Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.mft
File:                     EHc_MtPLThPkPxCj3EIvHzJxv7o.mft (raw, json)
Hash identifier:          G9gHM3Sb/cmBl2cBc2RQl1TRAOkbxY1xGEPSP/TJZnk=
Subject key identifier:   C3:EB:BA:74:B3:F2:0F:A5:A8:BA:6A:1D:54:3C:58:0D:2D:32:24:A4
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Certificate issuer:       /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial:       018F8D14678C6DE781796200B80C9FE9B73E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 19:01:15 +0000
Manifest this update:     Sat 18 May 2024 19:01:15 +0000
Manifest next update:     Sun 19 May 2024 19:01:15 +0000
Files and hashes:         1: 8ZF30T14MYe8rC-miATh_yS5DCE.roa (hash: p/bPhIuGL21v5f301xPUVEWs2I7YkrZqG7+4yFdOxcI=)
                          2: D-pYB57HeRH0d2yTPhWpbcwng_w.roa (hash: qzETCghLQevBtMx2Ko6gLNTbbfR3D+S444F2QWm76j0=)
                          3: EHc_MtPLThPkPxCj3EIvHzJxv7o.crl (hash: r2rjvaHhhFXFBfDtvuT0XO7yJVFVSyVjOSUzTQ7x3Ho=)
                          4: GHSn7Ieic-oGtAEIoIT1QanURSc.roa (hash: kZ3j2kOkfTLov1q762zBL5HjNPi/EeBOd73VH2v3Dds=)
                          5: Qi_OHXfu1hiOizh3NIPGz_LUSB0.roa (hash: iw5+sIBLpjz7j+dRbqeKbqwkL+0xyhT0VKgU1xLRDCw=)
                          6: g4YPnsvt9HohOEy_kgWCcE7YSHA.roa (hash: n8FC+ypN2+fbXf4iXjL4XzImy3b+imUaGfRz36V6ZrI=)
                          7: gX-qCcCD5B_9nIsUOZ5Qobytv98.roa (hash: Bl4gs2SaONMXRiZYBNCExkmfvpzatrIWXT5qgV6TImA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:14:67:8c:6d:e7:81:79:62:00:b8:0c:9f:e9:b7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
        Validity
            Not Before: May 18 19:01:15 2024 GMT
            Not After : May 19 19:01:15 2024 GMT
        Subject: CN=c3ebba74b3f20fa5a8ba6a1d543c580d2d3224a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:83:8a:d1:be:22:af:45:f4:80:59:df:59:
                    7f:95:c2:a7:25:7e:05:b5:c0:c9:90:31:79:c6:b6:
                    04:41:d9:d6:ca:c5:ad:59:9c:be:a0:66:6a:83:de:
                    cc:ea:63:90:4f:36:61:60:f7:77:2a:fe:f1:cf:2c:
                    be:6b:97:0f:dd:bc:fc:9c:e6:d2:2a:c3:1a:62:55:
                    a9:fa:80:d4:39:c9:bb:55:a3:0c:41:78:a8:a8:95:
                    e8:fc:3d:64:7c:40:46:c4:64:36:15:ed:37:e9:03:
                    14:31:cb:60:5b:87:b9:62:53:1a:78:85:a7:31:df:
                    6d:76:44:7f:2c:f6:d1:67:8c:ac:31:f4:31:77:8e:
                    b0:66:cf:98:45:8a:fe:b0:95:0c:f2:e3:c0:18:77:
                    00:a2:b5:0b:12:00:12:08:45:3e:9f:82:33:7f:3f:
                    bf:5f:8d:9c:a6:9a:4a:2a:66:38:35:b9:68:70:e4:
                    2b:b3:d5:3f:04:6c:39:2c:35:15:2d:03:79:db:62:
                    6e:04:f3:5e:a7:7c:36:82:8a:6c:6c:a5:d6:8e:1f:
                    57:81:d3:b4:77:06:a6:05:e7:96:59:bc:b6:7f:6c:
                    d6:e1:60:42:53:a4:4f:bd:d0:b8:ba:3f:f9:76:bf:
                    97:71:df:c8:09:8b:a1:f9:4e:60:a4:30:be:90:ef:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EB:BA:74:B3:F2:0F:A5:A8:BA:6A:1D:54:3C:58:0D:2D:32:24:A4
            X509v3 Authority Key Identifier:
                keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:28:e8:43:52:0c:0f:1c:c2:8a:a3:ee:2b:d6:b1:28:df:9d:
         a9:c5:b3:80:59:19:b3:2e:d3:6b:17:b8:76:e6:78:75:b0:71:
         97:f8:80:6e:03:ff:3b:46:87:16:4a:ae:55:c3:e4:df:bf:9a:
         ca:35:c4:72:c9:d1:0b:c6:a8:fa:7e:5d:b4:f8:bd:b0:45:0a:
         c3:ab:a0:52:e8:03:af:4a:2c:9a:25:a0:dd:08:45:5e:a7:cc:
         c3:3f:b1:ed:29:fc:9b:97:bd:ac:2a:05:ed:c7:c9:6a:3e:e9:
         81:a4:8e:51:0e:48:b2:e2:fd:c7:14:b6:0c:22:19:ca:35:fc:
         af:60:cb:dc:13:27:c5:8d:36:b5:9e:79:f8:30:91:5f:6d:14:
         65:03:0a:ae:23:fd:04:c3:38:ff:56:fc:90:bf:fb:79:98:c6:
         d8:81:62:35:4c:eb:4c:67:87:61:2d:94:e2:4c:80:14:ed:4f:
         10:20:48:8a:bf:83:cf:11:b9:c2:a1:d2:db:d7:1b:90:f5:30:
         4d:f2:27:67:ff:e5:ef:a1:84:39:90:d5:65:ab:2e:b0:a4:3a:
         98:a7:f7:da:f5:df:b5:c0:61:2b:d4:9e:98:97:37:0f:23:f6:
         8c:37:1f:4b:dd:c8:ee:ac:87:22:f2:1c:78:ef:c1:f9:0b:70:
         83:1d:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:56:29 2024 by rpki-client on console-ams.rpki-client.org