: te6JKF5UeUTL0+osiB+7bTSjoiM+D3tJQZ2sBWET8bA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:29:ea:1d:95:e2:f5:8c:29:81:6a:29:36:86:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
        Validity
            Not Before: May 17 21:00:26 2024 GMT
            Not After : May 18 21:00:26 2024 GMT
        Subject: CN=c07ef688559348aecbd298d503620b0e46d304ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:10:3f:94:d6:e1:8e:82:3a:24:a5:01:7d:
                    f3:5e:26:36:48:3d:d5:8a:9e:70:7c:f2:6b:1d:77:
                    99:4c:d3:98:58:a0:d7:63:2b:04:a5:93:66:e3:50:
                    7d:89:58:49:77:b3:83:49:99:4e:d1:b7:c8:07:1a:
                    38:a4:ec:4a:b8:af:37:77:f0:09:a5:c5:3a:48:a8:
                    e4:b4:5f:a7:9b:d3:c2:f3:ec:08:91:91:4a:38:67:
                    a2:e9:0b:2f:43:0b:52:9c:bd:37:05:72:fb:dc:49:
                    86:83:a8:d0:e4:6e:c6:e5:5e:3d:f4:da:f4:2b:2c:
                    94:bf:c6:9f:1c:63:59:63:f6:b9:75:44:0e:91:b3:
                    7d:3d:f6:a0:5c:2b:96:7d:27:f8:7b:a3:23:e5:9b:
                    74:6c:12:19:90:a8:b3:b7:8f:29:7e:c5:32:cf:5d:
                    11:cc:76:8e:8d:19:c9:75:26:39:95:a5:da:4a:b7:
                    34:7b:b3:09:77:d9:a8:99:fd:9a:10:8f:98:ef:e4:
                    f9:42:ff:d7:70:9c:aa:28:c3:99:e1:ba:53:be:43:
                    22:3f:4c:6f:07:73:b5:8a:74:cb:d8:75:88:2b:bd:
                    57:87:9b:73:52:f0:a4:77:e8:06:c6:17:d4:22:d3:
                    06:99:82:2c:69:06:44:38:06:ef:a7:54:95:c5:c0:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7E:F6:88:55:93:48:AE:CB:D2:98:D5:03:62:0B:0E:46:D3:04:FF
            X509v3 Authority Key Identifier:
                keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:3e:7d:11:2d:30:9f:51:39:47:c7:41:00:22:ea:87:27:7e:
         aa:90:8d:ff:75:ba:0b:47:9b:be:aa:1e:84:b9:85:83:2f:f9:
         bc:ea:cb:af:d4:c5:76:13:2d:13:ef:3e:1f:a0:9c:3d:97:2f:
         ee:68:98:81:cc:0f:64:cc:94:89:42:fe:c2:16:63:c8:91:20:
         b3:14:4d:4a:97:5d:26:02:51:3f:f0:a0:05:5a:51:ec:c7:81:
         d9:c1:b5:94:37:0e:b3:cd:55:ba:40:07:0f:e2:77:8f:2a:7d:
         67:17:b7:7c:23:a9:7d:9d:74:7d:1d:a9:df:34:2e:95:b9:41:
         dc:3b:0c:eb:25:cd:d8:0f:35:3b:38:23:96:ff:18:a8:a6:75:
         17:26:be:c6:76:57:d2:19:6a:78:ac:00:36:93:78:e1:05:fc:
         b0:9e:05:03:8d:63:10:b0:2c:55:ae:f6:98:17:58:12:b8:c0:
         53:50:16:14:32:4b:50:67:ad:79:19:e9:c1:c3:d8:d5:5f:e5:
         7b:eb:2c:31:2d:14:33:ec:80:f0:3f:31:e8:7c:20:73:55:22:
         c1:d9:c6:a3:e3:09:ba:b4:90:94:39:f0:36:b2:15:ac:69:46:
         73:28:fa:ba:0c:bd:04:14:71:5c:e7:5f:55:e0:6b:94:ba:d1:
         e3:22:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:35 2024 by rpki-client on console-fra.rpki-client.org