Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File:                     qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier:          InW4YneCG9pw5yU6cjSgnMLBW8Roj80HfMYr4ZTlfv8=
Subject key identifier:   7A:8D:41:B7:F4:65:3E:94:07:1F:EB:F4:B3:49:DD:6A:12:94:0B:51
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer:       /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial:       018F87B62EE5441DBD95EF507395D4C7C25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:14 +0000
Manifest this update:     Fri 17 May 2024 18:00:14 +0000
Manifest next update:     Sat 18 May 2024 18:00:14 +0000
Files and hashes:         1: T0i-vkPjIYsGEWVWzcpqT7GzjSA.roa (hash: AZNaX280xhe1JGmhv+QVloCuol2fir/kyuAwhwEW8NE=)
                          2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: R6oSgRSaUAatwe1gZwLrgm/z2t0x88zMjppj6LOJhA4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:2e:e5:44:1d:bd:95:ef:50:73:95:d4:c7:c2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
        Validity
            Not Before: May 17 18:00:14 2024 GMT
            Not After : May 18 18:00:14 2024 GMT
        Subject: CN=7a8d41b7f4653e94071febf4b349dd6a12940b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:58:ec:74:ff:d1:6f:08:28:c2:34:80:ae:
                    63:49:bf:9e:a7:f3:0b:57:81:c3:bc:55:1a:e4:a3:
                    0b:75:3c:08:bb:aa:85:94:d7:48:b4:85:15:3e:f9:
                    67:75:c6:9b:f8:e6:2a:90:91:76:04:9a:1b:57:cd:
                    13:49:fe:8a:99:80:d9:64:9d:29:6b:2d:d2:00:44:
                    a5:3e:b9:0d:14:d2:0b:fa:f7:e6:d7:f5:28:01:f5:
                    c9:bc:69:73:d4:8d:4c:c4:ec:c3:ee:e9:4c:80:7d:
                    72:78:70:73:1c:30:92:4a:d1:1c:6e:3d:09:9a:a4:
                    6e:07:16:c6:9c:a3:2c:ea:37:46:d0:4a:68:8e:a4:
                    69:5c:4c:4d:9e:a3:62:b4:87:ee:79:52:10:53:fb:
                    08:f6:ec:88:6b:95:83:8f:49:5a:15:a0:54:3f:24:
                    44:5d:f3:23:0f:7a:5c:12:17:cc:e0:8b:fd:54:ab:
                    90:26:b1:f8:65:d4:b3:7f:99:de:ca:80:58:0a:d5:
                    ac:fa:e2:cc:9b:b4:ef:5f:73:c3:12:75:f9:c6:3c:
                    7b:b9:6b:bf:6a:89:2e:82:e9:1e:e3:ff:1f:00:ae:
                    88:6e:2f:fb:b6:bf:4f:0b:3e:77:41:6d:bf:d3:01:
                    d0:70:45:ac:7a:4a:36:35:b2:03:dc:c8:0b:b3:25:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8D:41:B7:F4:65:3E:94:07:1F:EB:F4:B3:49:DD:6A:12:94:0B:51
            X509v3 Authority Key Identifier:
                keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:10:a5:f8:1c:83:94:3d:2f:8a:eb:9a:bd:ed:9e:75:bd:
         72:01:e3:8b:c5:c3:b9:53:d8:84:d1:fd:83:35:c5:85:63:31:
         1b:c7:f3:bf:8a:e7:1f:70:ab:9d:bc:7e:2f:5f:23:af:ea:16:
         9a:f7:16:33:19:83:2e:60:cb:08:b1:d4:e5:27:20:d9:9c:55:
         af:c9:a8:80:1a:98:85:02:8d:49:05:9e:d1:9c:e4:dc:47:17:
         4a:94:52:78:42:52:09:9b:11:73:6a:24:6e:26:4b:93:0b:e6:
         f2:7d:b5:6e:14:f9:28:e6:c0:31:90:a3:16:3d:b5:d3:b7:75:
         3f:2b:e6:8b:f5:d7:8d:19:1c:d8:34:8a:a6:e1:8a:ad:93:c2:
         61:30:14:8a:31:a8:5b:8c:26:30:76:34:82:93:9b:46:5b:ea:
         5a:a5:cc:15:06:57:07:e7:06:af:e6:7b:8a:08:b3:04:6a:22:
         a9:8f:62:6d:8b:5c:b4:ce:3b:c3:89:01:9f:f0:9d:d6:ea:3d:
         2e:98:13:7e:c4:81:37:5f:eb:29:ef:52:b6:3e:99:89:a9:70:
         e9:a4:0f:a0:54:45:df:61:6d:89:22:f1:88:94:04:7e:2e:87:
         4d:ca:91:4e:de:73:a1:5b:f8:93:66:ff:1a:9b:28:4a:5a:ff:
         2e:95:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:33 2024 by rpki-client on console-fra.rpki-client.org