Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.mft
File:                     cnMJ8RA0fMYbjCe7-_EKa_tAg1g.mft (raw, json)
Hash identifier:          Fr+Nue8Hq0rLpARgUlljU/2ItJTeUQt+2cnd0ULjW74=
Subject key identifier:   14:F7:7B:16:41:02:D4:F0:1C:18:55:97:D0:A6:86:73:98:67:74:53
Authority key identifier: 72:73:09:F1:10:34:7C:C6:1B:8C:27:BB:FB:F1:0A:6B:FB:40:83:58
Certificate issuer:       /CN=727309f110347cc61b8c27bbfbf10a6bfb408358
Certificate serial:       018F874894C0225B4E95DC185FFE4AF17EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:31 +0000
Manifest this update:     Fri 17 May 2024 16:00:31 +0000
Manifest next update:     Sat 18 May 2024 16:00:31 +0000
Files and hashes:         1: NplcFubroD0c9_m5XESUogvREeU.roa (hash: fvGiAMX26rt+6MZ9wPZn53HDBw8BNzXJgc+tu8I6Vbw=)
                          2: cnMJ8RA0fMYbjCe7-_EKa_tAg1g.crl (hash: 1C30T4GCUM3wFS1v4v5DuMa1nrrEmq/nPgIdgUQxIYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:94:c0:22:5b:4e:95:dc:18:5f:fe:4a:f1:7e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727309f110347cc61b8c27bbfbf10a6bfb408358
        Validity
            Not Before: May 17 16:00:31 2024 GMT
            Not After : May 18 16:00:31 2024 GMT
        Subject: CN=14f77b164102d4f01c185597d0a6867398677453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:06:13:af:6b:a1:7b:a9:f7:21:ad:91:0b:
                    6a:48:75:e8:ae:76:31:cb:17:12:3a:40:7d:92:86:
                    a5:1b:b2:53:7a:ab:f9:11:4e:6b:e9:05:87:2c:52:
                    97:44:6a:53:0d:b2:26:2d:d7:46:cc:34:dd:76:df:
                    b1:27:64:e6:0a:a4:05:68:8a:42:15:2c:ed:7c:8f:
                    c0:2a:54:cc:93:06:59:17:dd:a3:67:da:9e:88:66:
                    1f:66:9b:eb:17:05:f5:32:30:39:97:ee:a2:ba:f6:
                    fb:c4:5f:b3:32:09:17:69:b7:ff:ef:5f:c4:44:05:
                    8a:b8:97:7a:44:f3:51:9c:2d:99:8f:b3:41:dd:19:
                    ab:67:f7:31:e4:ab:80:02:fd:f3:d9:19:cc:3d:f6:
                    5d:bc:8e:84:74:ff:a4:de:0c:8b:15:b8:fa:f3:02:
                    58:29:62:33:a0:94:92:0b:e7:47:29:90:d9:3f:97:
                    af:db:74:dd:bf:81:15:73:d8:ab:db:2d:14:28:8f:
                    08:3e:04:a1:bf:1e:a3:84:4b:e4:91:6e:53:cb:ac:
                    3d:9e:46:a2:a5:b1:03:be:97:4c:09:29:4f:c9:b3:
                    b0:16:e4:38:19:05:5c:87:a8:b9:3d:dd:76:2d:56:
                    38:1b:2c:fb:f0:8d:38:e1:b1:6e:c5:1e:93:70:62:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F7:7B:16:41:02:D4:F0:1C:18:55:97:D0:A6:86:73:98:67:74:53
            X509v3 Authority Key Identifier:
                keyid:72:73:09:F1:10:34:7C:C6:1B:8C:27:BB:FB:F1:0A:6B:FB:40:83:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:6c:dc:b7:37:56:cb:f8:89:82:9e:d7:54:5d:81:a7:23:
         fa:d2:7f:7b:38:97:8e:6b:f7:02:bb:c0:d8:54:a7:bb:3e:2e:
         fe:27:b7:27:9f:95:89:5e:4a:2a:1c:35:49:24:d1:70:8f:0b:
         ca:3a:43:2c:4e:9b:9d:d6:03:29:d8:85:73:8f:53:17:cd:35:
         c1:3d:84:6d:fd:e6:18:03:5a:b9:32:6c:69:14:4a:62:4f:25:
         d7:52:71:db:9d:b3:93:64:76:db:55:b6:8c:8d:82:1a:2f:1e:
         18:c6:23:14:08:75:2e:57:41:91:2f:0b:31:22:46:1c:96:42:
         80:be:1f:5e:ce:f5:4c:17:71:af:fa:2f:31:4f:8f:70:aa:e5:
         4d:f9:88:78:0b:3c:d0:47:72:86:c8:d4:d8:2c:01:ad:91:2e:
         0b:34:16:e0:c6:69:d4:ed:b7:84:9e:f7:17:64:9b:ac:65:0f:
         f3:6f:17:97:a1:0a:3d:eb:81:87:7f:93:51:77:0d:b9:7e:f1:
         ed:4e:58:25:32:2d:b8:1a:c0:29:6e:fd:5a:bd:32:00:94:df:
         06:23:18:62:58:97:a2:b0:13:b9:17:0c:33:91:79:c6:5d:b4:
         a9:fd:a2:ba:6e:dd:be:9d:af:b0:9f:b6:ae:d3:2e:d8:b6:fe:
         7e:51:7f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:22 2024 by rpki-client on console-ams.rpki-client.org