Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
File:                     x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft (raw, json)
Hash identifier:          HkhfPga+dl6e3JomUntmU2jdljv5l8eCsbkWlNlXwVM=
Subject key identifier:   8B:A9:01:C6:62:9F:08:EA:A0:92:42:5E:3B:AD:3A:94:4A:78:6C:0A
Authority key identifier: C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E
Certificate issuer:       /CN=c77549551405d9948c662dfe4de24de055daff5e
Certificate serial:       018F87ED4DB435E5D7E7C4F01BC584D6BE2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:27 +0000
Manifest this update:     Fri 17 May 2024 19:00:27 +0000
Manifest next update:     Sat 18 May 2024 19:00:27 +0000
Files and hashes:         1: x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl (hash: gcwHlrilPwDnr8C72P1hYnz/IsvRmy54z930Cov/wJA=)
                          2: xeCC09-APkVgot3bZ8TLvkYxGz4.roa (hash: sCsChzvcOaPGQ9zzClwfRx8AsWAbZWQXGAakl44CtdE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:4d:b4:35:e5:d7:e7:c4:f0:1b:c5:84:d6:be:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77549551405d9948c662dfe4de24de055daff5e
        Validity
            Not Before: May 17 19:00:27 2024 GMT
            Not After : May 18 19:00:27 2024 GMT
        Subject: CN=8ba901c6629f08eaa092425e3bad3a944a786c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:59:c6:14:7e:7f:58:14:21:25:61:c2:f3:2f:
                    fa:af:be:97:03:02:4a:63:8d:ae:77:87:dd:cc:66:
                    4a:93:d4:65:c6:4c:e3:6b:73:bd:bc:09:31:b2:02:
                    cf:62:2f:66:52:be:fb:17:19:77:88:1b:a9:64:ae:
                    e7:f1:63:10:df:b4:ba:c6:bb:cc:e5:5a:f1:67:e7:
                    08:a7:e0:96:f1:15:79:52:ed:1e:a8:f7:d9:39:1f:
                    99:a1:1a:49:39:04:c7:b9:04:ad:07:c5:04:33:ce:
                    42:5c:b1:31:68:86:de:d7:3c:c4:ca:7f:47:f3:49:
                    fa:2d:c4:3c:c6:25:1f:97:27:47:2a:3c:9f:8c:14:
                    a1:4c:7e:87:9b:9c:2c:26:60:23:c7:36:a2:06:17:
                    02:dc:60:5a:2e:a9:d4:8c:61:98:7e:15:28:93:73:
                    86:04:3b:c7:6f:50:72:13:12:2d:35:ff:3f:45:c5:
                    af:00:e1:aa:c4:b4:f3:cf:11:0f:62:6e:b1:95:b9:
                    48:58:bf:29:2a:a9:a9:7d:5a:8a:4a:96:83:ac:f5:
                    18:3b:28:0a:d4:e8:76:8a:40:23:7b:7c:bf:3f:aa:
                    91:20:1d:3f:62:81:48:c0:d9:5b:4f:ee:5c:11:e0:
                    db:69:2c:a1:d4:1f:39:5e:6f:3f:3a:68:ed:c2:48:
                    fe:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A9:01:C6:62:9F:08:EA:A0:92:42:5E:3B:AD:3A:94:4A:78:6C:0A
            X509v3 Authority Key Identifier:
                keyid:C7:75:49:55:14:05:D9:94:8C:66:2D:FE:4D:E2:4D:E0:55:DA:FF:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3VJVRQF2ZSMZi3-TeJN4FXa_14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5a4341-bc5f-4246-92ea-1bf75f75fa87/1/x3VJVRQF2ZSMZi3-TeJN4FXa_14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:14:6e:8b:9d:2a:5a:a6:7c:cd:37:90:2e:f5:bf:8a:39:73:
         8b:9d:ce:37:6c:1e:b0:f3:66:27:90:47:5a:0f:de:b6:c4:33:
         d2:86:aa:8a:37:7b:d6:85:28:89:b6:28:68:30:88:49:62:c8:
         d7:24:8b:9e:53:a2:b0:c6:cd:b6:34:92:fa:fe:21:35:ba:e8:
         21:bb:d0:69:49:28:b6:fe:f3:3c:10:e4:f0:6b:5d:38:cf:1a:
         25:f1:1f:c1:89:85:56:e4:7c:d4:ca:50:6b:81:46:6c:cf:c0:
         b0:9e:7e:8c:b4:65:ef:da:a7:ec:38:4b:17:7a:62:df:78:8b:
         47:dc:36:ee:97:c8:da:68:15:18:ea:ea:76:86:51:34:58:fe:
         b6:d0:09:19:5b:2d:a0:9e:c4:27:c2:0e:0e:c0:4e:9a:59:29:
         68:56:5e:96:5c:03:1b:4c:28:cf:a3:b1:fe:31:34:f4:77:ee:
         b9:c7:ae:e8:d5:92:c5:67:f4:fe:65:da:6c:42:4e:a1:0c:73:
         17:5f:38:2f:19:b4:e7:da:4b:8f:4b:15:6f:65:fc:75:fc:1e:
         94:e2:22:74:4c:6c:ea:53:6e:1d:66:bc:81:f6:f5:d6:f5:fc:
         da:ad:42:06:7a:c3:f5:fe:b5:13:52:ae:ad:a2:f5:ca:97:00:
         71:90:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:43 2024 by rpki-client on console-fra.rpki-client.org