Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File:                     iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier:          QdsAqgClgPPnGLTpyjrQGfxY/x6oiAMQUb5OKx8dhtA=
Subject key identifier:   95:BB:27:2F:51:0E:78:4C:B5:9F:EE:22:C3:C2:41:04:61:12:B5:FE
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer:       /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial:       018F874A1E55373F756F6B406E64151A9D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:12 +0000
Manifest this update:     Fri 17 May 2024 16:02:12 +0000
Manifest next update:     Sat 18 May 2024 16:02:12 +0000
Files and hashes:         1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: FRyFDOFQzvRUnww7YfKiP3F/0buN6UzZjDcgxumSr4w=)
                          2: xWz79t6A7nNBlz18f_XTjGjlem4.roa (hash: 09ITprOCkmAUezK4IAMhLZ/Y0pwiFpYAM61TTE3IhJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:1e:55:37:3f:75:6f:6b:40:6e:64:15:1a:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
        Validity
            Not Before: May 17 16:02:12 2024 GMT
            Not After : May 18 16:02:12 2024 GMT
        Subject: CN=95bb272f510e784cb59fee22c3c241046112b5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:e7:d7:5a:91:1c:8b:19:c6:63:ee:11:30:
                    b5:1a:2d:b2:44:7f:5c:21:8b:5c:29:96:f4:60:0b:
                    e6:4e:0d:6f:25:7e:3f:b8:2e:da:00:e0:40:91:75:
                    bb:92:67:38:f3:e7:52:70:09:9b:92:71:2f:4e:86:
                    6c:62:ef:4b:04:61:5f:75:61:18:db:27:86:73:64:
                    12:98:47:5a:9c:00:aa:4d:cc:6e:e0:5f:9f:91:2d:
                    9b:18:99:44:b7:e0:fc:0d:d1:cc:e3:30:2a:41:5e:
                    c8:8f:cf:fe:7b:03:eb:1a:68:5f:49:e7:71:ab:26:
                    56:a2:e5:b5:fa:79:30:f0:35:eb:2a:e4:5c:6a:2e:
                    97:cc:9b:a4:48:3a:b5:ff:14:a7:86:89:ea:35:01:
                    a3:95:9c:a5:05:08:b4:93:f4:06:9a:c1:e3:ac:ca:
                    f4:27:ef:d2:35:21:1a:04:73:4b:ce:e7:69:ee:ec:
                    cc:1b:bf:b6:0f:6e:40:60:ef:bc:28:4b:3f:6f:bf:
                    59:68:89:1a:2f:c7:19:ab:cc:cc:31:56:b9:84:62:
                    c1:d9:83:80:ce:4d:4a:f7:5c:df:41:c5:4c:1a:c6:
                    6e:83:84:fc:62:99:a9:3b:a6:2b:a2:e0:5c:be:78:
                    eb:71:1e:18:12:b4:92:54:04:dd:12:88:83:23:b7:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BB:27:2F:51:0E:78:4C:B5:9F:EE:22:C3:C2:41:04:61:12:B5:FE
            X509v3 Authority Key Identifier:
                keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4d:82:c2:a5:8c:a4:fa:1f:06:65:7e:e0:41:f7:68:cf:a2:
         47:ee:ba:be:3a:87:99:5b:7d:1f:0e:8c:40:ce:f7:b2:bb:ba:
         f0:15:b5:26:a1:ba:2c:99:75:80:0b:29:c6:86:dc:d2:4e:a6:
         8f:41:76:8c:9c:76:12:fd:e6:bc:f9:42:3e:f1:c0:fa:7b:fe:
         10:9a:4a:a8:87:25:ab:dd:57:76:bb:82:c1:41:51:c1:db:4b:
         8d:7e:f5:0c:76:13:a4:24:ff:ab:33:02:f2:f4:a4:fc:c5:82:
         77:4c:91:d2:d1:ce:1c:c2:65:ef:d5:4c:69:8a:12:d0:82:7d:
         d8:f4:65:96:04:b3:5c:55:31:29:51:38:5c:89:47:d8:d4:2d:
         3c:9c:7e:a8:f5:f7:fa:53:0b:ae:e8:a5:e4:d6:93:38:78:0a:
         14:4e:c0:69:2d:ff:f2:e5:db:6c:8c:78:ba:9b:25:84:69:00:
         15:b3:44:39:25:06:66:8b:72:65:f0:c0:09:2e:b2:cd:a7:e4:
         ea:a7:83:08:0e:6c:1a:1c:51:f2:9a:1b:97:bc:e4:16:e9:b6:
         d4:c4:fe:a4:f0:00:50:8b:7d:12:e3:9e:6c:69:90:f9:11:17:
         6c:fe:63:ab:82:99:d5:ed:3d:c3:cf:56:26:9e:a1:f5:ef:cc:
         4e:ff:b3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:00:59 2024 by rpki-client on console-ams.rpki-client.org