Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File:                     XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier:          ZM1oMTyk3FAY6vs39va4/f22LSzXCIniKoCGvavW73Q=
Subject key identifier:   E3:72:35:5D:41:22:2C:BC:BE:42:85:2F:C7:0F:FB:18:05:A3:91:A2
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer:       /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial:       018F8824172C52A5D5589B2573030C3D8F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 20:00:17 +0000
Manifest this update:     Fri 17 May 2024 20:00:17 +0000
Manifest next update:     Sat 18 May 2024 20:00:17 +0000
Files and hashes:         1: BSLL6eQhBKNrcwuet6p7ZzNBBXg.roa (hash: XylVFmLumZwDdTCjMRrYVVAPc+9vQDs+mjkXO9vD+80=)
                          2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: fEudoMQLMRPsa/WpPvRA3a2xNR5rxDlJ03P+peypvl4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:17:2c:52:a5:d5:58:9b:25:73:03:0c:3d:8f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
        Validity
            Not Before: May 17 20:00:17 2024 GMT
            Not After : May 18 20:00:17 2024 GMT
        Subject: CN=e372355d41222cbcbe42852fc70ffb1805a391a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:84:c9:0a:ac:2d:4d:30:ee:d3:f9:77:af:35:
                    8b:df:23:0e:68:df:80:4a:8a:16:02:a0:1e:71:a1:
                    15:d5:8f:84:68:da:dc:1c:29:44:ca:5a:2f:95:b5:
                    2d:43:b1:2d:00:08:a3:08:7b:d9:eb:f3:2c:e8:7c:
                    cf:f8:39:82:a1:92:f2:61:c2:86:dc:c4:66:7e:8a:
                    68:81:04:65:2a:19:f7:60:3b:b6:75:8c:1d:c0:6c:
                    46:60:3b:e5:39:d5:07:2a:c3:7a:82:37:ac:e2:2d:
                    3f:8b:12:e1:20:77:4c:48:67:9a:b2:20:95:32:74:
                    72:db:73:18:6d:17:15:78:ba:23:0a:50:71:87:db:
                    c6:84:77:50:6e:d0:64:32:ba:83:81:c1:22:79:4a:
                    0f:bd:0d:42:c3:3e:96:68:de:a1:83:7b:4f:96:83:
                    3f:50:4d:15:b1:38:9e:54:58:c1:1f:83:ad:47:f2:
                    b9:8a:aa:e2:50:93:49:cd:cf:e8:46:14:37:cd:23:
                    b3:cb:8a:dd:44:60:ec:a0:c8:ad:f7:8f:d4:07:cb:
                    f9:97:56:77:aa:29:6e:53:cd:08:af:d1:fa:e2:1a:
                    fe:80:d5:14:ad:fb:76:dc:07:7a:8c:f6:d9:3b:70:
                    a9:18:b5:79:27:db:b6:b2:1d:40:e8:9c:35:68:30:
                    79:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:72:35:5D:41:22:2C:BC:BE:42:85:2F:C7:0F:FB:18:05:A3:91:A2
            X509v3 Authority Key Identifier:
                keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:71:cd:1b:55:69:1b:2f:1f:00:1e:f7:b1:04:9d:2c:9e:78:
         e4:33:02:af:92:30:4e:2f:b3:b5:f2:d4:0c:ae:2f:21:6a:fc:
         81:48:93:91:08:ab:94:21:a8:1b:11:22:46:bc:f1:3e:c4:82:
         ff:aa:34:a5:67:87:89:37:0e:49:ea:64:4c:85:74:0e:de:bf:
         23:b1:32:ca:c8:de:84:00:07:f0:97:0b:5f:f5:0f:fa:6c:20:
         42:6b:f4:eb:b0:f1:b0:37:7a:96:7f:1c:e5:2f:50:31:d3:9d:
         22:70:2d:51:19:8c:4a:95:62:da:e1:55:95:1a:e7:f4:57:2e:
         24:c9:86:09:c0:71:b8:52:5f:2f:e1:a2:6a:4f:52:a2:fc:90:
         34:eb:2b:fa:e8:f4:63:ad:9c:58:be:e5:d2:63:a6:a1:f9:57:
         92:cd:fe:ee:8a:81:08:44:72:d5:f0:a6:40:54:e8:a2:06:6a:
         54:d2:d7:07:8e:ea:aa:83:a4:83:e0:26:e3:fe:a0:2b:00:cb:
         f4:8f:d5:38:55:84:02:83:38:7c:39:75:15:05:4e:c6:48:ce:
         58:22:96:fb:a6:79:d6:27:f5:f1:bd:74:68:11:6f:5b:36:bf:
         c8:1d:3d:a3:9b:4a:92:c8:77:fb:bd:52:54:52:11:f9:db:7a:
         a3:0f:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:12:43 2024 by rpki-client on console-ams.rpki-client.org