Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File:                     guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier:          nkbTak3QHCKxw1hiqdRJrcaLIjDZ0J/3KRr+ElRxEYY=
Subject key identifier:   D8:8C:FE:07:A1:36:6A:F0:99:B8:7C:94:19:25:64:E1:92:0F:5D:27
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer:       /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial:       018F874AD0AF34C88D8B06D5DE950492F483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:58 +0000
Manifest this update:     Fri 17 May 2024 16:02:58 +0000
Manifest next update:     Sat 18 May 2024 16:02:58 +0000
Files and hashes:         1: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: MpiXU7KawO3VCZeszqO1cRv6xdvyDgwkTbTTMe9U6uU=)
                          2: yov8mfRMcDkzDQV5fc4AzSQ5_FU.roa (hash: coSFxOgNW4wdRRgyYW7mMVqA6SAmpH07en3EVw9+z00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:d0:af:34:c8:8d:8b:06:d5:de:95:04:92:f4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
        Validity
            Not Before: May 17 16:02:58 2024 GMT
            Not After : May 18 16:02:58 2024 GMT
        Subject: CN=d88cfe07a1366af099b87c94192564e1920f5d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5f:f2:37:d4:1e:a0:fa:3a:ab:f7:0b:7b:fa:
                    be:00:2c:79:ee:a7:36:f2:18:52:30:37:c9:cc:42:
                    b6:3f:0b:02:83:7d:32:68:db:4b:30:61:1e:0c:2f:
                    46:ec:dd:ae:f2:0d:2b:3f:e4:3a:70:b1:33:62:1e:
                    c6:8e:40:68:bc:c1:48:8e:a8:e5:72:70:9d:6e:75:
                    d1:36:93:aa:81:0f:9f:b8:65:85:45:ac:fb:06:a8:
                    fa:dd:8c:8c:19:39:4f:56:ba:c0:c3:b4:f5:e0:ce:
                    4d:3a:d6:0d:1e:27:c9:7d:3f:13:99:6b:b1:a8:f2:
                    1c:9f:f1:5d:1f:7d:16:53:11:46:76:d2:e4:28:d0:
                    29:d2:92:28:91:45:91:50:2f:09:59:70:9e:fb:dc:
                    03:2f:35:7e:bb:f3:05:92:8a:30:ed:00:54:44:e5:
                    81:04:1c:f6:3d:96:ac:82:26:86:2c:70:f0:df:df:
                    12:3f:a7:80:55:f6:a1:15:ed:b3:04:f6:b4:63:91:
                    33:fc:0f:ce:1e:3b:18:bc:75:df:b5:a5:9b:6f:38:
                    b2:06:e2:b2:78:ab:08:4f:0c:25:10:0d:8e:d7:6f:
                    88:b8:a9:28:7c:39:da:3b:c0:75:0a:3c:73:8e:19:
                    26:21:61:85:fd:24:50:ec:05:2c:78:9f:0e:c2:4c:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8C:FE:07:A1:36:6A:F0:99:B8:7C:94:19:25:64:E1:92:0F:5D:27
            X509v3 Authority Key Identifier:
                keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:fe:b3:33:a3:09:85:d1:83:77:81:1d:15:c6:bb:e8:65:
         df:70:88:cf:3f:22:a6:d5:cb:8b:3f:55:b7:08:c8:35:c6:6e:
         ec:b9:6a:a5:4f:d7:a5:62:4b:04:b9:4f:c8:b9:a0:5c:5f:ab:
         05:34:dd:46:eb:9a:b3:e3:4c:c8:e8:e8:fc:de:b1:bc:76:c9:
         4f:79:d9:22:e4:33:e2:9d:1f:61:b2:ab:fc:b0:5d:a3:2e:f1:
         05:f0:61:82:c7:19:a9:13:27:98:2e:ac:d9:25:dd:53:ed:fc:
         21:00:90:2d:99:4c:c5:55:f8:6f:60:f6:8a:ba:8b:62:5f:4b:
         b6:99:f2:a2:3a:6f:de:4c:9d:8f:df:56:98:fe:9e:e3:74:8f:
         2d:bd:ac:ca:cd:b5:de:46:0a:82:b2:01:81:63:d6:bf:2c:a2:
         39:01:85:04:43:6e:cf:fa:65:65:5a:19:fa:eb:d3:ce:d7:2b:
         6e:49:00:d1:5c:41:e4:3f:2c:29:b5:ee:64:2c:d3:dd:96:0c:
         d7:65:c7:31:f9:3f:4c:7f:84:28:b2:4f:2e:c4:9b:ad:9c:4a:
         16:9a:11:a4:1f:40:75:f0:70:49:0c:d6:a4:ca:10:eb:69:09:
         1a:50:8b:df:cf:06:17:e9:82:23:6c:89:1e:0c:e3:3a:63:62:
         9c:b1:96:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:22:43 2024 by rpki-client on console-fra.rpki-client.org