Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File:                     rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier:          ddHmf+DnJM/DL24medpbe7q8c43R6fnVoTjX55BZbZc=
Subject key identifier:   8C:31:CE:FD:87:4F:F6:77:84:C0:8E:E8:90:E5:E0:66:24:90:DB:B4
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer:       /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial:       018F88245D19A9BCA822541E7BB71FF8A5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:35 +0000
Manifest this update:     Fri 17 May 2024 20:00:35 +0000
Manifest next update:     Sat 18 May 2024 20:00:35 +0000
Files and hashes:         1: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: XOo0TnWWWXRhjAy3ri1PARjwVBEki5uW4KjrfCLcM+M=)
                          2: wVZGK_X7kwzwnIKV5OlKEXqJgeY.roa (hash: vEYLJCWoWxn1+YpiZ6ZTRAJJpLrZT/rXKmHg2k3s3c0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:5d:19:a9:bc:a8:22:54:1e:7b:b7:1f:f8:a5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
        Validity
            Not Before: May 17 20:00:35 2024 GMT
            Not After : May 18 20:00:35 2024 GMT
        Subject: CN=8c31cefd874ff67784c08ee890e5e0662490dbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:22:21:01:cd:30:be:a3:61:bc:be:22:dc:
                    a5:d8:d7:9b:86:c2:57:8d:6e:7b:3f:9c:45:58:d1:
                    b5:9c:a8:6a:59:f2:d8:37:ea:59:33:7c:62:95:78:
                    f3:f5:30:dc:20:40:86:0a:47:4b:9b:15:1e:ca:3a:
                    de:d0:a6:f0:e5:72:03:4f:fb:a8:e1:64:39:ec:12:
                    31:f4:58:82:54:66:bd:82:7f:58:d1:c2:2d:ac:6c:
                    de:fb:93:87:44:50:57:f7:df:1c:b6:fc:c9:96:e2:
                    65:b1:4c:b7:b5:e3:61:6d:47:f8:65:0e:02:55:46:
                    20:07:a8:1e:cc:d2:a8:0b:bf:6f:f5:01:ab:6b:6d:
                    20:0d:bc:f1:f4:b5:9b:64:85:0d:26:e1:22:c9:8f:
                    25:e9:46:cf:c9:2b:b9:4b:c1:3f:31:1a:74:fd:0d:
                    23:9b:74:2c:6f:98:74:ec:18:fe:53:84:ba:18:0f:
                    85:9f:5a:48:be:be:33:8a:0b:07:a8:93:9e:7f:d4:
                    64:40:cd:14:12:83:3b:06:e4:5c:58:21:6d:03:9b:
                    51:5c:cc:cf:64:06:7c:87:0c:dd:ff:fc:f6:21:45:
                    aa:0c:34:bb:6c:ae:7b:42:18:a8:0c:ae:3e:bc:a6:
                    b6:76:de:3d:1a:26:0c:f2:1b:93:9a:f9:0f:a6:90:
                    dc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:31:CE:FD:87:4F:F6:77:84:C0:8E:E8:90:E5:E0:66:24:90:DB:B4
            X509v3 Authority Key Identifier:
                keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5e:3b:a0:b4:31:b9:2f:b0:50:aa:28:8e:16:e2:a4:68:9a:
         e9:ef:1b:60:94:ef:03:23:56:92:a6:8c:24:bb:03:46:18:4b:
         dc:43:f1:3d:53:de:af:20:07:53:8e:6e:fb:45:43:e7:3c:45:
         bc:1f:dd:d2:d4:b8:d6:fa:36:1a:c1:9e:3f:d2:c5:05:10:3c:
         f3:8b:68:c2:ea:fa:b4:5b:55:84:90:20:74:62:76:d8:f2:58:
         c6:2e:52:f6:58:1c:6e:eb:a1:c3:32:b0:96:e1:f2:52:f8:5c:
         97:3a:6e:25:4e:93:a8:3e:66:46:19:91:5b:93:5b:78:1e:d1:
         9e:d6:4e:65:8d:83:85:60:ac:78:73:a0:2e:c8:cc:f9:25:99:
         40:ee:fd:b8:aa:95:82:cb:ca:64:de:e1:2f:16:8f:a9:29:4e:
         a4:9f:79:10:9e:de:28:fa:7b:62:ae:7a:44:32:3e:0e:17:b5:
         c3:d3:47:46:d0:25:d6:be:26:e7:61:59:6d:f1:e7:fc:c9:ad:
         e1:7f:9d:37:32:2e:40:f1:dc:f5:fa:dc:43:d0:d6:4e:4c:29:
         0f:99:27:9a:43:f2:e7:00:83:47:23:99:ba:e8:7e:af:0b:56:
         da:08:99:d7:a0:6e:60:cd:e8:f4:8b:13:f7:70:ee:c3:25:d7:
         ee:0c:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:03:22 2024 by rpki-client on console-fra.rpki-client.org