Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File:                     ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier:          ChtqIX066D5B7LtPwG0adsTDTJj5ulCRV6b8kpHIqvQ=
Subject key identifier:   AF:76:C0:3B:24:48:49:8F:5C:DB:18:87:CF:B7:5C:5B:F4:2B:C3:81
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer:       /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial:       018F83D98985D2B7D46CC8C9E290E438DF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 00:00:22 +0000
Manifest this update:     Fri 17 May 2024 00:00:22 +0000
Manifest next update:     Sat 18 May 2024 00:00:22 +0000
Files and hashes:         1: AAU8Jn6aqtLPvqj80LsSnTR98LE.roa (hash: w9mVzXN+0ZN393kOgRVS1fF6qRZwjFwyzIp82z4G+z8=)
                          2: TeQH5FQ5OUD3EvIeT8L0xbVqnFs.roa (hash: P4PIYRHAwUalvP0OqKaCgrZ9KH/4pVEfXmJuQ065VH4=)
                          3: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: x5yKu75jDxyoC1N2MhLRe9c2468tjhNmvmmfyTIEEQ4=)
                          4: l9-jCuCHJFmx0sVoEipqCzRZF6A.roa (hash: eja9+9CQxxZv39ZOxqsGUrnH/XDsNrr+USqPJMCzRDU=)
                          5: sJV1Yq2y3q70JWktFlE_RKmffZM.roa (hash: uoQ4D1/x96jD+bERttR8DmK+6fsmqD30ReLCI4dpkjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:89:85:d2:b7:d4:6c:c8:c9:e2:90:e4:38:df:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
        Validity
            Not Before: May 17 00:00:22 2024 GMT
            Not After : May 18 00:00:22 2024 GMT
        Subject: CN=af76c03b2448498f5cdb1887cfb75c5bf42bc381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:96:80:e6:66:98:de:49:75:2c:55:31:8a:
                    bf:33:a5:e1:ff:4f:85:d2:e8:bd:17:a7:fd:80:51:
                    02:43:61:68:2c:e7:12:bc:bd:01:30:e0:eb:20:77:
                    83:ca:e1:71:95:90:1f:f0:ad:73:4a:6b:8b:93:bc:
                    bd:4c:04:54:32:ca:ff:c9:49:d8:92:d6:bf:9f:4e:
                    53:e6:aa:66:18:be:f5:d8:55:10:8b:e6:1b:42:74:
                    77:34:32:d8:57:3b:15:28:ce:17:d5:fa:d1:ab:55:
                    1a:83:98:d4:0d:c9:09:47:8f:57:7a:24:9c:a3:d7:
                    1b:07:d1:a0:51:ce:d6:3d:2f:5e:63:37:74:90:26:
                    8f:cd:46:4d:ba:8e:81:93:9d:7a:31:c6:86:72:08:
                    3a:01:40:20:4e:9c:83:6d:06:1b:2b:02:56:47:de:
                    12:03:43:bb:33:9a:a1:ed:8b:8b:68:70:41:15:ee:
                    ae:f0:48:b1:cf:0c:b3:50:fc:d7:31:2c:0b:cc:0e:
                    7e:8d:8f:79:06:45:47:bd:dc:c2:2e:47:cd:92:a0:
                    8b:e0:46:db:0c:a6:ad:b9:f9:7c:1b:6d:ef:a7:a8:
                    b5:39:f4:e2:bb:af:93:c7:c9:7b:0f:88:d1:4f:f3:
                    df:da:8a:87:3f:c3:62:c2:31:13:5c:29:12:f1:70:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:76:C0:3B:24:48:49:8F:5C:DB:18:87:CF:B7:5C:5B:F4:2B:C3:81
            X509v3 Authority Key Identifier:
                keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:47:20:c9:e4:05:8d:80:54:39:62:75:00:5d:3f:31:e5:40:
         21:88:a8:7a:3a:3c:d6:c9:58:f5:9a:c4:d6:f9:11:64:3f:57:
         ff:80:5f:46:48:a5:93:32:b0:e3:fb:5a:e8:10:20:4b:f6:a9:
         cc:f1:bf:28:bb:41:1c:0c:03:a5:2e:0b:e2:16:d7:5d:ff:df:
         67:fe:a6:12:44:0c:78:a7:66:b7:d8:7a:c2:fc:1c:36:bf:8c:
         68:33:41:0f:00:cb:07:74:1c:01:c0:41:5e:0b:23:e8:15:54:
         67:16:e2:1c:88:76:ae:a3:0b:f2:c2:36:84:af:ad:96:f3:a1:
         2f:02:99:a1:8e:18:2b:16:06:a4:af:ad:ab:7f:a7:fe:75:3f:
         c9:9c:c0:34:34:84:e8:ca:a0:10:a9:32:eb:52:95:5d:98:9e:
         a4:89:a7:b9:3b:c8:13:66:54:79:15:6f:31:0f:fa:8b:75:c6:
         ba:cf:e3:07:5f:49:6e:17:07:8e:5a:94:09:12:db:cf:36:df:
         c8:d3:be:d7:af:14:7b:03:c1:fa:59:3e:35:1f:a0:a5:ee:b9:
         8f:88:e5:a9:23:ec:53:71:b6:42:2e:8b:d0:d8:fc:d0:a2:37:
         49:5b:11:aa:10:ce:b1:cf:38:4c:d4:5b:bd:87:2c:db:88:21:
         72:95:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:29:54 2024 by rpki-client on console-fra.rpki-client.org