Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File:                     bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier:          03fI0U6K8Y2o5SZZRpThhXr48lFD2DiEH6p2yIP1wpU=
Subject key identifier:   57:D0:E6:90:B8:CC:89:53:60:F3:B8:4F:50:E8:1B:1F:38:2F:CD:62
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer:       /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial:       018F86362D72A40E0AB9AE15A7D046C26409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 11:00:48 +0000
Manifest this update:     Fri 17 May 2024 11:00:48 +0000
Manifest next update:     Sat 18 May 2024 11:00:48 +0000
Files and hashes:         1: 8CDzPF6jtn0v7SaODFvxfdma1Y8.roa (hash: GTieZebXWt7dHvWiCXQTJ48uqFHmsN0x/FCuOyn1b2Q=)
                          2: Bjp9AN-101v7GM51BOcJGxjGIh8.roa (hash: hFvxzsz4oYq14KKlsJs0TSRf8V5EWc22gkn/9dzhp0E=)
                          3: KLwfRGbQZxq-WoxKGjF_vRazhzI.roa (hash: A5fpzi4vC+Z/GViPuCTz3/4C2pZw+yTbcXjzjDJig58=)
                          4: L9xj_s4MQ6Zawr24puH7Xp0O4So.roa (hash: m0PwmCiweKcKgkPU4MCM24lltQAAGVYP4XuwkErZF5I=)
                          5: _cg19903bZU6vhFVDLYGYBLW4L4.roa (hash: 448dZLB02NFnGA4FsUGEQ+q5+OCKCf79vQC5TYR6cC8=)
                          6: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: itjsDWgJeoqOzSMK0zmVkNrKXzlQHa6OyJeQPP6l/t8=)
                          7: hpdJaj7vjuTDrvwsRnh2pWCvlUM.roa (hash: UqCiIGm3lqfZIxlMxJMdZMuIeeF/zyBddNGTAqs0nvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:2d:72:a4:0e:0a:b9:ae:15:a7:d0:46:c2:64:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
        Validity
            Not Before: May 17 11:00:48 2024 GMT
            Not After : May 18 11:00:48 2024 GMT
        Subject: CN=57d0e690b8cc895360f3b84f50e81b1f382fcd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:5a:60:36:27:03:51:8d:6d:4a:61:8d:f3:
                    75:be:b0:c4:f8:7c:a6:63:30:b0:95:a1:b5:25:61:
                    0d:b8:f2:aa:72:db:5b:58:53:89:fa:13:9c:d2:0d:
                    8b:af:0c:91:6c:d9:7a:3f:d0:46:1c:c3:b3:4b:ee:
                    e7:2b:0b:9c:73:6a:93:8f:19:21:4d:56:6e:a1:da:
                    eb:4e:ae:e0:dc:b0:69:1b:f7:0f:dc:2f:f0:0d:a1:
                    26:68:d1:d1:67:ae:4f:f1:93:d3:f6:91:2e:b6:73:
                    4f:38:7c:66:f3:88:20:7a:ba:f4:17:64:7b:56:64:
                    23:84:da:45:30:2e:42:a4:74:64:c5:fa:48:4e:7b:
                    4d:e5:64:0b:f2:9d:c2:81:b7:19:03:f7:a0:01:b1:
                    f7:2b:51:67:80:4f:b8:12:c1:c0:1e:69:67:cc:07:
                    f2:61:1c:da:a2:5c:a0:c0:d2:ee:b8:9b:05:30:21:
                    21:a4:0c:eb:9e:d8:e0:c7:27:47:39:66:20:36:39:
                    91:56:05:e8:57:bf:e8:f2:64:ec:c0:2d:e4:23:2c:
                    21:62:81:67:3f:14:20:9e:a9:bd:0f:f9:c0:78:9f:
                    cf:dd:4d:b0:e8:69:29:ca:ff:2a:ab:a0:7a:ad:01:
                    7c:6c:96:d9:6b:ac:8d:55:75:d8:38:02:b3:13:2e:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D0:E6:90:B8:CC:89:53:60:F3:B8:4F:50:E8:1B:1F:38:2F:CD:62
            X509v3 Authority Key Identifier:
                keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c7:d7:88:45:a3:63:ca:09:cf:03:58:81:58:17:ec:f2:76:
         87:7a:5c:2f:ab:68:66:d2:2d:86:2b:cd:de:27:35:5d:28:d9:
         db:d8:99:7d:0f:22:5a:2b:42:53:24:b9:60:d0:6f:a8:3b:f3:
         b6:9f:ff:4b:0f:06:3f:68:85:da:e3:00:d2:53:62:75:1b:0a:
         4e:8d:1a:61:37:6b:38:b1:90:92:92:56:8a:c7:85:05:a1:82:
         bc:3a:e3:80:61:b7:66:cc:50:d1:14:7a:7a:d9:49:58:c9:8b:
         91:55:4c:38:c5:ca:fe:13:ed:f4:59:27:bf:60:3e:9f:f7:c8:
         bd:b5:ff:ff:ef:ad:de:e3:1f:22:41:99:1f:13:d1:f1:c0:6e:
         c9:f3:dc:ca:70:8f:1e:e9:0a:05:2a:6a:d0:27:10:d5:a8:4d:
         6a:09:35:e9:3a:43:29:d0:43:62:80:64:80:24:1c:e1:22:2f:
         8e:0b:50:e5:27:88:67:fe:ec:0b:4b:a7:be:2e:07:97:f1:d9:
         e4:f0:13:ab:00:e6:f1:52:07:a5:f9:5c:0e:0b:c6:5d:0d:2b:
         ae:31:8a:30:fe:56:b0:5e:1c:2a:e5:ac:2f:0e:5e:a8:df:bd:
         c2:9f:90:4f:b6:5e:9e:1b:9c:b6:83:e1:4e:34:96:fa:ab:0a:
         aa:48:a9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:10 2024 by rpki-client on console-fra.rpki-client.org