Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File:                     Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier:          lCYLs+Dr5tOUTg2rPqGWZq2KJ4ScWOLVZ/YWp+YRT9Y=
Subject key identifier:   74:76:9D:ED:B0:DA:5B:77:8C:2A:2D:17:D2:D1:20:B3:7F:9D:F1:60
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer:       /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial:       018F4645541182BB4CB6F112D7E0DFADB135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number:          1159
Signing time:             Sun 05 May 2024 01:01:39 +0000
Manifest this update:     Sun 05 May 2024 01:01:39 +0000
Manifest next update:     Mon 06 May 2024 01:01:39 +0000
Files and hashes:         1: 1BxQD-tTYR6AI3NyIQAeMV5v8dk.roa (hash: NUzkXeHHw+jseVHTZ65/J6ZpBY1QV8EwfoPNhS+Bw/Y=)
                          2: E_laWUYCmTV0SCcR-n5FbsSpUAo.roa (hash: I9IAxK/QPcty9PaECGbQkPS55lT6UHIYJJIlcZ9w1c0=)
                          3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: mfYmUNhFpg7qVwAk0/r0fthI73kF6C4uN7yAv/1qFR8=)
                          4: LP7tg3FBvFLLW-HMFkYDRUPOELU.roa (hash: Egs0+i1zrlaOijAcDT95IdmtPqJrqUAguzSSvfOnTM0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:45:54:11:82:bb:4c:b6:f1:12:d7:e0:df:ad:b1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
        Validity
            Not Before: May  5 01:01:39 2024 GMT
            Not After : May  6 01:01:39 2024 GMT
        Subject: CN=74769dedb0da5b778c2a2d17d2d120b37f9df160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:f8:0d:c9:7b:a2:a3:17:d0:3d:b6:8d:92:
                    c6:89:5b:e8:e6:7d:ec:5a:ca:24:1f:33:14:05:b1:
                    a9:56:4c:9c:33:b8:43:17:ff:f9:df:71:61:d5:c9:
                    1a:9f:5f:9e:f5:74:47:60:77:c7:29:80:c0:05:3e:
                    8d:9b:d1:5c:0f:ba:91:de:6a:a1:d3:45:c3:94:e1:
                    95:62:0b:1b:92:9c:b9:86:c6:a2:a5:a7:dc:fc:f1:
                    57:0b:ea:14:aa:66:1b:19:8c:d3:c6:d4:e4:01:81:
                    3c:99:fd:a5:65:0f:20:ab:1a:61:66:53:45:b2:72:
                    08:3f:e7:b2:f7:8b:ee:e6:23:8a:3d:f3:0f:24:84:
                    c1:81:b1:58:02:e4:3f:aa:c5:79:44:c0:07:f6:c1:
                    89:24:79:c3:9b:8c:ca:d2:59:a9:f3:a1:d1:0f:f6:
                    a9:89:a0:4b:f1:e5:12:5e:09:71:c0:a8:29:71:84:
                    38:07:45:f7:7b:b1:93:2f:74:30:39:c3:8a:92:88:
                    c7:19:83:a8:3a:fe:4a:0b:aa:34:bc:14:30:32:fb:
                    fd:77:c0:c0:1e:1c:7b:60:0f:84:af:14:47:4b:75:
                    fc:45:6a:62:2c:bb:78:4f:8c:11:d4:c2:22:4a:73:
                    01:10:a8:77:bb:84:11:4d:4d:8d:71:80:40:90:1a:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:76:9D:ED:B0:DA:5B:77:8C:2A:2D:17:D2:D1:20:B3:7F:9D:F1:60
            X509v3 Authority Key Identifier:
                keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:43:c5:c3:3a:c8:7a:bf:e9:ce:67:0e:52:72:3a:7e:55:7f:
         71:41:80:20:6a:0c:a3:6f:62:0c:8d:5f:a7:ae:ee:b5:7f:76:
         c9:4c:57:b1:f2:72:f0:60:1e:30:f1:e4:c9:69:56:a6:8f:b6:
         ee:d9:c4:71:f4:31:33:27:2c:22:a7:92:8d:c7:8e:b8:05:a9:
         f4:12:f5:03:e3:9f:a0:47:df:38:b4:d3:3d:c3:1c:d4:b9:3d:
         42:06:ef:a7:7a:da:8e:38:0a:3e:e1:aa:ca:85:b5:76:c2:f5:
         eb:39:5e:85:38:f0:14:9b:0b:0f:b7:7a:9d:9d:98:6d:b0:f2:
         9c:a3:e4:a2:bb:fd:4f:5f:4c:f2:41:bd:5d:21:0d:6b:3c:26:
         fd:e1:70:89:3d:79:cf:ed:6b:bf:56:8b:f1:5d:0a:5c:ed:9e:
         75:a9:0c:ae:a6:40:f2:d6:6f:ee:31:03:66:56:e6:71:2b:9d:
         b4:d0:32:fa:de:d4:f7:89:57:28:eb:8e:2b:8e:74:71:48:1e:
         06:82:f2:43:83:81:09:bc:ff:f7:95:82:98:fc:10:56:7c:59:
         bc:fb:18:d0:29:53:a5:90:03:7a:7c:83:52:bd:10:11:87:fa:
         3c:98:d5:1f:0c:4d:5e:7a:d5:ea:c0:c9:87:61:0b:cc:54:f8:
         11:b9:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:09:10 2024 by rpki-client on console-fra.rpki-client.org