Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File:                     mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier:          nDce5fh1TJjZ3jBEK5xR7zzdWUZzTcoF9WtQQ5ghsBs=
Subject key identifier:   81:7E:91:96:33:D2:D7:B0:4F:9F:08:32:18:24:9E:D2:8F:C3:89:E2
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer:       /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial:       018F87B6B38B4632685105DAE4021F007FAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: ACosnuMAqk944nypP/Bl9gKwBgCtPVcIa+Mnx+iV8KE=)
                          2: ypmW8onlmC65ZNCFGexcmBv7SII.roa (hash: HIJfX8EOYqIGTk36MD+GlcTgx0ueucdlEL9Zju/dBOA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b3:8b:46:32:68:51:05:da:e4:02:1f:00:7f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=817e919633d2d7b04f9f083218249ed28fc389e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b1:bb:e4:52:ca:ee:81:96:95:9c:bb:89:21:
                    66:e1:91:84:77:1a:01:bf:35:8e:e1:9c:60:fa:ef:
                    b0:0b:2b:80:c5:70:b2:29:db:f8:64:d0:02:0d:61:
                    03:78:85:79:ed:ca:23:a6:86:f9:7d:b7:66:4f:c9:
                    49:a1:b5:46:73:34:d1:2e:6f:e2:e6:68:e2:56:33:
                    be:e7:82:cd:ce:51:ac:d5:85:4d:01:41:d1:40:81:
                    81:ef:d6:66:59:1f:31:dd:e5:dc:4b:44:dd:92:fb:
                    70:98:7b:48:bb:91:47:a7:46:ec:de:f7:61:fa:29:
                    bb:a3:9c:34:ec:97:ea:37:c4:f1:32:a9:12:45:cc:
                    14:2d:56:1c:99:2a:51:6b:61:74:3c:72:7b:23:97:
                    65:72:91:03:df:45:84:c3:a7:4a:19:b1:00:b2:b9:
                    4a:0a:69:8b:2b:11:ff:81:91:1c:2f:06:c3:11:5d:
                    9c:66:4c:78:99:5a:4a:e7:23:8f:8f:f9:d6:c8:4b:
                    7d:da:46:d0:fa:e4:30:22:fd:9b:04:d0:f6:77:d4:
                    ca:04:9e:b4:8f:83:6b:a4:9a:05:bf:e0:5c:ef:96:
                    ba:ef:0a:cb:21:59:d1:f9:f1:99:ca:b1:aa:23:b7:
                    63:0c:97:68:0b:df:00:20:31:60:77:35:07:23:60:
                    e5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7E:91:96:33:D2:D7:B0:4F:9F:08:32:18:24:9E:D2:8F:C3:89:E2
            X509v3 Authority Key Identifier:
                keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:fd:12:c8:6d:7c:90:bf:1b:81:e6:4e:37:8f:eb:df:9f:
         48:ce:d9:84:d3:f2:3f:6a:99:09:1a:f7:c3:26:bc:0f:cc:14:
         45:4e:b3:77:15:19:f7:69:4d:69:d2:c2:ae:03:fe:e3:b6:c6:
         57:44:43:97:52:16:da:ba:ab:ae:4e:5d:07:1f:30:e0:e5:95:
         a3:4b:bf:38:06:e5:a6:d2:a9:d0:f4:ca:45:86:a9:ef:e0:f9:
         31:82:75:cc:7c:20:1d:ac:62:f1:c4:7a:18:48:69:4f:05:49:
         af:67:7f:ed:b8:63:82:fa:7e:f5:1c:b6:7b:69:03:d6:e7:24:
         1d:cf:6e:d1:aa:be:1c:86:4a:ca:cd:af:25:6b:af:09:60:fb:
         d4:40:a5:4b:d7:eb:8e:d8:cf:9d:12:7e:35:e6:72:ca:ec:41:
         f4:f2:d7:f1:07:8e:a0:49:c6:44:2f:bc:ac:06:a0:bd:58:26:
         8c:3a:39:a6:31:75:79:69:25:26:13:0f:61:9a:7d:39:34:a6:
         56:7a:4e:fc:9d:7a:23:1f:5c:2e:1e:10:b6:28:05:bf:fd:33:
         e5:44:bc:6c:69:40:78:2f:61:1e:d6:3b:d3:68:6a:c9:a3:bb:
         4f:21:44:b6:e3:f0:46:d9:2c:c1:46:0a:97:8a:ee:0e:f3:57:
         c5:fe:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:52:48 2024 by rpki-client on console-ams.rpki-client.org