Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File:                     tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier:          noGFuxSH1jWn0rtsNEfndc81AvczKG3lrnVVdatqNKI=
Subject key identifier:   D3:9D:4D:59:C7:A7:83:7F:A6:F8:4F:79:6D:3E:23:F3:DA:24:A9:C3
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer:       /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial:       018F882483BF1C09B94687019DBBD74B2BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 20:00:45 +0000
Manifest this update:     Fri 17 May 2024 20:00:45 +0000
Manifest next update:     Sat 18 May 2024 20:00:45 +0000
Files and hashes:         1: GYjt7dsqbsOIVWJB0DCShxnbPUA.roa (hash: J4zjYoZtBSBffEWSkTc9XYhJzvexVOl6G38JIscvv5U=)
                          2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: 1TzMv/JcXzAFlOn2TxjNlBgwQuCtL8ptNTvuHlY63P8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:83:bf:1c:09:b9:46:87:01:9d:bb:d7:4b:2b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
        Validity
            Not Before: May 17 20:00:45 2024 GMT
            Not After : May 18 20:00:45 2024 GMT
        Subject: CN=d39d4d59c7a7837fa6f84f796d3e23f3da24a9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:62:ca:09:b3:04:9e:eb:59:c7:31:f8:56:
                    58:0e:36:fc:ab:9b:11:5d:22:e3:51:c7:0e:a5:6b:
                    59:15:de:9f:c4:08:ab:c3:22:fc:af:29:47:4e:eb:
                    18:0a:2b:dd:2c:c3:b8:78:d5:1c:d2:3b:df:29:a2:
                    16:d1:0e:98:49:91:32:ff:25:17:c2:64:ed:0f:60:
                    b5:ca:ca:b2:8d:a4:bf:4d:d1:c2:fb:62:44:f0:77:
                    34:81:d6:45:11:d0:05:6c:31:d1:db:25:69:f5:9a:
                    83:33:f0:05:bb:c7:bc:66:07:2c:87:ed:01:f2:da:
                    88:95:8d:27:d0:6a:51:03:b8:f2:15:68:3f:8c:09:
                    e7:e5:bc:7a:75:0f:3e:d7:44:d0:eb:3d:26:54:50:
                    ec:54:f6:4e:22:a1:f9:69:b3:2c:d4:f0:99:df:63:
                    fc:b1:b3:85:89:58:9b:4a:25:ef:19:48:ff:98:0c:
                    63:64:29:a1:90:fa:64:3a:db:a5:45:ff:06:77:81:
                    72:22:0e:c2:c2:45:93:6b:bd:be:5c:78:26:86:fe:
                    5b:94:15:01:3d:7b:f8:26:be:5c:c5:80:04:1f:2d:
                    82:c0:07:58:8e:d2:9a:38:fb:59:a6:21:b1:7b:59:
                    b6:1a:2c:81:83:45:3b:31:0a:47:04:a6:da:a2:d9:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9D:4D:59:C7:A7:83:7F:A6:F8:4F:79:6D:3E:23:F3:DA:24:A9:C3
            X509v3 Authority Key Identifier:
                keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1d:1a:a7:3c:ab:f5:2b:44:fb:b7:e0:0f:3f:5d:3a:69:7a:
         35:f8:6c:fc:e9:94:1a:3f:e3:b7:3e:bb:49:82:21:0d:d8:a6:
         94:b5:da:11:02:30:11:13:31:05:60:fb:72:5d:34:e4:3c:18:
         a2:0a:e3:1f:35:a6:05:d2:51:49:1b:33:7a:5d:1a:67:ae:21:
         98:8a:9d:27:83:58:a3:c2:ca:67:fb:a3:32:6b:cd:a0:c9:8e:
         43:17:d7:43:b9:39:3a:be:86:2e:2d:10:cf:ae:b6:39:87:c8:
         2f:8f:14:99:19:0c:19:61:72:fa:96:7e:00:61:bd:81:ca:34:
         fc:55:ab:44:92:b5:b4:28:04:6e:9c:ac:40:40:7f:6a:36:ae:
         c7:44:b6:a0:e9:e8:94:d3:e4:7c:4f:f6:81:e1:54:59:a0:41:
         89:cb:1b:34:3d:31:50:4d:37:cd:6d:51:c6:39:59:ef:db:50:
         f8:ec:51:74:2d:b9:04:5f:de:95:47:ff:8c:bf:29:c7:65:80:
         a9:82:4e:b7:87:72:8b:ab:65:2c:b8:b3:00:7e:7c:ee:fa:f1:
         ba:83:a7:e9:d9:df:2c:d5:8c:4c:57:68:b4:c8:5d:27:4a:59:
         cb:9a:72:b3:bf:ae:9f:4a:41:74:fa:7b:43:38:62:f5:78:68:
         13:a0:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:52 2024 by rpki-client on console-fra.rpki-client.org