Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File:                     hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier:          ylKhmPpMF5eaVAVM72z/W0bQoJzCra9qFDunADkJUxg=
Subject key identifier:   A8:24:59:C8:63:73:3B:CF:68:19:03:AA:DF:97:C7:EE:98:BB:2F:1A
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer:       /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial:       018F88243C414CA869D9D35B0E4990565E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:27 +0000
Manifest this update:     Fri 17 May 2024 20:00:27 +0000
Manifest next update:     Sat 18 May 2024 20:00:27 +0000
Files and hashes:         1: 5MSx4UxCKgoFG_9u80GPOSDkV8U.roa (hash: MC7+GIA2pPAyTEhq+eFNNIqTuofhrKdd61HTJmrsLrg=)
                          2: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: RETpyrc8hoC0tXfST8tAtGTQDAkCj30mXzxcqf6QLBA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:3c:41:4c:a8:69:d9:d3:5b:0e:49:90:56:5e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
        Validity
            Not Before: May 17 20:00:27 2024 GMT
            Not After : May 18 20:00:27 2024 GMT
        Subject: CN=a82459c863733bcf681903aadf97c7ee98bb2f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:25:ec:f0:10:bd:2b:e8:30:57:9a:e9:68:
                    05:4a:15:15:fd:3f:9e:34:73:e5:41:1c:e1:a5:d2:
                    66:86:7a:6c:42:e8:0c:8f:00:b6:95:ea:5c:65:37:
                    db:28:94:ef:a4:bd:54:4c:8f:c3:e1:61:03:d4:69:
                    13:48:53:df:f4:b8:f6:5d:a9:cb:84:14:55:7e:bd:
                    3c:81:ba:e8:bb:2c:26:7b:f4:39:06:b2:bd:04:71:
                    c5:69:6a:ee:30:31:35:05:0e:d1:c7:8a:9e:48:e0:
                    39:db:e4:ab:84:21:27:ca:e3:01:92:95:2c:70:65:
                    8a:96:67:57:46:e1:09:fa:c5:f5:0e:7e:cb:d1:0c:
                    19:b4:d4:72:55:77:e4:28:06:4e:cf:ee:f1:b3:83:
                    34:bf:f2:86:dc:21:48:cb:04:4b:7e:81:a3:79:61:
                    f7:bf:52:77:80:f7:89:0d:f1:02:02:fa:cb:6e:b9:
                    41:8d:08:e9:07:6d:59:7c:6b:f1:fd:ac:04:09:19:
                    2e:10:68:f0:73:91:aa:0f:f9:39:21:ad:03:61:17:
                    d5:a0:fe:c5:56:82:dd:c4:d7:6e:19:01:ae:c3:19:
                    05:3e:16:56:70:ec:fe:38:42:23:94:60:df:ac:52:
                    0c:a6:64:2a:dc:48:6a:d9:10:00:2c:a2:3a:ad:8c:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:24:59:C8:63:73:3B:CF:68:19:03:AA:DF:97:C7:EE:98:BB:2F:1A
            X509v3 Authority Key Identifier:
                keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:53:a4:7a:5e:7d:60:d9:0a:9e:f2:f3:a6:c2:62:2b:c1:4d:
         36:85:8c:11:66:76:02:e1:00:4f:60:f5:ed:98:96:d8:4f:ba:
         e3:f3:ef:6a:f8:cd:39:d0:ff:eb:89:69:f3:12:a5:4e:15:ea:
         da:f3:16:c7:46:d1:e5:07:b6:8b:1b:84:0f:02:b3:25:d6:a7:
         55:c9:f6:ef:0d:c6:fc:46:ea:af:3c:fc:9c:d6:78:93:43:ac:
         86:78:4f:ac:02:56:0f:22:97:b0:a1:82:68:be:35:bc:4f:64:
         8a:af:6a:10:21:f5:db:83:2a:a4:ad:34:59:71:d1:db:66:95:
         66:d7:3a:b7:bc:45:23:cb:6a:65:8b:d1:32:60:e2:68:7a:da:
         a5:1b:c3:80:50:a4:c2:8a:50:81:9c:b4:24:49:92:9c:5d:09:
         39:dd:a1:d7:3d:2f:af:22:95:2d:91:46:38:63:90:2d:e9:94:
         f1:f5:1f:b3:09:5d:df:86:0b:94:67:f2:0f:bb:67:96:83:27:
         b7:73:7e:df:13:53:5c:b2:8d:20:02:e5:78:72:df:13:09:f4:
         49:a3:dc:3d:a9:c3:6e:38:a2:9e:a3:79:4f:8d:fc:32:41:7a:
         5c:4a:a6:88:c0:f1:8e:b3:2b:2c:0a:ad:9b:0a:dc:70:f7:8a:
         5d:0f:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:16:51 2024 by rpki-client on console-ams.rpki-client.org