Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
File:                     iu8WONCRG6mIZOl5yEJrpPQaJy4.mft (raw, json)
Hash identifier:          ix81k32JffpP2rk8DwglcD3NmU6VJogmd/47ntY/ol0=
Subject key identifier:   40:EF:20:85:FD:98:DA:E2:62:AE:19:CA:2D:23:77:A6:AA:66:CC:D3
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Certificate issuer:       /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial:       018F88242EBEC1CB455DD14D28FA6BBE07A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:23 +0000
Manifest this update:     Fri 17 May 2024 20:00:23 +0000
Manifest next update:     Sat 18 May 2024 20:00:23 +0000
Files and hashes:         1: 7WOM9Bfylkzn-4-_DERENzjPcxw.roa (hash: z6/ZlI/W0BrpXJdrBEyeQGf1IrmAq79cxMAOG2mZOT4=)
                          2: iu8WONCRG6mIZOl5yEJrpPQaJy4.crl (hash: G/MWuzxaJSS2pjfmYZh2mb7W3YEMfzzP8rKiG93LOhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:2e:be:c1:cb:45:5d:d1:4d:28:fa:6b:be:07:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
        Validity
            Not Before: May 17 20:00:23 2024 GMT
            Not After : May 18 20:00:23 2024 GMT
        Subject: CN=40ef2085fd98dae262ae19ca2d2377a6aa66ccd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:7a:11:2e:df:f7:9f:4b:1c:12:f7:0a:ec:
                    c9:b0:4b:8c:1e:07:f3:03:39:1d:1f:21:4c:70:99:
                    1b:9e:53:b3:50:25:b4:87:45:a7:9f:30:b1:34:f5:
                    87:02:13:48:a0:20:a4:0e:e3:7d:68:84:1d:50:81:
                    08:29:17:0b:45:e1:d6:98:26:cd:57:8e:ca:f7:c7:
                    57:80:55:dc:7d:b2:c4:cb:10:95:37:96:42:27:c7:
                    31:98:aa:e0:fe:a6:1b:e6:18:5a:e3:c6:9a:45:30:
                    95:ff:2a:bd:56:27:d2:98:80:2b:5a:4d:6b:de:72:
                    5a:1b:5e:1c:24:aa:b9:e6:cf:ef:0e:0b:61:cd:2e:
                    85:de:b5:19:a6:92:7f:9a:39:27:a6:bf:bf:69:19:
                    65:74:42:d6:4f:40:e5:19:ad:10:e5:3d:99:26:dd:
                    4c:4b:af:3e:f1:40:cf:55:fb:c0:7e:21:d9:96:91:
                    65:7c:8f:53:16:fa:93:da:0e:e2:26:12:ba:b3:79:
                    94:f0:f1:13:0f:b4:8f:a7:56:29:57:fe:f7:20:28:
                    8c:24:68:a7:92:77:79:6c:c0:27:5b:af:56:52:04:
                    db:7e:44:d6:97:5f:38:f2:a6:7e:c8:6c:ba:45:5b:
                    d4:23:f0:1d:00:49:76:b8:6f:b7:b2:9d:5a:2f:32:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EF:20:85:FD:98:DA:E2:62:AE:19:CA:2D:23:77:A6:AA:66:CC:D3
            X509v3 Authority Key Identifier:
                keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:2f:7e:83:0c:bb:cd:d2:21:0c:d8:9a:94:16:31:a9:86:78:
         cc:06:37:f5:61:53:6d:f0:41:a0:d0:c4:32:2a:f1:1a:74:02:
         c9:b0:76:8e:30:11:a4:a7:25:fe:1b:b2:3c:e3:23:18:3f:ca:
         c2:34:a9:d5:9a:1d:d2:fd:5a:70:e3:17:6b:e4:9c:00:bb:64:
         a1:64:23:9c:ea:7d:74:6d:f8:98:61:47:e1:15:17:89:4e:14:
         77:d7:e7:38:ab:b6:36:43:2d:b9:ab:ea:67:f4:63:3b:02:fa:
         26:40:60:de:8e:9f:01:a2:cf:2a:99:b3:e9:0f:3b:28:46:36:
         8d:e0:97:9e:db:45:75:71:6e:1b:de:cd:28:05:1a:95:bf:e8:
         3e:9b:14:e0:4b:9c:60:20:b0:31:82:89:ab:45:b3:1f:2d:55:
         4f:46:4a:e8:57:e8:15:7c:2f:86:b9:8d:ec:73:5d:b9:9b:45:
         20:1e:43:b1:8f:52:64:1b:cc:be:d3:a0:6f:89:76:ea:60:27:
         45:ce:e2:bf:70:2b:6b:ff:10:76:de:32:f3:13:9f:c8:b2:b7:
         db:9f:d6:12:15:d7:85:57:82:e5:d9:4a:04:6b:19:bc:d5:92:
         ce:a0:5b:53:18:ab:c5:5d:70:81:93:a6:7e:18:50:75:2f:83:
         58:b1:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:55:47 2024 by rpki-client on console-ams.rpki-client.org