Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File:                     toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier:          6mZ+lwNTYJF1qb2zWtR+oIHGRjtI5LBEprM+XF5z1pU=
Subject key identifier:   E0:FE:3B:F2:67:50:37:D9:05:5D:E1:42:FB:56:24:28:C4:C9:73:A0
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer:       /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial:       018F874B051CF8C27F6B2F6D707A46FBD165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:03:11 +0000
Manifest this update:     Fri 17 May 2024 16:03:11 +0000
Manifest next update:     Sat 18 May 2024 16:03:11 +0000
Files and hashes:         1: CYFUFtBXinMco7TH1PiEpiFEfxo.roa (hash: 1016wnrUTtBGlCS+fBWdGY57lWyOa1AiD8ccI6zK1WU=)
                          2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: xJGjAgG2SeQE4yl8MBVjLAiaVpKd5oAm1HdiTuCyJKg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:05:1c:f8:c2:7f:6b:2f:6d:70:7a:46:fb:d1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
        Validity
            Not Before: May 17 16:03:11 2024 GMT
            Not After : May 18 16:03:11 2024 GMT
        Subject: CN=e0fe3bf2675037d9055de142fb562428c4c973a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:ce:e2:4b:05:cf:0b:06:1b:2d:8b:ad:23:
                    32:9f:af:0c:d6:1d:0c:c1:23:77:6c:5b:5a:bc:2b:
                    78:e2:49:36:28:36:38:ec:0d:21:68:b1:33:84:17:
                    e2:dd:aa:ef:c8:de:c1:ee:58:ed:46:5e:0f:4b:7b:
                    03:14:bd:7a:79:5d:03:d5:42:f8:98:20:40:e4:e1:
                    1c:a5:1f:11:0b:09:39:3f:bf:fd:3b:cf:3f:a5:71:
                    d1:9e:3f:2e:f9:22:b5:0d:f9:c1:77:1c:3a:be:82:
                    2a:0a:2a:db:3b:63:bb:91:16:bc:36:fe:3e:ce:6d:
                    36:90:85:76:c1:67:7d:bf:a7:3c:f1:48:27:92:b1:
                    c1:1c:7f:43:aa:61:0e:0b:5e:c9:06:61:89:5f:7c:
                    aa:28:2b:64:bf:8c:84:04:bb:89:09:c8:8e:b9:3f:
                    fd:89:3e:7f:24:f1:12:37:b9:9d:ed:40:eb:2b:10:
                    25:89:53:54:37:92:0a:e2:72:6d:20:d4:80:66:fe:
                    d0:a6:51:ed:2c:cf:e7:a7:c8:a1:25:39:ec:8e:9f:
                    7e:d8:5a:23:fb:86:9f:05:d3:6a:d9:02:d3:8e:4f:
                    2e:06:76:8d:ed:18:61:10:ed:fb:e0:fe:c6:72:7e:
                    52:b0:e5:3d:45:7d:bd:9b:b9:e5:e2:c7:f9:0b:5a:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FE:3B:F2:67:50:37:D9:05:5D:E1:42:FB:56:24:28:C4:C9:73:A0
            X509v3 Authority Key Identifier:
                keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:c0:5b:b6:c2:06:a2:6b:31:a3:22:af:7b:82:34:39:71:
         37:fd:7b:00:b0:9a:15:84:d1:5b:ea:71:fd:59:05:27:42:f4:
         f1:0b:0c:23:32:4a:98:3b:47:d6:bb:d5:d9:6a:8a:b9:3f:66:
         37:ae:1a:7f:61:56:cf:55:ce:64:72:70:f6:ae:c4:6e:8a:70:
         a7:7b:0b:49:de:8e:06:49:37:66:53:ea:24:b0:ba:c5:57:6d:
         5e:80:00:52:1d:43:ff:84:51:3f:e2:e9:81:7b:dd:f7:b7:97:
         42:c4:fd:49:46:de:db:fa:fe:5e:ef:c2:d9:f5:a0:77:e1:88:
         7b:4a:d2:24:93:9c:49:25:0b:90:e8:70:dc:78:f8:06:93:16:
         7c:fa:83:24:35:26:45:85:c7:3c:be:49:51:de:a3:34:dc:43:
         6a:ac:b2:bc:f0:b4:15:ed:5b:a0:01:d9:56:f4:3d:20:1a:8d:
         84:de:7e:24:76:11:3b:41:68:1f:1a:51:7e:ff:b3:84:91:81:
         c6:64:c3:e3:ac:56:bf:ab:76:57:ce:99:25:b9:eb:2e:99:38:
         83:07:cc:da:75:51:b4:63:1a:49:9e:8b:fc:42:c3:e4:dd:f3:
         dd:19:de:b3:7b:12:eb:89:e6:84:bc:66:c4:36:15:0b:42:b8:
         fd:3b:cb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:21:26 2024 by rpki-client on console-fra.rpki-client.org