Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File:                     x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier:          nJf7CITIN7gHJgnlzMgfsXyJdW1FqcxHiwPHHwEdyGY=
Subject key identifier:   DD:9E:2D:D9:DC:B6:D2:FB:D1:2B:50:99:F5:B0:68:EC:71:D1:BD:15
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer:       /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial:       018F882437C3FE9AC0B52C1E654065F4536C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:25 +0000
Manifest this update:     Fri 17 May 2024 20:00:25 +0000
Manifest next update:     Sat 18 May 2024 20:00:25 +0000
Files and hashes:         1: 3YN_ke_XQ-uO2CVNVE14Ppz8VTo.roa (hash: 5LLPVUYzgNJoQSKS1hOCAiAMPfuChW91qYMyfwfD250=)
                          2: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: Kycmlew4ggjQyZLflfngfa80BwY1MJlTc5557Y6lTfk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:37:c3:fe:9a:c0:b5:2c:1e:65:40:65:f4:53:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
        Validity
            Not Before: May 17 20:00:25 2024 GMT
            Not After : May 18 20:00:25 2024 GMT
        Subject: CN=dd9e2dd9dcb6d2fbd12b5099f5b068ec71d1bd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:cb:20:4d:75:47:32:22:b4:b1:72:2a:ea:
                    33:7b:55:2a:67:31:ca:db:4a:bc:57:82:72:a2:d5:
                    53:c1:26:18:7e:40:c8:3d:77:70:bb:5a:a1:24:0e:
                    82:bf:e6:46:80:6f:e0:6a:14:e8:b8:ee:8d:59:09:
                    03:a9:a6:68:b3:71:36:59:b1:22:3a:0d:55:24:76:
                    bd:86:10:e7:09:72:8c:63:66:ce:88:bf:6d:e4:c9:
                    3f:88:3c:a1:b1:89:10:b2:9e:fe:cd:0e:85:6f:e0:
                    35:4f:3d:f5:bc:46:14:d5:ff:92:a6:68:ea:66:5d:
                    dd:53:dd:bc:97:c7:84:ce:32:2f:3a:6f:3c:ad:06:
                    0d:9a:6e:ec:88:2c:23:74:49:ed:a7:48:13:08:6e:
                    1c:cf:b3:2d:14:e1:01:0e:f9:58:81:06:44:5f:42:
                    a3:5a:61:fa:b1:ae:b4:31:5c:6f:75:ec:f8:f4:42:
                    a0:b3:41:b9:fd:19:b8:14:f8:78:18:e2:1d:46:43:
                    01:df:e9:d7:b5:71:7c:b5:11:41:b3:51:64:f4:bd:
                    2a:34:b1:11:4b:16:bb:27:5f:dd:31:ef:42:41:da:
                    3b:e5:92:5d:33:7c:87:d8:4d:36:6f:79:1b:b7:c9:
                    35:01:1a:75:f0:91:24:6e:34:d2:fa:b2:6b:65:df:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9E:2D:D9:DC:B6:D2:FB:D1:2B:50:99:F5:B0:68:EC:71:D1:BD:15
            X509v3 Authority Key Identifier:
                keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1c:2e:6c:b1:47:c1:56:6e:21:5c:e1:a6:84:c4:4a:90:96:
         b1:0a:1d:af:93:97:ef:cc:1c:ea:e3:84:87:42:a1:57:c5:ca:
         e2:77:7f:33:e5:4a:1f:20:ff:61:b9:11:00:ed:33:05:6e:57:
         60:d7:26:2b:b0:13:32:ce:7b:ac:7b:76:ac:2e:e2:76:f4:c3:
         3b:c0:45:dc:d0:2e:d6:1a:1b:b9:03:3e:66:b7:15:5e:6e:21:
         fd:d8:d7:a0:e3:95:71:36:f6:f5:f2:5d:ba:bc:4c:82:38:32:
         96:11:83:42:eb:5e:43:7e:f7:00:60:5b:fa:ca:04:d5:04:0d:
         62:62:0c:7e:1a:73:e6:ed:6a:fd:d1:31:4d:6c:af:97:12:cd:
         a3:52:4f:04:ac:f7:14:ac:9c:2b:a3:c7:05:45:a9:1d:85:52:
         fd:34:11:4f:79:ff:41:c1:66:65:96:5d:61:fc:f8:94:c7:60:
         eb:1d:ed:cb:ec:3a:4f:f0:0b:6d:57:70:1e:60:14:d7:5d:ea:
         87:23:3e:4c:77:69:4a:89:66:52:44:98:23:26:29:cc:74:5b:
         e8:fc:aa:a1:3b:f0:01:25:3c:e1:7f:8c:fd:78:6f:d2:36:40:
         67:fc:7b:46:b4:cd:f6:7d:19:26:9e:91:7f:c5:5d:b8:ab:44:
         ef:57:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:38 2024 by rpki-client on console-ams.rpki-client.org