Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File:                     iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier:          IcGK8Hpeh9TsPw7QgMvMhzsO+79/ss+Aw9Kv1VjGf+c=
Subject key identifier:   65:46:D8:0E:DE:65:3B:21:B5:AF:30:72:3F:DF:98:6B:A8:B0:6D:43
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer:       /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial:       018F874A48749386D2D6F3DF29D21C8F939F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:23 +0000
Manifest this update:     Fri 17 May 2024 16:02:23 +0000
Manifest next update:     Sat 18 May 2024 16:02:23 +0000
Files and hashes:         1: hasa0coTrJTulX3r78a2jLaNCXY.roa (hash: w7HShToJQZygUOFy2xUiPHLj0oWPGKKUt1xWhnZx8wE=)
                          2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: Zx3NOaeWw3U1fbFAFxEtqQtvVnGqF8f8Nb/zCKCjo2k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:48:74:93:86:d2:d6:f3:df:29:d2:1c:8f:93:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
        Validity
            Not Before: May 17 16:02:23 2024 GMT
            Not After : May 18 16:02:23 2024 GMT
        Subject: CN=6546d80ede653b21b5af30723fdf986ba8b06d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:0c:95:90:b4:b7:98:4f:72:0c:63:13:d3:
                    72:3c:57:a4:63:a4:22:e1:e9:f2:67:37:fc:b3:9d:
                    9f:f0:91:44:5c:4b:72:26:84:39:c1:df:ca:ae:f9:
                    21:05:b9:d5:7f:d8:9c:9e:63:89:17:fd:3d:3b:ea:
                    a8:7b:8b:b0:d5:59:e1:e5:3d:24:3d:36:78:e8:78:
                    5d:a1:62:52:fa:1a:9d:5b:8f:af:61:e1:8b:1b:96:
                    82:f4:a2:a4:b1:35:f0:ca:32:df:b7:00:e6:34:bd:
                    85:49:6f:9f:76:c2:b1:dd:aa:e5:0a:bf:ee:79:2d:
                    cf:8e:dc:2e:c9:ac:70:1a:77:90:cf:95:29:91:46:
                    e7:33:b6:63:f3:dc:55:3d:ea:e0:e2:8a:78:78:6c:
                    8a:7f:79:02:98:7c:76:d3:84:53:7f:86:0b:ee:12:
                    bd:75:32:83:23:5d:53:5b:93:d4:e6:b2:cb:19:c2:
                    cb:b1:aa:eb:ee:71:c5:e7:64:88:cc:96:25:2a:23:
                    11:a6:69:62:62:7b:64:11:b4:a7:1b:23:50:e8:c6:
                    1f:cd:69:28:c3:ef:a9:ca:17:da:1b:e0:11:00:9a:
                    be:f8:82:78:76:d4:56:bd:da:48:04:75:7f:85:48:
                    29:23:86:ea:52:f4:37:b5:58:9c:4f:1f:66:09:c0:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:46:D8:0E:DE:65:3B:21:B5:AF:30:72:3F:DF:98:6B:A8:B0:6D:43
            X509v3 Authority Key Identifier:
                keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:69:ec:09:8d:c3:ea:b2:d1:dd:bf:24:cf:4c:28:38:44:de:
         05:b3:ea:01:3d:87:a2:1a:b4:40:b4:b4:78:48:30:f3:2c:29:
         6f:bc:cb:24:6a:11:5c:ec:25:da:33:84:d1:88:05:8f:a7:32:
         6b:3d:ba:a0:2b:46:8c:2a:00:92:ec:22:2b:53:3e:8f:38:08:
         95:aa:d0:bb:08:e7:a3:55:d4:31:26:3c:fa:a2:f9:43:0b:d6:
         fd:7f:20:77:ee:f2:75:96:43:31:d7:6d:91:46:33:0d:4f:ce:
         45:4a:90:08:31:a3:1d:b4:b2:34:58:df:f9:58:04:e2:d5:76:
         12:a0:08:75:d8:67:7a:5d:fa:a0:d5:b4:14:ec:d2:51:aa:d5:
         18:43:db:2c:a2:58:4c:54:0a:83:af:d0:a3:32:df:e1:67:61:
         59:bd:3e:d6:7a:5f:96:ab:b7:e1:89:02:28:71:d3:9f:26:2a:
         df:d1:85:75:47:a2:1f:b7:d3:e4:aa:8a:ab:c5:ae:23:57:d0:
         90:77:b5:42:f3:e3:34:41:9e:bd:2b:93:7b:db:6c:9d:c0:54:
         70:03:22:0b:99:07:eb:76:d5:5b:17:c8:d5:50:26:0f:3e:ee:
         7f:70:b9:09:88:24:c7:b8:be:4d:fb:f6:9f:31:86:33:52:04:
         28:5a:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:30:05 2024 by rpki-client on console-fra.rpki-client.org