Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File:                     aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier:          qjRuWW30bYlG63QXGIvK3hl1cxaLau5MkU2ac3ON6CU=
Subject key identifier:   84:32:1C:B5:54:C2:29:FE:1F:6B:39:AB:23:04:99:56:6C:C5:48:A2
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer:       /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial:       018F94CE0F77CF0868E4E0D12C7DE0087DF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number:          117F
Signing time:             Mon 20 May 2024 07:01:23 +0000
Manifest this update:     Mon 20 May 2024 07:01:23 +0000
Manifest next update:     Tue 21 May 2024 07:01:23 +0000
Files and hashes:         1: VLcjwnjffB8wBheQHQjOT-Cu9v8.roa (hash: Y8BLBVpc2wHhnZWtFXpRHoAi0h/5LkA4V3cVx2W2GqA=)
                          2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: r9iNbqrjS/l7h6LnBYD3hYqAxdbuA0WFXfC49atyy0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:ce:0f:77:cf:08:68:e4:e0:d1:2c:7d:e0:08:7d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
        Validity
            Not Before: May 20 07:01:23 2024 GMT
            Not After : May 21 07:01:23 2024 GMT
        Subject: CN=84321cb554c229fe1f6b39ab230499566cc548a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:64:e3:39:c4:1e:7f:f5:a2:9f:d4:c1:1c:
                    a1:1a:ac:c8:4a:68:62:21:62:74:67:34:d1:05:6d:
                    05:ee:62:9f:18:7e:db:94:55:1b:60:ff:20:10:d6:
                    9f:ab:a6:66:32:79:27:27:dd:d4:39:35:5e:f5:46:
                    9c:64:d7:31:75:8a:d9:2d:4a:9f:b1:bc:1d:37:cd:
                    2b:ac:56:2c:01:c1:17:fc:25:78:d8:2b:ae:89:35:
                    05:f8:a1:a6:0d:a2:bf:af:a7:47:0c:95:7b:ab:8c:
                    49:f7:7e:57:90:06:9c:31:49:ec:ff:ab:a8:44:16:
                    17:3e:cc:91:ec:bc:f5:68:24:8f:c2:2c:af:44:ae:
                    65:62:c0:44:49:91:36:1d:a4:a8:31:a6:26:65:d1:
                    8c:90:f5:ff:05:4a:69:34:cd:1d:07:c6:7c:0e:cd:
                    09:24:7f:45:6d:48:b2:c1:ab:66:be:5e:b2:65:83:
                    25:d0:fb:59:a1:a9:9c:71:31:83:db:91:3c:f6:2a:
                    39:60:01:9b:dc:5d:0c:75:24:ac:77:d0:d8:b7:58:
                    5d:0f:9f:f9:53:09:f1:52:2f:86:2c:6b:97:c8:f0:
                    2e:61:08:d2:bd:fc:fe:86:b3:29:a9:9b:07:ef:ac:
                    70:a3:85:03:59:75:a5:18:85:36:40:fd:13:ee:06:
                    ad:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:32:1C:B5:54:C2:29:FE:1F:6B:39:AB:23:04:99:56:6C:C5:48:A2
            X509v3 Authority Key Identifier:
                keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:93:10:cb:54:b8:99:06:32:c2:d4:9e:59:38:f3:9d:22:d1:
         69:72:af:26:1b:09:b3:ba:9c:1b:63:e2:72:e6:a2:8d:13:12:
         55:cf:28:fb:f0:b3:68:b9:16:ed:30:d7:10:aa:32:66:24:2b:
         2c:05:23:df:21:74:e3:c4:7d:2b:35:ca:a0:a4:cf:76:d0:ee:
         4c:8c:1b:3b:f5:d7:7e:55:d0:42:cf:d9:4d:c7:87:6a:69:db:
         d1:98:cf:a1:13:70:2c:59:8d:a3:f9:eb:db:98:90:48:f6:12:
         c3:de:b3:24:f0:6f:7a:a1:fb:42:ac:17:b2:50:2a:76:2e:0e:
         45:4e:d0:cb:b3:ba:61:5b:a8:54:73:f0:b3:73:9b:72:44:b7:
         b6:7b:69:a2:16:5b:3b:0d:43:0c:5c:34:d5:37:2f:a8:76:96:
         0c:96:68:b7:87:be:bb:b2:7b:65:6b:03:fc:62:d5:57:57:97:
         b2:9c:ac:94:62:33:7d:ea:29:44:c0:4d:c6:e9:d3:8e:4c:96:
         0f:28:5d:92:57:84:15:f5:8b:85:9b:3d:42:6e:41:65:ed:02:
         d9:78:35:2a:56:e7:07:57:07:0b:a6:67:16:87:4a:4b:2a:1d:
         cc:ea:da:79:ca:94:26:64:84:9a:53:b8:cc:a2:68:68:db:e9:
         ce:4e:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 10:13:51 2024 by rpki-client on console-fra.rpki-client.org