Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
File:                     nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json)
Hash identifier:          h+Qn+9G++prPrLcfgje9K/7sQNSSjHEWGXkOgp0et7s=
Subject key identifier:   AB:BA:62:D8:F5:5A:4C:82:26:2F:3A:E4:8B:57:76:A3:C7:F7:34:C6
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Certificate issuer:       /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial:       018F8749D0B267D681EB38A1F71D802132CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:52 +0000
Manifest this update:     Fri 17 May 2024 16:01:52 +0000
Manifest next update:     Sat 18 May 2024 16:01:52 +0000
Files and hashes:         1: 9Q7DqyjLx_e1_5Esw971SdAgQX4.roa (hash: E8XHZhI5pem6EtUIkbpzb7ns+Oqax7Z/8wIv2pzF6Wc=)
                          2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: aEN1HRDth2qkp7x0KG8mbmJ45ajfuuM5FS12wJ0KoYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d0:b2:67:d6:81:eb:38:a1:f7:1d:80:21:32:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
        Validity
            Not Before: May 17 16:01:52 2024 GMT
            Not After : May 18 16:01:52 2024 GMT
        Subject: CN=abba62d8f55a4c82262f3ae48b5776a3c7f734c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:6f:e8:43:61:59:6b:9d:05:c4:9d:3f:b6:
                    b2:ea:4b:eb:c1:b4:f1:1d:82:a6:50:7c:d1:f8:e5:
                    ff:d1:38:a4:8d:34:a4:ff:88:f8:b8:d9:c0:68:c7:
                    fc:58:55:60:61:6d:37:fe:37:88:39:50:98:00:9e:
                    f5:ae:60:a5:e5:12:6e:d2:84:6d:81:7e:9b:fa:af:
                    48:da:21:63:79:4d:c5:86:8b:a9:8a:72:b5:48:0b:
                    32:22:86:32:0f:9b:5a:8e:36:7c:6b:0d:77:4b:57:
                    05:d9:2d:2e:36:b6:a8:58:1b:4d:46:2d:e3:f3:54:
                    f5:64:3e:fb:a6:23:1b:fe:8d:e3:ef:82:21:95:4d:
                    6d:4a:b5:19:60:19:7b:be:7d:6c:76:7c:41:7f:30:
                    8c:4a:52:d3:b6:45:d2:7a:0b:92:1e:92:5f:62:64:
                    21:7b:94:5f:60:a5:89:f3:bd:8f:70:1e:e4:e6:70:
                    0a:02:7f:c3:3a:b5:d5:59:93:80:03:10:3c:07:cd:
                    e9:fb:6d:5f:b4:02:38:e9:a6:a8:25:ae:e6:e2:c8:
                    0d:3a:96:bd:76:2f:5e:be:e4:6c:65:a5:c7:69:45:
                    fe:9e:97:a5:16:fd:c4:29:f0:ac:51:9f:d6:fa:f0:
                    14:65:e6:e1:26:d9:5c:38:73:15:d2:83:ab:91:34:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BA:62:D8:F5:5A:4C:82:26:2F:3A:E4:8B:57:76:A3:C7:F7:34:C6
            X509v3 Authority Key Identifier:
                keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b8:51:dc:78:83:21:3a:90:2c:d5:45:57:00:ee:71:92:15:
         0c:23:96:48:0f:24:07:7f:29:42:32:65:d5:11:8c:33:6a:6a:
         ae:c0:d5:f2:66:1d:2b:43:2e:e3:fd:df:77:7b:ca:a4:5f:e4:
         28:8f:5b:58:c1:46:e7:5b:0a:c4:17:0f:10:5a:a6:90:46:bd:
         06:84:6b:4d:50:85:ad:c4:c2:b7:0a:d9:30:aa:ab:5c:6c:00:
         96:b6:b0:57:10:56:81:bc:03:79:13:5f:06:c1:36:14:51:48:
         59:f5:09:60:12:89:bf:9b:87:3a:ea:da:19:86:9d:eb:5b:b4:
         4f:96:3a:69:13:20:79:8b:c2:f0:7a:32:76:15:f6:bb:41:dd:
         85:89:4c:e9:18:68:fc:76:b8:d8:9b:f7:0d:6b:93:b7:a9:b3:
         3d:b5:d4:d7:66:95:36:a7:b7:c2:df:df:8b:5b:4a:16:c1:0b:
         00:a0:bc:cc:c7:95:41:0f:59:00:7f:a1:1b:dd:cc:ff:9b:3c:
         6b:eb:7e:3a:77:d6:9f:68:90:7f:6e:f5:8c:f9:0c:cd:b0:a8:
         5b:dd:78:28:55:05:32:12:c0:e0:67:12:f2:15:0a:bd:63:7f:
         a8:86:f7:99:64:e8:05:a8:ce:9a:ab:f0:eb:0c:77:31:ab:f6:
         12:d7:c7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:08 2024 by rpki-client on console-fra.rpki-client.org