Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File:                     itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier:          LtqFos7y0oNIc9QJQM8KZQjvAF+kotfCpIuGuMz0Gbo=
Subject key identifier:   2E:26:54:B9:24:74:2D:D3:54:3B:A2:99:79:F1:70:B8:8F:5F:ED:A5
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer:       /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial:       018F87B66384963084D5C9BDC132929D4EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 18:00:28 +0000
Manifest this update:     Fri 17 May 2024 18:00:28 +0000
Manifest next update:     Sat 18 May 2024 18:00:28 +0000
Files and hashes:         1: 3MkDY0aFxj7VhO51KvSTxi2ni0U.roa (hash: rUydzb5hrO0MZtleoC6a3fJHZqvyiy/SgymoAi4FdNk=)
                          2: NcO6vwcGcnUOC_AQrU4yrvcsXuM.roa (hash: G12dtw8ij8oZW1o733If35WiBNNjwMZGrHhFhkxJ4SY=)
                          3: Y6CBwhR5AQ0CgIm4JI_wsdmXaYY.roa (hash: KdjuSFBdA9E0WIP7XR5i29Nra94J96wGQ8vUFDrNW30=)
                          4: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: 8G/0pi4RxUwph0+rhwdX9MBYOD8RBqmCysJcLF8KgGM=)
                          5: o-4rXRZ67pAoeqLbbraT5mnstBw.roa (hash: OrqbzixmUqjIbtHkVE8GhiJV4FqL2Gj5rLfW8f9XPt0=)
                          6: vhiEaaZnD8hummHHODA5upYkb18.roa (hash: ZrnpjCyIxwXhU25XaIXx1jLtGvY95XDV9iNHdrWlnFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:63:84:96:30:84:d5:c9:bd:c1:32:92:9d:4e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
        Validity
            Not Before: May 17 18:00:28 2024 GMT
            Not After : May 18 18:00:28 2024 GMT
        Subject: CN=2e2654b924742dd3543ba29979f170b88f5feda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:89:5b:f8:2e:0b:6b:b6:1f:8c:71:93:d8:
                    72:d3:b7:da:03:47:c4:63:e9:4d:21:6f:6f:7a:bc:
                    10:8a:75:a4:be:47:78:0d:d0:04:7e:78:91:88:a4:
                    c9:d4:99:c3:66:37:b0:b4:9d:3a:fc:95:a2:22:6e:
                    08:cc:fe:ab:c1:00:3c:80:b8:f4:56:3f:0b:f2:e8:
                    ba:69:1d:cf:6f:46:55:54:fe:a6:68:60:a8:67:39:
                    00:ef:1c:87:f1:7b:91:22:e1:6a:0f:29:de:d5:83:
                    ba:fc:dd:3f:c3:4d:48:5d:f0:c4:8e:43:02:98:04:
                    f7:ec:39:da:87:a2:23:bb:84:af:ff:af:52:c5:87:
                    6f:55:9f:69:3f:3b:d6:27:49:f4:07:06:33:de:79:
                    ed:8e:19:7d:33:4c:ab:99:22:e0:dc:c0:4f:9b:de:
                    23:29:3e:55:50:c2:b4:35:0f:d2:65:22:9c:71:b1:
                    7f:41:da:03:a4:d2:74:e4:61:8e:7f:d8:14:4c:77:
                    83:ef:89:fd:71:78:1a:3b:8f:51:bf:4d:71:44:5a:
                    64:3e:d8:2f:dd:58:3d:7f:97:71:b7:70:e8:d0:b8:
                    78:19:aa:f0:f5:ab:d1:45:45:8c:2c:f8:59:b7:c5:
                    62:38:56:ad:c4:52:cc:49:59:2e:28:02:1b:f7:ed:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:26:54:B9:24:74:2D:D3:54:3B:A2:99:79:F1:70:B8:8F:5F:ED:A5
            X509v3 Authority Key Identifier:
                keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b3:ea:ef:da:b1:67:34:9e:58:98:e9:8d:39:06:e2:7b:5b:
         b3:f7:f8:7d:7b:b8:5c:59:b9:a3:b7:23:ee:6b:ac:ec:65:50:
         ac:dd:c4:b1:c0:53:a2:2c:98:08:5b:ba:fe:2b:c8:03:93:dc:
         33:38:fd:54:9d:a7:ae:8f:ee:37:25:d0:9e:52:fe:41:c0:dd:
         3e:e9:8c:a4:33:1c:9e:8c:4b:46:62:f3:b4:24:0d:c1:63:60:
         a5:52:df:05:6b:68:72:b6:2d:6c:12:c0:8d:66:27:d5:06:ef:
         27:b2:24:89:6a:2f:13:2c:36:e4:f4:0b:67:e2:92:c5:88:d1:
         3a:64:a3:b4:c3:13:77:d3:33:16:db:f6:e0:31:57:d7:eb:78:
         95:c9:85:b4:c2:19:53:b3:f0:64:dc:2b:7b:73:31:2c:e7:ec:
         22:18:7c:d4:b3:cf:db:06:bd:51:e0:6a:d0:dd:d7:e5:75:9c:
         11:d7:cf:f1:9a:61:ef:8d:49:b2:30:ec:cd:0c:46:70:29:c1:
         79:e9:2a:87:86:bf:3b:d3:0b:ed:b4:bf:93:88:b9:27:98:ac:
         8a:4c:dc:9f:bc:a0:e2:65:24:b5:84:62:b4:de:37:ca:01:07:
         e5:04:7d:f8:f9:25:66:38:e5:fc:ed:83:92:17:e5:84:19:8c:
         36:70:11:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:30 2024 by rpki-client on console-ams.rpki-client.org