Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File:                     kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier:          q6d3pqo04fC3OB3RAMDXX4jQ7t9xB1XSGD+AGbt40fo=
Subject key identifier:   EB:70:09:17:A9:CC:BE:EA:B3:A0:90:ED:13:DF:8F:75:A1:3B:56:37
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer:       /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial:       018F88926D9C871C8E5558C2BC8B95D1C0AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 22:00:48 +0000
Manifest this update:     Fri 17 May 2024 22:00:48 +0000
Manifest next update:     Sat 18 May 2024 22:00:48 +0000
Files and hashes:         1: Ve7qTSfSuyUzC3Ka1MdZh0k_2Vo.roa (hash: Vm6gEcAMPfxaiYr6nJ4B7+74KQBTRq8x4yX49QGV7E0=)
                          2: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: SiQWu5QbvEQO8DBe68rOyzXns+Pw/ciM0bDXb/98200=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:6d:9c:87:1c:8e:55:58:c2:bc:8b:95:d1:c0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
        Validity
            Not Before: May 17 22:00:48 2024 GMT
            Not After : May 18 22:00:48 2024 GMT
        Subject: CN=eb700917a9ccbeeab3a090ed13df8f75a13b5637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:72:46:04:85:a5:f6:f2:b0:80:ec:b9:4b:
                    df:a7:0a:8c:30:6f:01:28:54:d0:dc:2f:c9:ae:fc:
                    af:7f:06:cf:e8:57:76:f3:21:85:73:b5:56:f3:46:
                    d5:5a:1f:33:1c:1a:f7:0f:41:00:2e:74:54:61:5b:
                    64:5a:25:8b:69:15:29:7a:b9:f3:c3:16:ef:06:19:
                    80:5e:5c:02:a4:03:30:76:f5:ad:0d:71:f7:cf:3c:
                    05:60:24:87:4a:7b:73:c2:4a:cf:61:76:d6:16:12:
                    af:d7:33:e0:f8:9f:ac:03:fc:36:32:1e:b7:a5:0f:
                    49:65:19:d4:f9:f0:a1:7d:76:ca:8a:2b:64:d5:02:
                    ff:c5:fa:dc:d2:cf:ba:fd:8e:1b:23:22:1f:a0:0f:
                    89:89:6a:06:a9:a6:01:59:8d:86:bd:9f:6b:2d:4c:
                    95:f5:00:83:af:a6:ef:c4:69:bf:c2:4a:de:3f:97:
                    50:2e:19:fe:33:49:c9:cd:c0:2e:94:68:ab:b9:86:
                    66:53:b7:8e:2f:3b:86:e9:4d:12:4d:cd:d5:b6:ca:
                    b2:1a:31:7e:bc:5b:c3:49:a0:cf:ca:bd:2f:63:b9:
                    db:07:a0:be:5c:05:91:4e:d3:f6:17:2e:46:ab:43:
                    0c:c1:08:b1:c7:37:29:13:a7:48:6f:7f:fd:65:25:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:70:09:17:A9:CC:BE:EA:B3:A0:90:ED:13:DF:8F:75:A1:3B:56:37
            X509v3 Authority Key Identifier:
                keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:24:8e:f1:0e:14:34:9f:8b:b4:80:fd:a1:c3:0c:ec:e7:75:
         1f:00:5a:59:41:05:2d:ec:e7:23:25:2a:1f:30:40:2b:5c:dd:
         79:92:58:77:a2:25:8f:d4:d4:a2:03:54:68:39:b8:26:63:b2:
         0e:9e:84:40:e5:8b:eb:4a:79:e1:ac:8b:06:a2:0a:f0:78:19:
         b9:b1:be:0b:c5:f7:a1:f7:86:a2:15:d4:df:43:be:89:06:8f:
         ab:1e:f5:10:c5:58:41:05:90:f8:43:e4:9a:0b:87:b9:3a:bd:
         63:2c:98:2d:13:f6:6d:03:3a:b7:97:01:ad:0c:df:f5:33:f5:
         58:c7:b6:ff:8c:40:cb:48:28:fa:8b:11:5d:5a:40:fa:5a:c6:
         d7:d0:3b:07:b0:60:66:92:df:ab:1d:1e:1f:5c:a1:d4:f4:fe:
         be:0c:78:e7:13:b8:42:a2:30:bc:8c:65:28:31:f2:3b:c2:78:
         d3:0b:42:e1:e0:3d:0f:7b:11:f5:ff:c1:36:81:f0:c1:94:f0:
         ff:db:78:96:b3:1f:4c:03:a7:5a:2c:3f:0e:6e:0d:a5:20:31:
         d1:22:0c:1a:8d:65:80:e9:89:0d:ee:03:ce:42:08:9a:c8:43:
         a3:da:e6:0f:47:f5:a8:cf:ac:0a:7c:b9:2d:d0:40:58:bb:08:
         05:71:66:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:59:24 2024 by rpki-client on console-fra.rpki-client.org