Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File:                     cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier:          M3Wdth9H8NTLVKvQPQTJbukzLAddtuJDZsnh5ao8jmM=
Subject key identifier:   46:68:35:A1:69:C8:A7:B2:18:E3:3E:F4:DA:52:C6:C3:86:62:A1:56
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer:       /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial:       018F84EBFC0116ADFA3132467972A10057D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number:          1182
Signing time:             Fri 17 May 2024 05:00:08 +0000
Manifest this update:     Fri 17 May 2024 05:00:08 +0000
Manifest next update:     Sat 18 May 2024 05:00:08 +0000
Files and hashes:         1: 1bmPhFmR4sfWFjy49SL0blkZWwA.roa (hash: 2OTOwkZBB90MA/hey/N7G/nYVVKJ8g11EihorNWXh9A=)
                          2: bxLloPXyVMMGrflbghAZqe15P68.roa (hash: lc+n1agsJ5y9fvUkR8qJ9eb+Udv9jgV5vmhXfECSFus=)
                          3: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: b6ccZrR0RTFw3PJsVUiHt/B9e71SvOU9S2/o9v9I4uU=)
                          4: nzec22EzcqL9VGzl4Xt0WSZ9jzE.roa (hash: odi+RHbjj2OUjgg/MTfMjSOKuQUCuLrd2agbDLUI+tQ=)
                          5: zdHaP3_9oJxpfOCsVWyleFmn5HA.roa (hash: kT92hzdVkM29zxngQYTbSaxqz5pMF8OxrTF+1o5q2pQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 05:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:eb:fc:01:16:ad:fa:31:32:46:79:72:a1:00:57:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
        Validity
            Not Before: May 17 05:00:08 2024 GMT
            Not After : May 18 05:00:08 2024 GMT
        Subject: CN=466835a169c8a7b218e33ef4da52c6c38662a156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:8c:53:95:71:c4:2e:12:17:3a:87:e8:a4:
                    58:52:11:01:cd:5a:c6:a5:5c:5e:59:36:86:f0:4a:
                    be:f5:90:ab:17:6c:20:44:37:85:7a:11:cc:e9:8c:
                    d7:a4:dc:65:1a:3b:ef:fa:7a:48:05:90:5a:19:b9:
                    5b:de:de:1a:98:16:de:2d:75:72:5b:df:a1:fe:1e:
                    b7:02:ba:7d:eb:cd:ed:47:c9:f0:2d:20:48:44:1a:
                    2d:e2:b0:98:0f:9d:e9:d9:07:95:be:1c:dd:d8:c5:
                    c5:15:71:b9:69:7c:5b:61:df:a3:9f:33:10:fa:04:
                    66:3d:4b:0c:1f:b2:9c:e0:16:bc:55:bf:03:38:74:
                    e6:ad:df:2e:ea:48:c5:3a:bb:1a:99:67:71:d9:fd:
                    28:73:83:c7:18:61:14:93:50:b8:73:a3:77:7a:11:
                    d5:f7:1d:5b:89:5d:bb:24:a9:c7:e2:19:65:ad:1d:
                    8a:7d:2b:da:c5:2d:eb:bc:5a:a8:64:b3:1a:4a:5a:
                    b5:eb:4a:07:f7:57:70:40:ad:04:46:da:47:1a:11:
                    ea:2a:4f:67:45:8b:14:8f:44:91:55:f7:54:8c:e3:
                    f6:1d:d8:5f:70:2d:fd:4c:16:95:89:04:73:39:01:
                    54:00:98:ad:61:2e:79:48:48:93:8c:26:8e:78:72:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:68:35:A1:69:C8:A7:B2:18:E3:3E:F4:DA:52:C6:C3:86:62:A1:56
            X509v3 Authority Key Identifier:
                keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:7b:4f:36:f7:d1:fb:f4:bf:dc:99:12:da:53:75:49:bb:
         07:f7:8e:08:76:3f:8c:53:93:99:f9:12:53:c0:2d:ef:33:39:
         82:6c:fa:8a:56:48:5e:d8:c8:51:02:63:46:84:ba:a0:c2:86:
         c9:30:d2:38:a9:ba:d8:c0:aa:ae:f6:d5:a6:6b:0d:b3:bd:70:
         70:11:ed:2b:3b:5d:f0:61:05:97:90:be:03:ad:96:a5:bf:b1:
         39:b3:50:6c:1a:ab:44:c8:12:37:64:27:f6:7f:65:99:89:96:
         58:47:d9:e9:e7:62:cc:47:8c:cc:f6:32:e7:d6:a2:73:52:e5:
         2c:de:0a:53:9a:7e:52:c4:72:11:4f:78:27:e6:b3:fd:a0:6a:
         0b:f6:de:67:c1:85:3d:d5:fc:bd:73:0f:90:ba:04:82:f8:f9:
         3b:00:9e:9e:8a:83:60:d9:ec:cc:70:5a:c2:06:29:37:90:98:
         de:45:17:c8:38:0c:f6:a8:cc:1f:dd:13:09:f7:50:92:07:47:
         d3:96:a3:2b:b6:7a:3a:f9:7b:5f:d4:56:f5:13:1f:51:50:3a:
         ce:ed:15:2a:0a:62:60:9a:db:88:37:25:3a:00:4d:72:95:b4:
         83:a0:d5:33:c5:2a:70:d2:be:53:4c:4a:63:2b:a3:59:fa:82:
         79:a1:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:24:35 2024 by rpki-client on console-fra.rpki-client.org