Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File:                     d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier:          I+SGZr66tirtdf1q17wT207bF2q4cBMXjRuO7dOg0A4=
Subject key identifier:   E9:D4:51:6C:F7:D4:3C:96:27:73:F3:29:A4:E2:78:8C:91:83:C3:02
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer:       /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial:       018F8749FA3B1DBEB25316EFA26DB47E8DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 16:02:03 +0000
Manifest this update:     Fri 17 May 2024 16:02:03 +0000
Manifest next update:     Sat 18 May 2024 16:02:03 +0000
Files and hashes:         1: QWkB2_UQyJvO86KG0WRqGUOR9Zg.roa (hash: y7Mh1q5x0lSCJqWuycXD8NEe5/UvaEB94c1LMjcGsAA=)
                          2: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: 1rDg8qEWfB5v7CAOj+QNAAlP57+BtjgAWn+J4Z22fkg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:fa:3b:1d:be:b2:53:16:ef:a2:6d:b4:7e:8d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
        Validity
            Not Before: May 17 16:02:03 2024 GMT
            Not After : May 18 16:02:03 2024 GMT
        Subject: CN=e9d4516cf7d43c962773f329a4e2788c9183c302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:e8:f5:dc:9b:9c:ee:f5:1f:90:a7:cf:fc:
                    60:6e:c1:31:9a:a5:ae:4a:a8:b2:9f:ce:a2:e8:04:
                    82:76:fa:b2:65:0d:68:92:07:44:bc:d5:0c:a6:5a:
                    f5:55:42:ee:97:78:07:2c:0a:a2:26:e5:73:c5:5e:
                    fb:f5:ab:e1:ec:a2:23:b0:ee:a6:c7:bc:c8:53:ed:
                    15:cd:89:84:ba:84:90:d4:67:02:91:62:7f:41:a5:
                    d6:0d:aa:4b:2a:9c:bc:64:97:1c:8a:a9:bf:37:4c:
                    07:5c:d8:84:be:30:3c:36:31:df:e9:fb:ec:93:e6:
                    da:67:9b:87:f2:35:da:41:26:1c:67:69:0a:f2:40:
                    7c:79:80:1f:90:6d:ac:19:13:5e:81:5d:bd:00:57:
                    b4:7f:8d:c1:78:ce:b5:39:c4:f8:71:81:7a:7a:78:
                    3b:58:1f:49:c9:b5:89:51:a7:be:cb:31:eb:02:58:
                    ff:58:be:54:f4:18:19:33:06:8f:c3:3d:69:6e:60:
                    33:7a:b8:b4:cb:c3:cb:a9:72:be:85:32:4e:35:1d:
                    31:5d:a9:7e:57:81:72:5b:cb:e6:a0:7f:7b:25:2d:
                    31:e2:b5:b7:96:54:00:30:d2:37:20:bd:12:32:11:
                    15:d5:a8:35:a0:96:77:22:54:4a:4e:c0:a4:68:97:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D4:51:6C:F7:D4:3C:96:27:73:F3:29:A4:E2:78:8C:91:83:C3:02
            X509v3 Authority Key Identifier:
                keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:64:77:7a:d6:92:c2:37:70:7b:50:c6:82:1c:91:27:b9:4d:
         d4:ec:ed:34:97:14:96:15:fa:cf:a5:59:db:7e:c4:b9:82:79:
         48:cb:cd:c5:a0:3c:33:6b:22:6f:7b:9e:1e:af:12:40:16:51:
         0c:be:85:c3:90:ae:7c:53:0c:39:fe:0c:3e:ae:0a:37:0e:d8:
         34:c6:95:53:55:ab:5e:93:96:18:01:41:6a:df:46:23:d9:5b:
         53:f3:96:c7:b0:b6:e4:ed:05:3d:10:6d:59:9b:a6:fd:24:0f:
         af:6f:47:e1:55:61:f8:1f:96:16:a4:c4:aa:9d:97:eb:f8:d8:
         9e:9b:8a:79:26:ad:99:71:44:96:b4:f3:4f:c8:46:ea:6d:ef:
         fc:c2:70:e8:23:28:af:11:07:ad:f9:70:76:3b:c5:5d:30:1f:
         ee:f0:d3:6a:6c:d5:d0:97:b9:19:b0:fc:d6:05:c0:36:6c:03:
         bd:f2:37:ed:00:a3:b5:35:5d:13:e1:5c:8d:26:79:31:eb:5a:
         97:9e:46:45:71:77:ee:97:44:3a:08:bf:3a:c9:8e:d9:5d:89:
         6b:a7:8c:56:ff:80:e3:03:be:a3:49:cc:2b:1b:03:3c:7e:21:
         9a:c9:bc:a4:cd:e6:98:cb:d6:09:5e:2d:7a:08:83:07:5b:ce:
         4e:f2:94:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:57:31 2024 by rpki-client on console-ams.rpki-client.org