Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
File:                     tDgLm4wHBFftVLxF0S3d0kTgbVI.mft (raw, json)
Hash identifier:          P7RE4HcAoYByNBGWbJZGtPJZV+gWx5H62XxatiUiGgo=
Subject key identifier:   C9:16:D9:20:D0:6A:FA:40:D1:CD:67:91:19:53:09:F5:2A:8E:B1:1D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       018F5D3AAEDB13DEF0095A54FA8347AD33FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
Manifest number:          116D
Signing time:             Thu 09 May 2024 12:01:17 +0000
Manifest this update:     Thu 09 May 2024 12:01:17 +0000
Manifest next update:     Fri 10 May 2024 12:01:17 +0000
Files and hashes:         1: GiKL1IE_mUkkfOyepajyr3t4SN0.roa (hash: QtPIMjDDUb1CO2pdZnn64xAaHg8IZiwD9eqbZd0AaEo=)
                          2: KJGSO_Jbi9ni4NOw9fv7oVHU0lw.roa (hash: Cnkf5BP8PoSOYvrbLpJW+Q1TwYdlx+FxqtmsAfvNXlU=)
                          3: YS5JfFX_lOPAi05W_5SpwD5X1Kw.roa (hash: RBIFbvx2yrmr5UKXLDemCQhe54g51v2jUVTLtstu+VU=)
                          4: tDgLm4wHBFftVLxF0S3d0kTgbVI.crl (hash: sctNIYL8AVa6dfSdSkg4ZSjTXBLe1rAMUWCtsRj4LH4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5d:3a:ae:db:13:de:f0:09:5a:54:fa:83:47:ad:33:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: May  9 12:01:17 2024 GMT
            Not After : May 10 12:01:17 2024 GMT
        Subject: CN=c916d920d06afa40d1cd6791195309f52a8eb11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:f4:36:10:3c:c7:a8:7e:e1:9f:0c:e4:70:
                    a8:30:f4:18:2b:ee:08:c8:bd:6c:55:f9:57:c6:88:
                    c4:53:39:0a:c2:1f:ae:cf:27:70:26:04:ba:cd:0a:
                    f2:e2:0a:2d:5c:17:b4:11:25:ea:a5:aa:19:0d:54:
                    9b:25:90:25:26:6a:dc:68:e2:29:08:60:e6:f8:e3:
                    df:d4:d8:85:07:32:c3:7b:c8:cd:66:72:e9:cd:c4:
                    06:97:76:d5:0b:a1:eb:64:a6:ed:1d:46:6e:6c:78:
                    40:4d:f3:de:15:88:b7:9f:ba:36:0d:d2:35:95:d0:
                    72:b4:58:e2:9e:df:58:6c:44:2f:80:10:25:04:69:
                    06:31:62:bc:45:75:28:09:fd:36:ce:fa:d5:a6:c9:
                    c3:f7:55:b4:68:14:14:e5:20:ed:a7:70:8f:3e:2b:
                    d4:ac:39:52:68:34:c9:5b:d6:90:76:55:2e:3b:ac:
                    d8:2d:24:c9:3e:3e:c7:44:78:6e:2d:f0:15:7a:50:
                    92:e8:05:1e:1e:ae:c1:23:58:47:4e:e2:6d:2a:0a:
                    9b:92:5d:d1:f3:a1:38:28:d9:e1:1d:a1:7b:aa:e9:
                    7f:4f:0f:c9:f1:6a:92:82:88:b6:84:b6:43:85:14:
                    a9:b0:16:ef:09:73:2d:29:18:1e:ef:2e:21:6e:f0:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:16:D9:20:D0:6A:FA:40:D1:CD:67:91:19:53:09:F5:2A:8E:B1:1D
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:29:cf:78:64:ee:91:17:92:da:eb:89:89:a7:e7:e4:93:71:
         e9:4c:be:56:59:d9:eb:63:91:f1:15:2b:4c:db:bb:75:cd:e8:
         ea:46:4d:48:d3:78:4f:d7:60:ab:68:11:22:2d:01:65:0c:62:
         06:46:aa:5b:f8:36:86:f6:0e:6f:4d:cf:b3:54:e0:3f:a6:f8:
         d9:b9:36:eb:38:c9:c8:d1:aa:31:1c:53:ee:68:76:7e:77:7b:
         b2:55:8f:95:58:27:eb:21:c5:a3:b0:36:4e:db:6a:07:6a:05:
         99:a5:4e:66:c2:e6:bf:46:61:7d:23:da:67:3d:ab:75:34:90:
         e8:19:43:ad:66:33:1b:e0:56:5a:35:9d:e0:93:f4:b6:41:17:
         4b:a5:b5:02:84:d9:2f:f3:4c:db:ae:3a:f0:39:47:20:06:5f:
         0e:18:86:19:a8:8d:25:08:b8:6f:0b:68:72:f0:11:d2:b6:c8:
         63:d7:53:27:84:a0:d5:a7:a0:43:c0:43:dc:b7:2e:63:9a:ef:
         26:ac:c3:52:c1:98:75:b8:fe:4d:0f:fb:45:9e:56:86:93:a0:
         2b:57:e7:f8:91:b8:04:8f:4a:b2:04:b1:6a:b8:a2:f0:e1:80:
         f3:92:3a:c3:82:bd:c0:94:60:70:1b:ab:b5:12:16:e2:b2:74:
         4a:1f:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 17:14:20 2024 by rpki-client on console-fra.rpki-client.org