Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
File:                     r3gchFM5kA9-ayAz5jiItTrleHU.mft (raw, json)
Hash identifier:          kkOjuHl9zGEXuZXjkQ9HBU27JWpWB4/jwOti29B1N20=
Subject key identifier:   8E:2C:21:32:07:75:52:9F:F8:55:BF:94:BB:15:FB:31:C8:01:BC:12
Authority key identifier: AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
Certificate issuer:       /CN=af781c845339900f7e6b2033e63888b53ae57875
Certificate serial:       018F874AC079BD379825E89288CB8E40A6BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:02:54 +0000
Manifest this update:     Fri 17 May 2024 16:02:54 +0000
Manifest next update:     Sat 18 May 2024 16:02:54 +0000
Files and hashes:         1: fCxLHopZzZjW8U_6tyizym_GkN8.roa (hash: U9HX8zKGogWWbw7N0D5ShMBsj3CFYoN129iA6RoU0ms=)
                          2: r3gchFM5kA9-ayAz5jiItTrleHU.crl (hash: ijbIQbQXTI7DA/wPIHnNKThlZ9n5IGIqfd+fvqipDgE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:c0:79:bd:37:98:25:e8:92:88:cb:8e:40:a6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af781c845339900f7e6b2033e63888b53ae57875
        Validity
            Not Before: May 17 16:02:54 2024 GMT
            Not After : May 18 16:02:54 2024 GMT
        Subject: CN=8e2c21320775529ff855bf94bb15fb31c801bc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:a2:f3:dc:95:98:dd:3a:ff:18:d6:c7:3e:
                    56:54:2c:35:d7:cf:ba:fb:da:cf:14:5a:16:28:8f:
                    b7:3a:af:d6:5e:63:24:f0:8a:61:92:a6:2b:12:47:
                    34:fc:67:7d:2d:1d:85:56:b7:9c:b5:15:56:ab:4f:
                    b8:d7:5b:4c:bf:60:52:9c:70:62:15:fd:12:c6:34:
                    7d:f0:aa:d9:ef:10:6a:92:28:c2:b1:1f:e9:d9:b0:
                    3d:89:e4:72:b6:48:d2:9f:89:64:c7:f7:08:7f:bd:
                    14:22:ff:15:84:a6:13:f3:54:bc:99:d1:28:88:ca:
                    9d:d5:bc:b6:5e:5e:4b:ce:02:8d:c9:38:12:be:64:
                    dd:27:9d:a4:33:db:7a:79:60:c0:7a:56:28:a1:ac:
                    c4:0d:0d:20:f5:32:03:d6:06:9c:f1:06:d0:f8:dd:
                    c1:b4:ee:8b:2d:85:bb:5d:74:fc:12:ad:97:a1:76:
                    d7:98:ae:73:19:b9:20:c1:c0:85:5f:b4:6e:80:ea:
                    a2:03:e4:a0:89:8e:10:ea:33:77:09:06:63:9b:f1:
                    d6:ba:76:4f:63:aa:b7:10:af:16:91:3a:51:a5:a9:
                    2e:1e:e5:17:bb:6d:3a:70:e3:53:4c:51:ed:ae:15:
                    31:33:ff:ac:54:66:01:a0:ae:13:2d:63:0a:b5:88:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2C:21:32:07:75:52:9F:F8:55:BF:94:BB:15:FB:31:C8:01:BC:12
            X509v3 Authority Key Identifier:
                keyid:AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:36:d9:5a:89:2f:cb:1f:78:ea:b5:83:39:50:e7:d5:0c:
         72:88:61:3e:82:f8:9a:51:3a:dd:39:7a:8e:3d:9d:4f:93:3b:
         8a:49:11:70:ef:48:53:56:8c:95:87:19:22:2d:e2:25:5c:3f:
         51:95:d9:aa:b5:5f:5d:a4:c4:bc:65:c5:21:ce:88:be:21:a7:
         4b:c3:d9:49:76:b0:3c:90:a0:90:08:7c:12:a8:d9:64:f5:3c:
         83:0c:08:36:a0:1c:02:c6:d4:b5:55:4f:84:aa:f5:c7:a2:51:
         9f:48:48:0d:34:65:f0:36:fd:6d:a1:93:e9:8a:0b:72:17:65:
         2a:3d:bd:bb:f3:d1:49:1c:69:14:1f:98:a2:4b:cc:2a:26:9f:
         a4:00:42:72:30:32:f9:e1:89:91:41:a2:24:00:d7:14:6b:3a:
         74:fd:13:9c:61:c7:d3:a5:08:6f:7a:4b:9c:c4:4a:dd:66:1a:
         85:39:35:17:b3:c1:09:93:f1:07:81:da:8c:ea:1d:3f:67:ad:
         2b:5a:4e:08:79:3b:f4:b4:a5:f8:e9:15:ba:32:ae:ce:7a:9c:
         2c:a2:37:e5:4e:55:74:03:40:f4:25:f4:af:73:96:19:dc:28:
         2e:b4:fc:e5:70:53:dc:32:8b:f9:85:43:67:30:86:ca:32:60:
         5b:6d:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:51:54 2024 by rpki-client on console-fra.rpki-client.org