Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File:                     sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier:          uGT6h6YjhSmDeA6AQmcrH4GLSo5/ZPdqL1LwSk0NSF0=
Subject key identifier:   F3:C7:9B:D1:98:E6:3D:03:21:CC:6A:99:2F:FF:D8:71:06:FA:A8:2B
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer:       /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial:       018F8748EB7CA2FDA0D62553337301C14A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 16:00:54 +0000
Manifest this update:     Fri 17 May 2024 16:00:54 +0000
Manifest next update:     Sat 18 May 2024 16:00:54 +0000
Files and hashes:         1: amw_fGWF_WvocFgOnEATa77pzss.roa (hash: rb3wjuIH8HbSjlvSZIleXqQDE1zC/ejlfsfRtDilgfw=)
                          2: rVTnvUl4oJF0NZLJigsRu29agDc.roa (hash: XDl0nfUbtZv3lJ52mPQ165u4LcRz1MQtn6oM5BdEDec=)
                          3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: 5dgLjU5f0eGXQ48HStPYmy+MU34kjOXXCWu9+812GSU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:eb:7c:a2:fd:a0:d6:25:53:33:73:01:c1:4a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
        Validity
            Not Before: May 17 16:00:54 2024 GMT
            Not After : May 18 16:00:54 2024 GMT
        Subject: CN=f3c79bd198e63d0321cc6a992fffd87106faa82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:44:7c:41:04:63:8b:eb:f6:67:8c:db:23:
                    0e:86:be:67:f1:2d:43:35:98:37:e3:21:21:87:08:
                    2d:67:f3:a6:cf:75:67:7e:6c:33:7b:1d:0f:7b:a6:
                    4a:9d:c2:4e:20:14:4b:08:ec:ac:87:68:ce:dd:53:
                    26:e1:a4:9e:24:64:9b:e3:10:cf:53:3b:13:c6:7b:
                    ac:ba:2e:ed:bf:f2:89:76:33:c4:fd:2a:0c:94:2c:
                    89:6f:fa:f0:b2:47:44:59:62:36:a6:a2:d9:1c:f4:
                    ea:7c:e6:a3:c0:ed:5f:c2:34:b1:5a:41:d9:30:c2:
                    81:f9:84:9c:2d:32:d0:3c:b9:a6:cb:9a:da:38:d4:
                    f5:b6:ea:c0:e8:20:9d:57:4d:ff:15:cc:1a:52:d5:
                    7f:4d:88:4a:11:5a:24:63:e2:3d:e6:05:ed:74:0d:
                    86:df:16:30:99:8e:96:78:51:9c:3d:53:bd:12:5e:
                    9b:a0:ee:ec:3d:7d:59:56:49:dd:95:e3:a5:79:da:
                    1d:40:99:54:ed:5c:fb:f9:e3:aa:33:7b:d9:77:b8:
                    2f:76:f1:1c:a7:6b:f8:09:36:57:36:e5:36:60:04:
                    41:1d:36:ac:56:05:49:fd:38:fb:3a:5e:17:fa:85:
                    1e:1a:85:36:49:17:e5:aa:f3:9a:4c:5e:08:b4:21:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C7:9B:D1:98:E6:3D:03:21:CC:6A:99:2F:FF:D8:71:06:FA:A8:2B
            X509v3 Authority Key Identifier:
                keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c7:1f:34:fb:f7:9c:39:d4:ce:db:37:a8:c6:d7:a6:04:d7:
         33:ea:ba:9f:c3:88:60:ed:1d:e7:6d:d5:ec:2f:b7:19:85:d9:
         d6:24:04:5d:c2:3d:f0:c3:a4:48:17:60:14:a3:ae:44:65:5e:
         90:58:e6:b0:b3:11:7f:c9:fb:00:85:71:04:48:71:9e:30:b1:
         da:17:4e:9a:34:08:86:11:24:8d:02:63:cf:da:24:8a:97:74:
         1d:e9:a1:81:9e:71:b4:35:42:36:d9:79:06:98:68:c9:16:70:
         e8:61:a9:11:82:0d:6b:89:50:2b:24:8c:73:5c:4c:f8:8e:16:
         2b:8a:07:16:d7:c3:62:c6:50:67:64:d4:fa:d3:3e:20:dc:e4:
         fa:a3:09:f3:16:a1:9e:ec:a3:3d:d5:82:b0:e7:8b:8a:43:96:
         4c:40:f0:8a:f9:04:22:f7:b8:46:77:83:2b:ed:63:76:c0:74:
         f7:60:d0:fd:f1:99:10:49:8d:92:6d:bb:c6:15:4f:e2:23:7a:
         8a:59:a0:85:1e:7e:fb:6d:0d:cb:ed:ab:61:38:97:87:36:fd:
         f7:33:3a:75:9c:60:a0:39:20:be:63:5d:8a:e9:e6:7b:6b:36:
         18:ae:5e:97:cd:45:09:8e:b9:99:cf:5e:3f:b4:2e:0c:b9:0a:
         a6:c9:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:21 2024 by rpki-client on console-ams.rpki-client.org