Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File:                     mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier:          l88Ts67VW1YIuHYFyPSphi75tdThi8RRZvMFOydXNdc=
Subject key identifier:   2D:AF:24:00:26:FF:59:65:90:71:95:DB:33:9A:69:7F:60:73:3A:42
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer:       /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial:       018F8749FF10D4458139260DD85A014661D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:04 +0000
Manifest this update:     Fri 17 May 2024 16:02:04 +0000
Manifest next update:     Sat 18 May 2024 16:02:04 +0000
Files and hashes:         1: LIX5Ku6S2AYWWX85sO_V8f0rOu8.roa (hash: erOTdSaVnRD2fUxIPaB7c346uJMPrVnrq1/g7tb8HTk=)
                          2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: 2ol3T81wtsgg5ZMuEGLqK/2kbC7iSGu1KGr1ITy3jWA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ff:10:d4:45:81:39:26:0d:d8:5a:01:46:61:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
        Validity
            Not Before: May 17 16:02:04 2024 GMT
            Not After : May 18 16:02:04 2024 GMT
        Subject: CN=2daf240026ff5965907195db339a697f60733a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:ef:90:9d:6d:6e:3c:db:f4:e6:e1:b5:52:
                    d0:38:7e:62:c3:ed:15:9b:ef:b4:86:60:da:67:29:
                    29:c7:33:bb:33:9f:83:62:37:94:8d:89:fe:45:7d:
                    ce:40:92:1c:7a:8e:9a:ec:28:c4:98:8a:c3:e2:99:
                    a3:21:48:d5:48:64:d9:3d:87:75:78:22:79:39:37:
                    dd:f2:30:f4:7f:a1:aa:bb:98:85:f7:70:75:fd:2d:
                    7c:68:1f:6e:33:47:34:c0:60:a8:45:38:6f:6c:c3:
                    12:54:7f:7a:fe:ff:97:08:96:df:76:63:3c:0b:20:
                    ab:9e:88:65:e2:a2:67:61:0a:01:8a:c8:8f:bb:e2:
                    58:81:5e:e6:eb:9a:0c:ca:73:a1:fc:39:8d:95:45:
                    f8:14:ec:51:c0:51:0b:c1:3a:4c:eb:ee:f5:d8:bb:
                    23:23:4c:ea:bd:e8:a3:a5:c8:68:c0:2f:41:a2:0d:
                    f1:0d:20:2e:53:f2:37:b3:fb:46:5b:bd:00:bd:c8:
                    4d:3e:4d:5d:f4:a0:44:91:5e:37:5a:8c:87:f4:e8:
                    d2:b0:23:f4:b4:05:5b:0c:58:1c:6b:30:0d:49:9a:
                    38:ba:d0:b2:f4:2f:63:13:7b:ae:5f:8c:c0:3a:f2:
                    3e:bc:31:29:91:1a:40:ca:83:2d:97:20:59:2d:d4:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AF:24:00:26:FF:59:65:90:71:95:DB:33:9A:69:7F:60:73:3A:42
            X509v3 Authority Key Identifier:
                keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:66:c0:7f:98:e5:80:7d:4d:66:4e:5f:dd:0e:c9:f5:e8:90:
         df:5c:fc:54:1e:91:c7:c2:3b:0c:b1:9a:2d:2b:10:58:7a:2e:
         a5:39:56:1a:98:d5:0d:9f:ff:d1:8b:4f:2f:c4:c8:7f:dd:3f:
         4e:ed:ff:29:8e:51:58:de:f2:af:b9:dd:62:e3:78:b2:be:ab:
         01:42:2d:b8:ba:34:8c:98:db:d5:ce:87:eb:36:bf:e5:ab:60:
         ac:41:ee:70:06:35:02:0d:2d:a3:bd:1c:7a:7a:3e:93:00:82:
         5a:6e:82:32:6e:39:1b:54:e1:c3:5c:ed:f8:cd:bd:6c:9a:93:
         8c:30:9e:5b:b6:25:aa:ce:a2:91:35:d7:2c:b4:ca:6a:86:34:
         42:9a:30:dd:1e:ef:13:43:4d:65:35:51:a1:b0:a6:8c:ad:3b:
         7f:2b:d4:25:d2:ba:cf:0e:3c:01:39:68:56:45:04:d7:fb:3d:
         35:10:c9:a2:9c:32:ee:aa:b4:68:c7:ce:d0:fb:4e:6d:df:13:
         86:8d:f7:b9:b7:4b:58:16:57:72:fd:d0:58:21:18:a8:b0:65:
         59:5a:81:30:36:f6:de:00:e1:e1:31:db:7e:44:ec:2d:4d:a8:
         82:ce:71:25:98:99:c6:9d:4d:19:07:e0:ef:00:17:30:2d:60:
         2e:c0:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:00:05 2024 by rpki-client on console-ams.rpki-client.org