Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File:                     hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier:          A+ErI75AKep0dArx8gD/j5mgObQajMMZV3OVQdwRZYY=
Subject key identifier:   02:7C:C6:84:63:22:96:02:3F:71:A8:B1:AC:FF:FC:CC:1A:02:BA:3D
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer:       /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial:       018F87B65364EE772DE00700D712BF39FE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 18:00:23 +0000
Manifest this update:     Fri 17 May 2024 18:00:23 +0000
Manifest next update:     Sat 18 May 2024 18:00:23 +0000
Files and hashes:         1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: vNCiiDeM69Usnfoj8zmahHj4Gr8sckytE0Zj6TvIuuo=)
                          2: tNFRmswT2bxBow-5I-1iXkORBDY.roa (hash: +58OME90CWAxk2q3BhetF12hSJ3iD9yZCX+rEgoejIU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:53:64:ee:77:2d:e0:07:00:d7:12:bf:39:fe:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
        Validity
            Not Before: May 17 18:00:23 2024 GMT
            Not After : May 18 18:00:23 2024 GMT
        Subject: CN=027cc684632296023f71a8b1acfffccc1a02ba3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:8a:f1:43:f4:98:4a:8e:6b:68:8e:17:31:
                    40:e6:57:dd:ac:38:8a:20:6d:1a:35:99:48:57:5c:
                    01:51:d8:3b:75:db:88:74:73:6a:3c:5f:67:24:b2:
                    2f:96:44:0c:eb:30:3a:20:b3:a2:74:80:b2:c7:eb:
                    a3:85:9f:44:46:fa:c4:c9:09:4f:0a:f3:cc:35:67:
                    36:90:66:d2:60:9f:a1:0a:88:6b:fd:0a:f1:1f:c9:
                    f7:ab:9b:ed:53:11:c1:ad:49:bb:13:68:94:29:ab:
                    2b:a5:8f:75:56:9c:30:7d:b6:33:7f:83:32:27:eb:
                    6f:10:87:fc:a1:49:da:1e:83:81:05:07:fd:ef:31:
                    38:21:69:90:1c:a9:7f:c7:fd:68:23:62:51:36:96:
                    ed:35:73:64:4a:52:e5:42:4b:33:ab:57:e9:6c:9f:
                    24:c8:25:56:72:1c:24:2f:d6:27:07:06:b9:22:7c:
                    f9:a6:70:65:83:3e:1a:d1:e0:e1:51:69:62:1b:ba:
                    7f:5c:be:bb:35:de:44:8d:53:a4:f9:e9:de:e8:28:
                    86:7e:bb:1a:3c:50:13:78:23:c2:ac:82:bc:da:87:
                    b1:d8:18:b2:cb:d7:ca:df:67:9b:93:48:a8:a3:ee:
                    ba:ce:7f:20:44:0f:03:cd:e4:98:0b:38:8a:01:4d:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7C:C6:84:63:22:96:02:3F:71:A8:B1:AC:FF:FC:CC:1A:02:BA:3D
            X509v3 Authority Key Identifier:
                keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e4:73:44:04:bd:f9:8f:51:35:9f:3d:0c:1a:d4:df:58:3a:
         23:2b:12:40:50:54:31:19:0d:01:ae:24:bb:67:12:75:5b:32:
         78:af:3b:bd:eb:c0:b3:6b:25:2b:47:a1:2c:04:96:74:2c:18:
         78:bc:07:2d:0d:16:fa:1e:5b:12:24:1f:7f:fa:25:10:19:00:
         a9:f9:a4:7e:e3:52:87:a8:ef:3b:6c:0a:00:db:28:9f:0d:31:
         27:04:bb:5e:d1:76:47:b3:be:43:4f:3e:b6:a6:5b:c2:51:53:
         13:8d:23:f9:ea:99:ed:c8:7c:75:f1:e0:fb:32:30:f1:c5:d6:
         f2:59:02:48:07:fa:2b:2b:a7:22:78:32:cd:d7:65:56:87:3b:
         a2:f1:03:78:b3:db:49:47:ae:a7:9d:56:4f:d3:fd:16:cf:10:
         c7:0a:c1:95:8d:14:33:4e:07:88:79:00:c1:47:36:37:eb:9c:
         2a:6e:fc:75:22:5c:3f:f0:73:86:b9:bd:06:a1:53:2c:e0:f6:
         bf:50:90:57:f8:96:ca:0f:76:d4:ba:1f:94:2b:3f:73:69:7d:
         8d:da:28:45:a6:8f:af:78:8b:93:f7:93:86:6b:4c:69:dd:97:
         44:a7:5a:d8:82:e4:e2:12:11:e6:1e:1c:b2:52:49:f4:a5:4c:
         46:69:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:42 2024 by rpki-client on console-fra.rpki-client.org