Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.mft
File:                     k38Sq69hOXP-swc9jOY38bAMv6k.mft (raw, json)
Hash identifier:          6j03XNejxeT6gx2fWuhg7sTyfmEqGUasICYplZpHB2Q=
Subject key identifier:   CE:7E:07:8C:BE:0C:15:47:98:A2:78:AC:3E:8B:F4:12:CC:95:1A:D4
Authority key identifier: 93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
Certificate issuer:       /CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Certificate serial:       018F841098848F3B3D33CF0BB523EEC24A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 01:00:31 +0000
Manifest this update:     Fri 17 May 2024 01:00:31 +0000
Manifest next update:     Sat 18 May 2024 01:00:31 +0000
Files and hashes:         1: KhxHEzHaThoochQrhW_7S5zJowc.roa (hash: Fy356FrwVsBLkaM4zzsVZu/fh7Tv4g4qFoPpDFpXUoc=)
                          2: N5g44QOoebNREjKnwSHpqhvhxoM.roa (hash: CB/KJ7fZrazS4ND5uLCnquGpcRc2GWM4snco/CMqDKo=)
                          3: k38Sq69hOXP-swc9jOY38bAMv6k.crl (hash: jpc+SnZvFDndsD4PTzkw25PMtebUE8+X94EwIeHWhkc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:98:84:8f:3b:3d:33:cf:0b:b5:23:ee:c2:4a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
        Validity
            Not Before: May 17 01:00:31 2024 GMT
            Not After : May 18 01:00:31 2024 GMT
        Subject: CN=ce7e078cbe0c154798a278ac3e8bf412cc951ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:00:26:52:bb:ae:cf:d4:2e:48:5a:1d:ab:a0:
                    27:9e:67:32:29:88:c3:93:df:6b:e9:18:04:0c:01:
                    fc:7d:3e:c6:a5:ae:ca:48:1f:20:36:cb:4b:3d:8a:
                    2b:d9:38:fe:da:b7:bd:b3:d9:ab:fa:ad:cd:21:36:
                    c5:c8:df:c2:12:9e:89:19:fd:46:5b:ec:58:ec:fe:
                    a6:3e:5a:f0:c7:99:c8:fc:fb:fb:37:6b:7c:a4:20:
                    b3:5f:65:4b:36:35:3f:13:77:14:33:24:75:13:f0:
                    c7:01:4a:cd:01:57:1a:76:4a:4d:c9:a7:0a:e1:37:
                    aa:76:e8:6e:9a:92:47:fd:7d:e5:fd:8b:a6:45:d1:
                    33:a2:16:eb:cd:42:6a:e2:1c:73:51:07:ba:c2:2e:
                    42:b2:7d:9e:8f:bc:8d:55:b5:6e:93:58:8c:a9:f9:
                    b8:a2:7b:a8:f8:f0:62:2a:2b:e5:96:39:c8:c5:ff:
                    e5:13:e1:d2:f9:fb:03:e9:dc:fe:2d:b0:60:5c:92:
                    8c:16:56:b3:4e:32:fe:1a:23:74:dd:11:b9:3c:30:
                    80:49:66:bf:28:1c:6a:3f:77:dd:02:49:d8:83:8a:
                    b5:7c:e9:d6:85:89:27:1b:ea:c2:7b:7c:28:03:fc:
                    39:84:ea:20:2f:c2:67:40:54:8e:88:d2:33:11:68:
                    6f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7E:07:8C:BE:0C:15:47:98:A2:78:AC:3E:8B:F4:12:CC:95:1A:D4
            X509v3 Authority Key Identifier:
                keyid:93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c0:c6:bb:56:c3:f2:96:0a:60:8f:c4:a6:6b:45:c6:b3:8a:
         69:d0:70:f0:ac:c1:58:dd:3f:48:35:80:c2:55:ca:ea:2d:5b:
         0e:b9:6a:2c:36:05:da:9c:41:48:ac:fe:c7:33:60:32:c8:e2:
         51:f4:d0:41:49:1d:f6:6c:13:3e:8f:52:30:d6:3a:d5:59:19:
         da:80:5b:aa:72:c1:90:03:bc:77:39:98:41:78:3d:91:06:ca:
         e1:b2:f9:67:89:31:81:40:c1:b4:75:5a:2d:3e:d0:55:4c:6d:
         eb:37:8e:27:cf:ac:c5:f2:45:b8:6a:57:11:8d:c4:b5:1a:df:
         bb:17:01:5e:90:e4:63:ea:32:2b:4e:3b:44:16:ee:4f:6e:c7:
         3b:ec:4b:ae:01:48:83:8e:bd:7a:ca:e5:4c:f6:02:bf:73:d6:
         18:8f:30:03:27:b5:e6:00:7a:d9:8f:68:d5:65:e1:55:20:f0:
         ff:a9:53:11:db:2d:3e:19:76:b6:f3:1d:0c:53:65:45:4b:44:
         08:f2:8a:7f:a8:10:13:86:33:d1:6b:b7:7f:c4:89:20:19:f4:
         69:80:fa:a0:35:91:60:40:87:1e:a1:57:f8:55:f5:ad:fb:fd:
         11:e3:50:7b:94:ae:b4:ed:de:e3:ef:7d:e8:4b:16:3b:c6:68:
         d9:86:81:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:54:44 2024 by rpki-client on console-ams.rpki-client.org