Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.mft
File:                     x__X67-pgIMwfGP3F6OrpxB2lqI.mft (raw, json)
Hash identifier:          YhVOsFnmrICijkUSpirOVW607PeXI86sq9toGNlgMoY=
Subject key identifier:   72:D4:18:74:D6:57:4A:DF:C5:85:00:1F:CD:8F:D2:37:B2:AC:75:A6
Authority key identifier: C7:FF:D7:EB:BF:A9:80:83:30:7C:63:F7:17:A3:AB:A7:10:76:96:A2
Certificate issuer:       /CN=c7ffd7ebbfa98083307c63f717a3aba7107696a2
Certificate serial:       018F885B132C797BFD4B3EBB44949B5E086F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x__X67-pgIMwfGP3F6OrpxB2lqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 21:00:20 +0000
Manifest this update:     Fri 17 May 2024 21:00:20 +0000
Manifest next update:     Sat 18 May 2024 21:00:20 +0000
Files and hashes:         1: VPYISqkvbuEfYw02Pnqg3-ww-pk.roa (hash: iRni9sVy/+az0mnpstP7gsCG+sJ55t8nv+DUS6VcBDo=)
                          2: x__X67-pgIMwfGP3F6OrpxB2lqI.crl (hash: 4FZC1dh77fTBo2/EIcyOnT44uCFP8eiBwE3NeOCWXP8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x__X67-pgIMwfGP3F6OrpxB2lqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:13:2c:79:7b:fd:4b:3e:bb:44:94:9b:5e:08:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ffd7ebbfa98083307c63f717a3aba7107696a2
        Validity
            Not Before: May 17 21:00:20 2024 GMT
            Not After : May 18 21:00:20 2024 GMT
        Subject: CN=72d41874d6574adfc585001fcd8fd237b2ac75a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:9b:b9:2e:c8:9a:da:7c:66:25:f5:0d:9b:
                    a6:08:5a:84:0a:72:1e:94:ed:7d:94:e0:ef:ed:d7:
                    82:d8:d6:ba:75:4d:6b:7e:6e:ba:2b:eb:c1:71:7d:
                    38:e4:55:54:8e:47:1d:07:77:8c:c6:cf:78:2d:77:
                    81:c8:78:af:f5:a5:81:32:b4:44:2d:4c:ee:f1:db:
                    a7:ba:77:95:1e:0b:e3:25:78:bb:3b:d4:99:8c:b5:
                    15:e6:2a:ec:c8:30:56:e7:e7:04:9d:13:0a:65:5e:
                    f1:c0:9d:b8:f6:6a:c0:c8:c0:48:41:40:3c:de:65:
                    ab:11:29:8e:e0:74:23:8d:91:80:8e:38:6c:6d:2d:
                    7d:0d:f0:a6:9d:9e:7f:4d:5c:4b:17:eb:b3:93:60:
                    e8:0f:ec:8d:34:21:85:e8:39:eb:cd:39:47:33:01:
                    42:1f:c8:3d:ae:84:21:ed:80:8b:31:4a:0b:59:fd:
                    4a:da:71:eb:5a:0d:3c:18:f5:34:d4:d1:c4:da:aa:
                    6e:d6:70:26:68:28:cb:ea:b8:36:a7:3d:a1:a3:f5:
                    ba:9e:a4:32:df:bd:da:eb:82:ca:77:fe:28:cf:9a:
                    8f:c5:7f:8d:ae:20:98:a7:b0:06:50:f4:42:f0:28:
                    52:dc:a6:18:b7:e2:ea:11:ba:02:71:a5:04:91:ae:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D4:18:74:D6:57:4A:DF:C5:85:00:1F:CD:8F:D2:37:B2:AC:75:A6
            X509v3 Authority Key Identifier:
                keyid:C7:FF:D7:EB:BF:A9:80:83:30:7C:63:F7:17:A3:AB:A7:10:76:96:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x__X67-pgIMwfGP3F6OrpxB2lqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:78:c9:ab:ef:4c:27:9c:b3:0f:87:3a:6a:04:12:62:45:26:
         91:c6:39:6f:a9:df:71:b8:3f:11:ad:44:59:f5:f3:68:a3:83:
         86:dc:8a:c4:9b:77:d6:d6:db:f9:43:56:cd:ae:95:3d:19:fa:
         fe:cf:19:04:22:4c:f6:e1:d8:3d:fd:9e:ab:8e:22:8a:1e:62:
         9e:ec:b8:39:9b:5c:ee:1c:b4:30:4f:bb:37:61:34:de:0b:ea:
         ad:00:53:5a:16:53:22:dc:00:4b:16:1b:a4:5b:33:4c:be:c7:
         bd:13:11:4d:fe:db:2a:61:99:9f:ea:ae:36:ae:35:db:21:d1:
         e2:9f:b0:48:5f:5a:3a:70:6c:23:13:7a:95:73:bc:2b:54:17:
         a6:47:cf:1c:0e:c7:fe:61:dd:fa:0f:c3:b2:12:53:b0:1f:62:
         03:03:c9:2f:26:e8:51:00:91:8b:8f:8d:00:c8:86:a0:3a:6f:
         39:63:14:3a:cc:7b:ec:05:f0:b8:ac:28:05:1a:b1:59:a0:26:
         4f:d2:99:7a:93:93:46:2f:3e:cd:c1:fe:f2:e9:5c:70:df:c3:
         ab:ec:5e:a1:28:72:14:1b:9b:ff:17:70:47:0b:8b:d4:5b:ef:
         bf:3f:f9:35:dd:2e:07:15:ad:35:98:65:81:12:9a:9b:4e:fa:
         c5:9e:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:01 2024 by rpki-client on console-ams.rpki-client.org