Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File:                     sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier:          iY0JRs/FvzLow24AhfvQmjFl4aSCFY/lwH9jFi59ftk=
Subject key identifier:   25:C5:CE:D8:29:77:51:D1:63:76:A6:6F:0A:2C:D2:24:D5:86:E2:DE
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer:       /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial:       018F87485EBD764A6D9600B7D6C48BAF3F11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:17 +0000
Manifest this update:     Fri 17 May 2024 16:00:17 +0000
Manifest next update:     Sat 18 May 2024 16:00:17 +0000
Files and hashes:         1: 3NhdegdyD8SzI7rnnhAeFUiujH8.roa (hash: IbFlK02V6L4y+fPCIasKCzSGEOoIUI7k43qRdPj2sCg=)
                          2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: kJJnAS6mw/ZAVILUZAIfaohpYC0FUW0CdzpXiSXs8uA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:5e:bd:76:4a:6d:96:00:b7:d6:c4:8b:af:3f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
        Validity
            Not Before: May 17 16:00:17 2024 GMT
            Not After : May 18 16:00:17 2024 GMT
        Subject: CN=25c5ced8297751d16376a66f0a2cd224d586e2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:de:53:13:2d:74:f0:12:55:ff:7a:32:a7:
                    63:07:4d:f2:27:24:2f:5f:70:5e:45:1d:35:e2:45:
                    ac:5c:ec:6f:e3:6f:2e:9f:38:d4:72:7d:96:51:8c:
                    37:28:89:12:b4:f7:de:50:fe:ac:9a:88:f4:18:c8:
                    97:5f:ea:49:a2:e7:d4:75:fb:a1:26:89:81:83:b5:
                    00:f9:44:13:c0:65:bb:04:b1:fe:f0:91:c0:81:05:
                    70:c6:dd:08:61:d4:2f:8b:79:aa:78:23:1c:f8:62:
                    5e:c0:e5:01:9e:97:fa:f7:f9:78:92:f7:d1:83:71:
                    8a:71:31:98:05:b9:f9:61:be:86:b7:4b:d4:fc:69:
                    5e:4a:60:a1:1a:c7:fb:b6:82:05:d1:ed:37:0a:e0:
                    c1:6c:81:08:fe:09:1f:e0:35:e8:8f:3e:31:4f:90:
                    3d:19:41:40:c8:ba:c6:a7:32:75:bc:a2:7f:93:00:
                    8d:2b:07:0d:24:f9:97:4e:7b:8d:44:9a:2c:23:71:
                    15:33:ce:69:db:ff:cd:82:89:73:db:11:0a:69:d2:
                    34:bd:a0:37:c9:0f:54:5d:ba:16:78:dc:0d:0a:41:
                    a3:8a:8c:f9:07:2e:8a:8c:c4:be:d2:df:9a:63:fe:
                    e0:b0:ca:1e:81:65:28:bb:d7:3b:8a:24:e4:37:53:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C5:CE:D8:29:77:51:D1:63:76:A6:6F:0A:2C:D2:24:D5:86:E2:DE
            X509v3 Authority Key Identifier:
                keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:20:3f:ac:a3:f0:f1:c3:7f:45:1e:57:22:f1:39:12:8f:88:
         8b:c9:db:a5:3a:19:93:d0:a4:50:7f:d3:c9:e6:0a:04:fa:b7:
         49:d1:3a:af:af:9c:e4:29:22:91:13:3d:ae:26:d1:f5:63:1f:
         c8:5f:06:78:29:c2:27:f4:5f:86:63:a2:c0:6c:f0:ad:57:1d:
         03:2b:cf:81:df:51:20:6b:13:b3:c0:07:cd:75:de:a3:f7:6a:
         2e:2a:34:71:de:d8:fe:64:2f:2b:b6:84:29:c9:3f:0b:c9:41:
         41:e5:f5:e1:ff:13:09:5c:38:c3:fc:c8:1e:ef:2d:59:cc:a9:
         f5:14:b0:d9:ae:5b:53:f0:d9:64:37:64:f4:6a:05:a2:d7:3d:
         19:15:ab:3c:28:0d:30:8b:77:ed:51:30:da:9f:2e:9b:ab:87:
         35:35:1b:3f:b9:6e:b2:69:9d:a1:e3:64:08:61:63:70:0b:f6:
         58:79:a5:12:03:62:5a:bc:3e:dd:18:76:77:a9:93:d2:ca:14:
         0a:4e:83:34:69:83:f8:45:b2:1e:f1:aa:60:21:3c:72:ce:24:
         3a:d2:34:12:03:6b:7e:bc:b0:ce:57:8a:4d:61:26:7c:5b:c9:
         f3:22:43:1d:c2:b2:c2:c5:ec:c2:25:c4:b7:b6:3c:56:d4:be:
         80:d6:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:17:14 2024 by rpki-client on console-fra.rpki-client.org