Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File:                     mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier:          qHg7rHry76kiW9BrAh2lWyeAqSd2cfIdxljqn69JbYo=
Subject key identifier:   A9:1B:EF:0A:73:F1:1D:AD:83:66:F3:C8:5A:55:A8:AE:AB:28:8C:BD
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer:       /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial:       018F33D0253A0361859B83A7D5AD5B545213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number:          116A
Signing time:             Wed 01 May 2024 11:00:30 +0000
Manifest this update:     Wed 01 May 2024 11:00:30 +0000
Manifest next update:     Thu 02 May 2024 11:00:30 +0000
Files and hashes:         1: 6F2eFGvD9097EIg4LB9CffrGO9o.roa (hash: G50yLixHsvPkj866UDZyGTk19dI1HJOeQtwYsy0L2BE=)
                          2: 7su_opjU7PCEUFSK0uE9e7W-n2M.roa (hash: IoCESA00y9FsowQdqIulDubQ+qOvvuYhQID6eWw4Mpw=)
                          3: D62Ed7ZWMGuNOSmvFeQ7zGhqhso.roa (hash: 19bPsS4jBZLdGkHhb/ZOmxjzGihc+etI1197+DV8rEI=)
                          4: GeQFwwE4I-D3o9pCZjHiMsiIzwE.roa (hash: wFeiHk0WR5zGrwhCjUZFkrb7KUYm8e1xADAIuLqMA6g=)
                          5: QgcxRY8GoUHLoMHw4HCRq6GfMmI.roa (hash: SVs6ehw/vc4hperSLoOGy+ykQHt4m5NwTttsWfltOyw=)
                          6: YMnqUNriuyHwDIFQ2C9-qRlCJR8.roa (hash: 7P6ibgHSOBZ2856ayilvwRq//XNJeWi8k+T7BYGGld4=)
                          7: ZOeX8DtQb4gdPZN_9RsxyCtz3ks.roa (hash: 7SoYzRc9Aj/Lc8d6vVuz/6cRVeQinq7G0nFfFTL33Bw=)
                          8: eOUtE0EhM6fZ9aC--qi9tC-6-Zs.roa (hash: S9ihQRwK3T8oYDoj9kyl+7k3L1/A/oC45HJDXKYXdbw=)
                          9: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: Fcup+Kz53s8rsbKvJO9BJ5iTTrITZohvWik2cAmqCqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 11:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:33:d0:25:3a:03:61:85:9b:83:a7:d5:ad:5b:54:52:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
        Validity
            Not Before: May  1 11:00:30 2024 GMT
            Not After : May  2 11:00:30 2024 GMT
        Subject: CN=a91bef0a73f11dad8366f3c85a55a8aeab288cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:c7:d8:74:7b:20:22:90:08:61:dd:6d:d9:
                    28:f2:a5:a4:d9:4f:03:62:a4:30:be:ea:55:ba:5d:
                    b4:00:cc:ca:2c:ce:c8:16:4d:21:46:8f:1c:59:29:
                    02:74:a6:ae:c7:23:1c:47:39:be:74:d6:31:a2:ff:
                    bf:b7:a4:14:95:45:e7:7c:82:d5:8a:8c:df:f3:15:
                    0d:58:a0:ce:5c:e8:93:2e:2b:08:68:30:ce:6a:bf:
                    55:43:50:8d:f4:df:93:0d:14:84:27:db:4f:a5:34:
                    d9:3b:2f:d8:3c:3a:ba:24:b0:d7:7d:24:2b:6a:1f:
                    14:d6:12:77:3b:ee:bd:b9:76:15:0a:b7:b5:c3:89:
                    dd:60:85:56:6d:dd:e0:35:05:cf:fe:f6:0c:2b:b4:
                    6c:a4:c8:df:f1:18:5c:c0:d8:4a:4f:bd:19:a8:ba:
                    12:be:6f:13:fc:a3:da:59:57:e6:64:87:d2:51:e7:
                    bb:ca:92:a9:3b:2b:fe:af:dd:49:85:b0:d2:27:b3:
                    21:9e:b5:6a:c5:15:51:03:0b:d3:6e:06:0a:70:f6:
                    b4:7f:f4:fa:2a:bc:15:cc:40:51:9a:7c:55:06:27:
                    f0:28:93:91:76:18:92:ac:fb:c1:7b:24:ef:2c:79:
                    ce:82:d6:b1:7e:13:69:5c:38:1c:ce:63:86:b3:5e:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1B:EF:0A:73:F1:1D:AD:83:66:F3:C8:5A:55:A8:AE:AB:28:8C:BD
            X509v3 Authority Key Identifier:
                keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:1a:08:7d:14:ed:6f:09:fb:7f:23:40:39:57:fe:ec:d6:
         43:aa:b3:3c:bc:31:30:06:47:30:16:35:a0:5d:c7:13:48:09:
         bb:d7:69:40:4a:ca:03:74:76:c4:30:d7:88:a7:7d:4f:00:0f:
         3a:84:6d:e0:47:19:41:54:25:67:81:d1:f1:48:62:1a:72:62:
         4c:00:8b:9d:21:b6:e5:ad:68:c4:98:05:49:e7:87:6b:91:16:
         aa:d8:4e:fa:33:ab:3f:e8:50:97:b3:6c:a9:6f:d4:d6:76:ac:
         10:3d:4f:74:25:a6:bf:58:77:5e:19:38:db:27:43:e7:9b:b1:
         e4:d8:73:7c:81:e1:50:ea:df:34:68:08:17:63:c6:05:29:f6:
         24:e3:f8:68:87:88:d0:27:26:03:0a:cc:ec:51:a9:de:df:5c:
         cc:42:e4:8c:ea:55:ad:34:8e:c5:91:e7:b3:e8:f5:50:58:6f:
         8d:87:cc:33:10:74:05:36:6f:59:a2:6f:11:06:59:60:c0:a0:
         b5:53:ee:d9:01:91:08:b1:42:41:41:c3:cb:ea:44:20:eb:6e:
         4a:5c:aa:63:6b:87:b1:9d:0f:7c:f0:85:4a:b7:96:37:07:f6:
         5c:8c:11:4e:9b:47:06:a0:23:01:a2:4d:be:9c:62:5c:8f:06:
         a3:bf:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:10:04 2024 by rpki-client on console-fra.rpki-client.org