Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File:                     S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier:          GB4FScmM8bxOLA/KfX/H8O+X5YwNYQHBHITQ2f7uW5Y=
Subject key identifier:   09:43:20:04:70:B8:26:C0:7F:11:73:4F:D7:67:12:7C:4A:F6:6C:AA
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer:       /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial:       018F87B6775B2C1A0206585C292B0135F3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:33 +0000
Manifest this update:     Fri 17 May 2024 18:00:33 +0000
Manifest next update:     Sat 18 May 2024 18:00:33 +0000
Files and hashes:         1: C_XFzWcNyJfy8KgHGJCrh873SVw.roa (hash: unM60LPf0I8tTatRHAaGIbvbeOdCXCxQXVEcB75aF6A=)
                          2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: uvhQ6693Qa3Hqkvf282+VRcy5wlaeSUm4nduRuD1t1k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:77:5b:2c:1a:02:06:58:5c:29:2b:01:35:f3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
        Validity
            Not Before: May 17 18:00:33 2024 GMT
            Not After : May 18 18:00:33 2024 GMT
        Subject: CN=0943200470b826c07f11734fd767127c4af66caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:d9:83:4a:33:44:00:c4:40:ff:85:17:9f:
                    d9:4c:8b:bc:20:cc:86:21:97:bf:c4:77:3b:89:82:
                    95:4f:76:5d:e1:fb:1c:77:e5:21:41:3a:98:f8:db:
                    d2:53:35:c5:56:04:a1:07:7a:51:f2:1b:7c:56:dc:
                    8a:29:4e:d3:f4:28:10:b7:6c:c9:b5:e5:ab:87:1b:
                    fe:1c:ea:2e:96:e3:36:07:43:53:86:0d:02:7b:4a:
                    28:15:83:f4:2e:e2:2a:ed:3f:64:28:1b:87:79:6e:
                    48:31:a6:01:55:64:ec:ee:17:46:e8:cf:bd:34:cf:
                    b6:a6:8e:0e:82:4a:23:54:82:c2:de:00:26:c1:1d:
                    b9:a5:60:17:63:2c:12:3f:a0:98:5a:df:30:fd:98:
                    78:4c:c0:84:99:ca:4f:95:52:f2:a3:2f:16:18:84:
                    3b:50:64:11:77:e1:60:80:8a:90:97:94:e9:97:df:
                    40:cf:42:73:8e:46:79:1a:d6:13:e5:21:c3:c0:a6:
                    d8:78:06:c7:36:54:cd:04:1f:3b:e8:23:22:c8:f0:
                    15:20:ec:ba:88:ac:fb:4a:b4:9b:ba:ec:89:eb:28:
                    73:86:b2:41:89:9c:ac:1d:7d:fd:3b:0e:aa:28:1c:
                    a9:02:ad:cd:f2:89:64:15:e0:42:16:c7:5f:cf:d3:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:43:20:04:70:B8:26:C0:7F:11:73:4F:D7:67:12:7C:4A:F6:6C:AA
            X509v3 Authority Key Identifier:
                keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:b7:73:60:d9:bb:ba:c5:2a:0d:d8:33:7c:38:11:c8:cc:12:
         d1:69:24:0a:37:e1:91:d5:0f:73:24:55:d7:cf:63:f4:2b:10:
         f3:ef:ab:18:ed:6d:34:17:ec:30:1f:f2:05:a2:65:af:d8:de:
         3e:d4:66:ad:1c:67:3b:9d:ba:6e:dd:95:04:43:eb:e6:4d:5e:
         5a:7c:8e:da:3e:1b:58:bb:a2:9c:0f:29:c6:2d:5f:8f:f6:b3:
         70:97:93:2b:b0:33:b1:b3:da:65:c8:f2:48:a2:9a:bc:93:4b:
         81:66:dc:cd:ad:fc:a1:5b:99:66:4f:e6:68:9a:a7:38:8b:dc:
         d3:1c:7d:17:af:6d:02:f7:2c:9e:d3:c6:93:df:5b:9b:65:cc:
         d0:0d:27:2c:79:a4:28:bf:e5:5b:b8:85:05:93:23:aa:cf:d5:
         eb:27:d7:9f:d2:3d:70:69:59:a9:ed:44:ff:a3:1b:e8:56:99:
         8f:89:e4:aa:44:3c:bd:58:5d:fd:bf:f5:dd:a2:35:a1:18:db:
         de:c1:fa:46:ad:c5:59:f0:c3:bc:05:79:9d:cd:b7:f4:83:29:
         8e:ed:d8:38:e1:f9:bf:b0:aa:fc:8f:df:07:53:56:9b:b0:4a:
         0d:de:0e:87:c5:d3:a6:f9:f3:fe:11:26:f4:17:d0:d2:8e:c2:
         ae:15:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:49:57 2024 by rpki-client on console-fra.rpki-client.org