Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File:                     P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier:          ceUvnIsMDZybAGhKUlgUJ1q/Up0BjCAiM+8JEWBoiEc=
Subject key identifier:   4A:CC:03:20:CC:C0:93:A8:AB:38:34:05:67:B1:1A:3A:72:CE:D8:40
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer:       /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial:       018F877F2BBA53492E27B941034B909C15BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number:          117A
Signing time:             Fri 17 May 2024 17:00:09 +0000
Manifest this update:     Fri 17 May 2024 17:00:09 +0000
Manifest next update:     Sat 18 May 2024 17:00:09 +0000
Files and hashes:         1: ElFa_oxzb5_af50DdsZaVlglBlQ.roa (hash: 6QwIVkmcyGaG7m+9c4Yiub6JPgqA5V7Tr5/Bh/JqIWE=)
                          2: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: TUVHVDBoiZdegPR6TBFPxScjHXMcsNYO7mGMoq8HPLY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:2b:ba:53:49:2e:27:b9:41:03:4b:90:9c:15:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
        Validity
            Not Before: May 17 17:00:09 2024 GMT
            Not After : May 18 17:00:09 2024 GMT
        Subject: CN=4acc0320ccc093a8ab38340567b11a3a72ced840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:c3:e8:88:5e:ff:25:03:40:34:20:94:dd:
                    dd:cf:00:fb:b5:9a:d8:75:af:56:c9:e0:7d:32:87:
                    5e:f2:48:29:15:65:b7:0f:91:50:3e:0d:d5:b4:18:
                    cd:50:8c:4f:3e:08:56:4a:1c:b5:5e:cc:06:26:a4:
                    89:a1:e8:d1:c1:0d:7f:ad:cb:f9:2a:4c:fe:76:69:
                    94:ef:e2:6a:ce:38:6b:5b:be:cc:34:fe:9e:ac:c2:
                    05:b3:e7:9e:e2:df:eb:ec:4c:c5:97:dd:3d:2f:a6:
                    1c:20:46:44:b2:ad:d4:9b:88:ae:27:0a:96:32:3d:
                    55:5b:47:86:f7:69:10:b0:1f:4a:95:35:af:70:d5:
                    ca:88:87:2d:dc:0b:c6:b9:e9:f6:34:4c:07:40:af:
                    a9:82:c6:95:3b:bf:85:27:8d:01:60:f1:f3:66:d6:
                    71:4d:f5:1b:f4:27:cf:52:fa:2d:e7:67:fc:48:7e:
                    9d:be:6a:d4:93:a4:b1:dc:51:fa:42:1c:f1:69:b2:
                    2e:97:c9:54:82:c0:06:43:42:b9:f7:ec:ba:5a:88:
                    a9:cb:9b:01:1c:21:d1:b7:18:7e:60:f7:10:60:fe:
                    2e:cb:e3:33:b3:e3:50:03:cb:35:64:0b:3f:0a:8a:
                    43:40:2e:5d:8c:5a:e7:c6:d4:16:a6:46:ad:cd:da:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CC:03:20:CC:C0:93:A8:AB:38:34:05:67:B1:1A:3A:72:CE:D8:40
            X509v3 Authority Key Identifier:
                keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e3:06:db:3b:c9:dc:89:30:aa:44:35:21:18:ab:a8:90:3f:
         b9:48:27:d3:7e:0d:73:e5:36:c5:cb:1a:89:6b:dc:05:d6:7f:
         62:ba:fe:51:43:86:65:8a:1d:4b:4c:1d:26:8c:f7:49:d5:1a:
         34:14:c3:d3:9b:2d:7a:c4:d7:a7:ec:13:0e:51:13:0c:2e:0d:
         d0:26:13:80:69:4b:56:c5:7f:a8:14:aa:6b:5f:db:b6:b6:c2:
         ec:23:09:c0:52:b6:e3:cb:bd:4f:21:fd:20:dd:04:c5:b5:7e:
         c3:98:11:9e:ed:b9:78:b1:11:83:d7:90:74:2b:51:40:16:9c:
         a5:c1:72:36:91:12:79:3d:fb:84:be:ba:02:97:43:18:74:14:
         f1:df:de:de:aa:4b:a9:dd:d3:c4:d6:02:a2:2b:3a:f9:f0:ab:
         2d:98:ee:c5:8b:0f:23:0b:47:fd:2a:25:36:40:a0:d0:88:39:
         83:ee:4a:21:e9:94:e6:ad:c5:4d:2e:7a:19:aa:31:eb:7a:4c:
         ec:42:34:a6:b9:b5:cf:2c:76:0d:7a:c7:c9:b1:1b:24:31:da:
         1e:6b:c2:ae:14:86:dc:4e:c9:42:cd:d9:46:bf:34:b7:44:c1:
         63:8e:d8:a0:43:d3:5e:c0:20:bf:80:4f:8d:30:f9:50:f2:2b:
         e6:48:9d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:45 2024 by rpki-client on console-ams.rpki-client.org