Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File:                     X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier:          KPy8aydPuQLhMMwJo/KmTbyYi/Kma7YlBKsReWIGgcU=
Subject key identifier:   30:35:BD:45:EE:6E:20:73:47:46:20:2A:5E:D9:89:A4:E3:81:07:66
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer:       /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial:       018F8749F652E7B833AA8A16C5857363805C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number:          117C
Signing time:             Fri 17 May 2024 16:02:02 +0000
Manifest this update:     Fri 17 May 2024 16:02:02 +0000
Manifest next update:     Sat 18 May 2024 16:02:02 +0000
Files and hashes:         1: H4s92AgEMFapmq2_EcpG162UaRA.roa (hash: N5EIuGKLBpuaHolKW7mhQMMdbKcIISodwbkMAHbTrto=)
                          2: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: zWKqOH3ZnYvpxKQ5ewKlC1sRRWS58NRVKECuQbqxXgU=)
                          3: fL7GRVfIeN3aWxjOa5jSMPtqgpE.roa (hash: Vd+InEHcsIFunMxDvAGLFtuBT2Y+3ALxz2mFplphBKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:f6:52:e7:b8:33:aa:8a:16:c5:85:73:63:80:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
        Validity
            Not Before: May 17 16:02:02 2024 GMT
            Not After : May 18 16:02:02 2024 GMT
        Subject: CN=3035bd45ee6e20734746202a5ed989a4e3810766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:fc:62:ee:5c:5b:b8:85:90:15:c5:30:e9:
                    52:00:c9:5e:9b:b8:cb:9f:ec:5b:da:c5:6b:61:f2:
                    56:67:bc:13:86:30:2e:53:de:42:c0:70:03:81:9d:
                    a6:e2:5e:f7:a0:6e:f4:ee:81:97:b9:81:f4:5a:a0:
                    20:17:1c:32:50:da:e2:1e:4c:38:63:51:0a:2a:7e:
                    a4:a7:ec:2d:47:a4:fa:9e:9b:3c:b7:4c:6c:d7:9c:
                    f2:0e:da:4a:a2:6e:57:1e:31:e5:6f:c0:59:a7:78:
                    22:c6:b2:3e:4f:1f:08:3b:6e:76:d7:2f:ae:42:92:
                    a2:b4:8c:d2:81:7f:2f:fd:a7:c9:2c:bb:ca:ec:a2:
                    1b:00:7a:df:a5:d4:15:70:fc:3a:39:80:01:8d:68:
                    2e:df:b6:ca:ef:dc:d0:b9:31:5a:49:53:65:d5:a4:
                    88:17:e1:b9:5c:b4:fe:4b:fb:14:d9:e7:48:fb:f1:
                    c3:00:92:d4:cc:3f:de:db:26:09:29:ef:25:96:ae:
                    60:8a:03:00:be:dd:25:74:e7:c6:2e:d4:cd:ce:7e:
                    88:54:87:7d:55:b0:08:d3:3e:b8:d5:ac:6a:69:f5:
                    fa:9d:31:73:62:3f:93:dd:36:b4:be:5c:cd:0f:28:
                    ae:fa:3e:4d:aa:59:de:37:13:3e:31:ae:11:b7:5e:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:35:BD:45:EE:6E:20:73:47:46:20:2A:5E:D9:89:A4:E3:81:07:66
            X509v3 Authority Key Identifier:
                keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:65:42:01:9b:90:e5:8d:25:e6:58:9d:2c:fa:66:c2:e6:88:
         01:5c:94:1e:da:1e:06:49:a7:28:c1:93:a8:8d:57:7a:36:24:
         83:17:31:68:d3:4f:6f:3a:84:af:bb:f3:b6:d0:d1:3a:ac:a7:
         2c:a6:ba:fe:73:c5:da:7c:e6:d0:45:e1:6a:65:b7:15:f6:91:
         90:c6:c4:aa:41:dc:ee:f2:8a:5f:2e:d0:05:3e:6c:5c:de:c0:
         51:57:fc:38:79:f6:23:03:61:5f:18:48:f6:11:00:f2:01:04:
         7d:95:84:52:07:92:a5:79:b4:77:7f:b0:b4:17:cc:7e:1d:dc:
         2a:38:b4:3a:4c:69:81:a8:fe:89:06:3b:d1:55:f6:2b:85:c4:
         48:c4:e3:d3:ac:59:d0:0c:dd:f0:38:cb:29:2d:9a:eb:c5:39:
         d3:0f:9d:1e:ac:ee:65:a1:a2:63:3f:d7:be:7b:0a:cc:a3:79:
         9f:1e:e3:ee:e4:50:44:17:57:27:5c:23:07:1e:61:04:48:a9:
         f8:bf:f0:a3:25:a3:4c:24:f9:4e:a3:a9:da:0d:dd:68:a6:41:
         b3:51:bd:11:35:ee:e5:41:7a:50:31:f8:bb:5d:28:3f:2a:b3:
         68:61:bb:55:55:64:62:b0:49:66:26:89:8c:89:c7:ed:28:7b:
         4e:0a:89:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:21:31 2024 by rpki-client on console-fra.rpki-client.org