Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File:                     aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier:          FeN5eJCbUCfFRXv+VHnkQyt2D8YJdRaB3xC42z1tODI=
Subject key identifier:   3E:DB:9C:E7:64:50:F5:8C:2D:13:27:0F:A4:0F:7B:C4:58:08:58:B1
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer:       /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial:       018F874A7BE1341B2DE5660DAD7F09B09551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:02:36 +0000
Manifest this update:     Fri 17 May 2024 16:02:36 +0000
Manifest next update:     Sat 18 May 2024 16:02:36 +0000
Files and hashes:         1: Ke3fPbyPoP0iliEO-Uxm5ka7GR4.roa (hash: 71+dNE7DDYN9SsbzDneRhpVvS2KJwnBuE4cfmD8jMKg=)
                          2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: 0SLa+AA/EgZV2T9jqS5+GajFON7BpB5fXeJJjHrvPRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:7b:e1:34:1b:2d:e5:66:0d:ad:7f:09:b0:95:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
        Validity
            Not Before: May 17 16:02:36 2024 GMT
            Not After : May 18 16:02:36 2024 GMT
        Subject: CN=3edb9ce76450f58c2d13270fa40f7bc4580858b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:fb:bc:71:e3:c5:fb:88:0f:b7:1b:78:b6:
                    2c:15:33:75:f2:82:da:6f:6c:9d:81:e4:36:ff:f0:
                    df:55:4f:9f:41:67:d7:8c:49:13:eb:87:c0:3d:ee:
                    5f:1d:e2:ed:91:78:57:40:72:f1:9a:86:1e:65:6a:
                    82:7d:9d:7b:11:40:ec:73:c2:1b:80:a4:f5:01:35:
                    e8:82:19:70:e5:44:1a:9e:f9:d7:71:b3:b6:e1:9f:
                    08:23:cb:36:88:6f:65:b5:c7:75:b6:92:df:67:90:
                    e7:9e:2b:57:ca:48:23:dc:90:6a:ed:b9:a2:5d:f5:
                    9a:e4:8a:d8:81:67:e3:08:7e:46:47:54:08:5f:c6:
                    c6:4e:f8:c5:37:50:a5:de:cc:e1:31:e1:13:80:6d:
                    df:a1:96:af:28:ee:64:e7:88:ec:1a:ae:4e:1e:a3:
                    dd:75:5b:59:fd:f7:db:31:31:ab:1f:f2:63:88:24:
                    13:34:c4:10:d0:5d:d0:80:93:06:b6:0a:a7:e7:4b:
                    7d:4c:9c:4f:02:46:ff:0f:38:fb:4e:7b:18:5d:fd:
                    f4:9b:db:1c:62:6d:7a:4e:38:ac:84:f6:63:c1:8d:
                    f2:ea:ef:3b:62:38:d2:2d:e7:3b:f5:87:ef:10:1f:
                    65:ca:08:ef:9f:3e:fb:b2:3b:7e:5b:b3:d6:ea:a7:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DB:9C:E7:64:50:F5:8C:2D:13:27:0F:A4:0F:7B:C4:58:08:58:B1
            X509v3 Authority Key Identifier:
                keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:7b:48:ca:9d:9e:f5:fd:08:40:d4:61:3e:7a:ee:88:40:
         19:da:03:3e:7b:18:2d:3e:32:b5:49:2d:45:27:7c:da:6a:6f:
         66:19:ac:4c:13:ca:21:3c:81:89:ae:97:b2:1d:a2:b7:5b:cf:
         5d:56:0d:d8:9e:41:c5:82:76:dc:9d:5d:b9:97:7b:ea:28:d8:
         d3:06:fc:48:fc:45:ac:0e:e2:67:d8:8e:c7:a5:1a:34:bd:b4:
         d4:00:23:fb:1c:c4:5f:63:4b:6e:fd:0a:fc:d6:a0:95:6c:e7:
         ad:db:31:38:dc:dc:ee:30:4a:e0:86:e8:29:81:d5:a7:09:05:
         e6:43:9e:60:2d:9a:b5:f1:4d:bc:fd:53:f4:af:51:af:fe:ba:
         87:d1:24:6c:d1:44:75:47:40:06:c7:d6:47:8b:d0:3e:d4:27:
         f0:eb:f5:ff:7f:8d:6d:2f:4d:4d:1c:df:13:bd:7c:70:d9:a5:
         79:e7:51:71:7f:74:75:87:3f:0b:36:33:cc:ab:1c:90:75:16:
         72:0a:21:0e:5a:54:8b:e1:06:dc:97:b1:ee:be:c0:b5:91:00:
         c6:4d:37:17:08:d9:8b:ed:d5:fb:3e:49:7c:33:73:9e:43:5d:
         51:5e:9e:60:1d:1b:51:c0:70:68:aa:03:ec:45:65:a0:8f:4d:
         39:89:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:13 2024 by rpki-client on console-fra.rpki-client.org