Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File:                     mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier:          0+SF8nm3wfbSdUU3Unb3bfC7kFzmOUzSIav+4ZwL870=
Subject key identifier:   4E:9B:2E:70:46:DA:B9:FA:D6:21:D8:30:AC:BA:AB:0B:4B:77:A3:FB
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer:       /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial:       018F88922A08FA98F065635879EE1829245D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 22:00:31 +0000
Manifest this update:     Fri 17 May 2024 22:00:31 +0000
Manifest next update:     Sat 18 May 2024 22:00:31 +0000
Files and hashes:         1: bCKFiU5msrRwnLJjfedGdtT3E-U.roa (hash: TEu/r205SBSw5/jdNeZrXZsPyVmD1DdjvOIXoPfIPO8=)
                          2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: m7jLQsXnG/YxYIhocHch1a2cb5gztoKYMT9IWDjLMDE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:2a:08:fa:98:f0:65:63:58:79:ee:18:29:24:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
        Validity
            Not Before: May 17 22:00:31 2024 GMT
            Not After : May 18 22:00:31 2024 GMT
        Subject: CN=4e9b2e7046dab9fad621d830acbaab0b4b77a3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:68:51:78:be:71:56:45:a2:ae:a0:12:27:
                    b5:e4:8e:3a:9e:a9:de:0f:6b:cd:a8:ee:d6:79:96:
                    73:dd:9e:19:2e:72:d8:f9:06:03:64:90:8c:56:16:
                    d1:af:4a:86:be:fe:a3:05:b4:0e:83:94:45:fa:49:
                    10:30:2f:df:37:e1:5b:71:46:34:17:2a:fc:c7:f2:
                    9e:dc:86:3f:20:7d:11:f5:c3:37:b1:0e:17:14:0c:
                    a2:ad:b4:4f:39:42:95:74:2f:77:3f:12:df:f4:1e:
                    d1:32:75:51:9b:76:e0:51:d7:bf:21:b4:9d:32:bf:
                    11:22:77:df:c5:5a:bb:f4:68:a7:bf:e1:59:bb:70:
                    54:22:39:5f:08:8d:89:5c:e1:8e:1b:b9:85:43:ff:
                    ec:4f:2e:94:ba:ce:5e:6e:72:a0:b9:6e:2d:a9:7a:
                    bc:0e:d5:9c:93:0d:54:a1:e9:f1:b6:07:9e:67:30:
                    89:8a:40:e6:c2:48:91:2e:6d:0b:34:e2:c2:41:4d:
                    61:d3:54:27:33:93:e9:b7:8e:d0:4a:c9:be:7e:83:
                    7d:6b:a4:a6:52:8d:66:b2:13:44:ee:8b:8b:2f:3e:
                    13:8a:25:21:19:ef:c9:d4:b0:b4:66:8b:42:51:09:
                    38:6d:a8:65:d8:0a:a8:75:ba:b5:1a:b2:83:de:84:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9B:2E:70:46:DA:B9:FA:D6:21:D8:30:AC:BA:AB:0B:4B:77:A3:FB
            X509v3 Authority Key Identifier:
                keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:27:64:28:a3:4f:32:a3:46:fc:eb:da:25:9a:f5:96:1b:63:
         be:3f:4f:c8:06:b8:b0:00:6e:e8:50:b4:02:05:97:50:3c:94:
         74:50:1f:21:3c:e1:6a:03:e2:fb:8d:33:02:e0:64:81:9a:af:
         09:c4:10:d2:14:d4:69:2e:a5:74:1e:f8:47:bf:d7:2d:38:f7:
         6d:6f:65:a5:67:6d:9d:18:7c:bf:6d:87:0e:b3:ea:7e:d3:62:
         c7:da:15:97:70:52:8f:cd:b1:88:2b:4a:6b:5a:76:2c:ce:9c:
         64:c9:a5:b6:0b:cf:28:00:48:c6:7f:b4:36:27:76:51:e7:95:
         bc:72:b7:90:21:44:70:a8:96:31:91:ab:b4:6c:67:83:fd:62:
         31:51:1e:18:ce:27:86:02:52:92:81:35:b2:43:4a:da:38:36:
         73:5f:b1:53:ab:9b:91:89:06:9e:62:3f:c5:a1:2c:ea:46:67:
         75:a0:4a:ba:f9:ed:83:30:43:d1:1c:61:3c:3b:c6:3f:31:d6:
         e2:7e:e7:49:f4:56:70:0b:f2:eb:cf:d0:02:44:f1:a1:65:2e:
         be:b6:06:b7:75:9c:6b:72:54:2c:1f:c7:eb:06:44:b9:99:ca:
         e7:38:21:13:a0:cb:10:41:4e:4c:98:48:e1:28:74:6a:c0:03:
         d7:1d:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:35:10 2024 by rpki-client on console-fra.rpki-client.org