Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
File:                     MR1it_2fz8h9_qmHUVdnyDjiG7k.mft (raw, json)
Hash identifier:          Z3JUKXubNQGcPBKYxO8b8lwTOVLt6nTz5FUVewt7IGc=
Subject key identifier:   C4:DB:AC:4C:C0:32:0A:DF:4F:A8:63:56:8A:0A:92:A7:83:66:FF:21
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       018F8938797EDF524FAB3A1429DF711B0529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
Manifest number:          1180
Signing time:             Sat 18 May 2024 01:02:10 +0000
Manifest this update:     Sat 18 May 2024 01:02:10 +0000
Manifest next update:     Sun 19 May 2024 01:02:10 +0000
Files and hashes:         1: 1-OLkcCSi7aXpZmeRMtmUAbfJFX4.roa (hash: ri77vUz+yxyxxQMF0mWvd5w4t08WnuRKggSg6wOs3T4=)
                          2: MR1it_2fz8h9_qmHUVdnyDjiG7k.crl (hash: tdslejvPqMrjyf3AokaDxh27t6F5XnzPzgCewezNtho=)
                          3: VzIpGRlOmR2ax4jkMOV9Xayk8h8.roa (hash: GFEzXDf+oQNFDbQ7u9yYgGo99T7gEjDw5zpRrxXZnoc=)
                          4: YPQrwZYqV2eQKMguP0mLTXudc4w.roa (hash: rHCj9/YM0hme0eYCqPZCV/UI/l2GxCZXsdN98M8N6jY=)
                          5: nOdiFvXEHa1A4ILUUIAr4NpCYgA.roa (hash: 13kVczkRPAw7OfBk3Z3VNLLKStb82K8aIq5X7txB2YE=)
                          6: rn2F7jJzqt-1vSSxlSXfoSaye34.roa (hash: lE1P5XHBY7cToewM+c8nOZy6tQbj5DL8FX+PX0sb05Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 01:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:79:7e:df:52:4f:ab:3a:14:29:df:71:1b:05:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: May 18 01:02:10 2024 GMT
            Not After : May 19 01:02:10 2024 GMT
        Subject: CN=c4dbac4cc0320adf4fa863568a0a92a78366ff21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:0c:b4:33:ac:2b:fe:08:0b:53:2f:a1:0d:
                    ef:ff:33:bd:5d:31:3a:97:aa:fe:14:a5:9d:57:db:
                    33:94:5a:74:62:cb:31:14:83:09:49:0c:3d:e8:76:
                    7d:2c:c4:bd:b0:eb:a4:5b:58:43:1b:cf:9a:c6:16:
                    d0:0d:6d:91:f9:ac:88:73:c1:9b:3d:60:d6:02:19:
                    b4:84:0f:2d:c7:ae:20:49:af:63:71:35:ae:f9:1e:
                    f2:ab:14:8f:fd:4d:cb:c9:6d:e3:29:52:8b:aa:8b:
                    7d:a1:54:89:0b:4d:ab:12:a8:ee:d5:d6:b4:c6:2c:
                    ce:4b:ee:96:3a:95:e9:8e:74:56:2a:e9:59:e6:3b:
                    36:87:63:6b:30:ae:e4:29:c0:25:ca:ef:a6:07:cc:
                    a1:d6:f7:8b:a5:f1:0b:c9:8b:06:0a:9e:a5:de:a1:
                    44:4c:fd:79:d9:b0:f3:7f:ad:0c:e4:91:58:34:3c:
                    c9:b5:8b:38:17:2e:43:a2:2f:41:70:59:a7:3f:bb:
                    f2:16:27:c6:24:22:f4:43:15:d7:eb:c2:d8:c6:7b:
                    0e:d1:36:5e:fd:51:85:17:7e:ce:c5:43:b3:7c:13:
                    11:06:52:5b:99:0b:d0:7a:5d:48:71:ff:e9:72:cf:
                    74:eb:96:7f:f5:06:02:c3:26:87:c4:34:f9:bf:e3:
                    22:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DB:AC:4C:C0:32:0A:DF:4F:A8:63:56:8A:0A:92:A7:83:66:FF:21
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:2d:a0:26:f1:e6:df:b7:9c:a3:b6:8c:e4:ac:4f:b1:40:2f:
         f8:cf:4b:40:52:88:03:de:a9:87:b5:1e:a2:4a:05:ff:c7:dd:
         d6:84:da:e0:35:51:05:7b:bb:03:20:2d:f1:11:1f:ba:00:e2:
         fd:4f:57:4c:b2:eb:ab:98:6e:77:85:b2:4f:a6:61:96:aa:da:
         75:a8:14:ed:5c:17:f9:c3:75:a0:9d:7b:f8:31:1e:17:a8:4c:
         8c:86:cf:f2:dc:f9:ae:bb:ba:fc:99:ca:37:14:4f:17:64:6f:
         73:ef:a4:fa:10:01:58:01:e2:1b:e3:59:29:6c:13:f0:f5:77:
         4f:72:95:6c:5e:22:34:55:db:4e:9c:47:9a:8f:01:a3:46:53:
         6e:00:80:63:1b:70:7c:5f:fd:6c:77:7c:2e:ab:72:be:6f:80:
         55:b8:37:98:1d:16:d6:cc:c1:ed:2f:76:f5:33:64:15:2e:dd:
         d7:25:9c:7b:cc:b5:10:f7:04:22:14:0d:8d:12:b2:fa:23:ee:
         33:91:63:ca:d0:fb:8b:6d:ea:a4:bd:80:ae:20:85:6a:a5:1d:
         85:4a:db:79:6f:11:57:b9:2a:e6:9c:e6:79:c5:69:72:b0:da:
         4c:df:e9:e1:34:99:99:11:1f:cd:82:cf:ea:a4:f6:0b:18:4c:
         70:29:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:35:33 2024 by rpki-client on console-fra.rpki-client.org