Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File:                     RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier:          yDiIJIPIhOV4e3kTnWtoOkjgw0c7yusuwRp9LztbbBY=
Subject key identifier:   15:70:E9:B1:E2:8A:99:80:2A:B3:D9:89:8D:67:F0:43:7D:93:F5:AB
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer:       /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial:       018F88249A7A56E2C5DDB09763D2359BBC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 20:00:51 +0000
Manifest this update:     Fri 17 May 2024 20:00:51 +0000
Manifest next update:     Sat 18 May 2024 20:00:51 +0000
Files and hashes:         1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: 1pMkjGX5a8idyvNglJwegEJHGFifWzlFhn6FE5GI5Xw=)
                          2: Yn630TnM0oLJihTBzpXbQyO7FWo.roa (hash: Y1RVeg35nBcd/9nFWvkBhkNZLKfMpvOuBnGN4sl+LJM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:9a:7a:56:e2:c5:dd:b0:97:63:d2:35:9b:bc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
        Validity
            Not Before: May 17 20:00:51 2024 GMT
            Not After : May 18 20:00:51 2024 GMT
        Subject: CN=1570e9b1e28a99802ab3d9898d67f0437d93f5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:3b:99:f7:68:38:53:17:35:a6:09:85:68:
                    49:80:dc:fc:f6:f8:8a:03:be:8a:bf:f6:e1:98:a9:
                    ae:62:10:5f:81:52:39:e3:a4:82:f6:77:26:af:f1:
                    43:c7:81:f4:98:9c:2b:aa:4a:6a:eb:67:ec:87:41:
                    5a:85:26:ea:3a:ff:46:7b:6a:97:32:1e:d9:14:eb:
                    e2:9f:c5:78:fa:4e:30:9e:49:60:d9:bb:8e:bd:87:
                    f6:3d:d2:4a:78:63:07:37:5f:ad:3f:cf:02:60:41:
                    0f:6e:e4:82:be:ec:b7:c2:2e:2e:18:2e:f1:c8:10:
                    5c:4d:d8:10:99:b1:6a:8b:80:57:18:05:bf:a2:de:
                    7d:e5:94:aa:d9:2f:f8:03:e0:a0:53:5f:90:7c:07:
                    a1:51:89:35:c5:47:62:da:7d:1e:1c:e9:03:67:5c:
                    b4:2f:1f:0c:a6:da:6c:d0:e5:e0:df:d9:f7:7b:a1:
                    9b:75:d5:e7:aa:25:7a:a6:b5:23:58:e5:1a:d7:16:
                    ac:ad:83:89:22:35:59:19:e0:8b:70:30:1c:9a:51:
                    69:18:d6:be:a1:d5:64:e2:81:59:58:bc:12:b4:d9:
                    2f:58:af:9a:e0:77:57:7f:2a:ce:5a:eb:de:09:7e:
                    10:49:da:a5:3a:fb:4b:4f:87:8f:e8:13:bd:6c:4a:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:70:E9:B1:E2:8A:99:80:2A:B3:D9:89:8D:67:F0:43:7D:93:F5:AB
            X509v3 Authority Key Identifier:
                keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c0:e9:b7:6b:54:8b:93:03:b8:0f:f7:79:b6:54:8c:d6:e3:
         97:9c:1c:b8:11:95:22:4d:b4:ab:ec:42:e8:99:72:88:93:db:
         e8:f2:9e:8d:11:55:06:9f:77:df:db:31:90:8f:41:b6:8d:b3:
         67:32:e0:6f:a1:63:15:11:ea:f9:b2:f4:0a:23:5b:b8:ad:73:
         e9:d1:ca:66:1d:16:03:07:fb:4a:9b:00:a7:e2:c6:a1:ea:a5:
         a6:25:45:45:34:8a:9b:cf:61:98:54:dc:a9:0e:2a:01:f0:b8:
         ea:90:7d:44:08:e7:8e:d7:86:ed:64:e3:bc:8b:5a:9d:ee:78:
         6f:5b:27:62:07:63:77:79:1e:73:97:5f:9c:d6:cf:c9:7e:4e:
         65:99:24:6b:70:67:5d:c3:87:78:f0:d5:64:5f:1c:5f:df:1c:
         df:b8:a2:e7:6e:de:8b:87:05:23:8d:be:30:4c:07:03:8e:69:
         34:15:3e:d3:21:f4:ea:99:db:f4:32:f4:8e:49:64:55:88:3f:
         87:61:ca:71:b4:30:5e:d1:ab:ef:99:31:37:4f:9f:58:4b:8e:
         07:c7:3f:c6:8a:83:4a:39:87:3c:00:d4:0d:b4:08:55:48:a5:
         8b:83:93:88:d8:4b:b3:b1:fe:73:db:19:ef:68:2e:f9:4c:b2:
         9f:a0:2a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:40:06 2024 by rpki-client on console-fra.rpki-client.org