Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File:                     _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier:          E/B7oOHlwIUjOqA9VEw2sm6HSdJ/NSJhfBfcWZ7ARhI=
Subject key identifier:   23:89:1B:8C:20:84:51:3A:9F:22:43:5F:C7:9F:B9:60:7A:A7:D5:7D
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer:       /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial:       018F874964B7DCD987E02FD24679D39124C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:24 +0000
Manifest this update:     Fri 17 May 2024 16:01:24 +0000
Manifest next update:     Sat 18 May 2024 16:01:24 +0000
Files and hashes:         1: 3WSq-qXX4WsrEuHLwoObKXxrwi4.roa (hash: L9ClOA47RwypZyDeWlYaiN8xD3q1q/ehcncEm8tEibs=)
                          2: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: 0xv9GUuk4ReTo+w3O2I4yGHGwG6yTGDkFeNYZRK7mE8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:64:b7:dc:d9:87:e0:2f:d2:46:79:d3:91:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
        Validity
            Not Before: May 17 16:01:24 2024 GMT
            Not After : May 18 16:01:24 2024 GMT
        Subject: CN=23891b8c2084513a9f22435fc79fb9607aa7d57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:9c:fc:90:22:10:e9:17:9c:dc:d6:bf:7b:
                    61:14:02:44:c7:55:d5:06:8d:52:be:2f:0f:56:fe:
                    eb:17:cc:9f:4a:f8:c5:41:3a:10:0a:ba:c2:c8:27:
                    94:26:f4:f7:b2:e7:70:95:1c:e0:2c:2c:7c:db:fd:
                    3c:66:09:b5:00:3e:2c:77:47:7c:4c:66:25:ef:41:
                    a8:2a:b0:22:2b:99:bb:be:be:c3:43:38:5f:83:c3:
                    80:44:00:59:7a:99:74:d9:19:f5:ff:a1:85:9e:b5:
                    7e:ac:75:c4:5a:88:45:96:60:6e:ea:c8:dc:49:8b:
                    c3:f1:61:6f:90:85:33:13:90:57:70:62:e5:63:bb:
                    8a:91:48:5e:fa:47:63:23:c6:4c:49:22:79:91:64:
                    e9:3d:3a:98:9f:d0:2c:25:58:ad:24:e1:f0:19:52:
                    31:de:17:80:cb:53:f9:55:01:5b:2d:fc:be:ca:e5:
                    8c:dc:78:40:de:71:9f:32:8a:1d:06:4e:77:6d:6b:
                    f9:34:38:36:21:85:4e:fb:e4:82:2d:6b:4f:74:ce:
                    e3:57:91:f5:8c:6e:c7:89:ab:7c:41:72:e3:a6:ea:
                    8c:9b:d5:71:20:ac:c2:26:ec:46:3e:46:63:e8:4c:
                    5a:1a:d4:c2:28:cc:91:b7:82:e2:83:43:b7:69:fc:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:89:1B:8C:20:84:51:3A:9F:22:43:5F:C7:9F:B9:60:7A:A7:D5:7D
            X509v3 Authority Key Identifier:
                keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:94:78:a7:ad:6c:e2:a1:63:f2:f6:13:11:98:17:34:cd:56:
         ab:fc:94:66:6c:75:cf:31:31:f4:b5:de:04:e9:f2:b3:4b:db:
         28:87:94:b1:08:33:1c:3e:ea:77:e0:87:04:c8:31:a2:c3:b8:
         8e:e6:2d:bd:ff:b4:b3:7c:60:cb:f3:fc:49:9b:5e:86:60:ab:
         10:aa:ae:30:71:cc:13:a1:0d:4f:51:7d:64:c7:a2:ea:43:c2:
         c4:d7:b5:31:03:86:a4:a4:10:ab:b3:76:ce:92:f7:c8:df:ac:
         0b:8a:a3:95:e3:2f:89:b1:75:c9:ac:47:73:ee:79:63:9e:67:
         a0:92:f1:e3:a7:9c:0f:08:2f:fc:62:38:62:c0:14:0c:fe:8d:
         e6:60:23:41:3f:7e:00:d0:72:91:02:47:43:a3:65:a5:06:c1:
         57:c3:db:f6:bf:b4:0e:47:5d:77:83:ac:1a:13:73:8f:5c:e2:
         34:87:fb:4b:6e:67:ec:4f:44:84:a5:a1:43:82:f8:d6:a3:c0:
         52:d2:58:8c:96:1d:34:19:b8:6c:84:ee:df:ad:a9:8c:39:06:
         8c:6b:c6:f2:ab:2d:e3:11:0f:6c:8a:4d:ff:92:76:63:4a:6a:
         77:0d:f4:ed:4f:9a:65:00:b3:3c:83:5a:37:93:d4:b6:f2:fd:
         ab:20:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:35:20 2024 by rpki-client on console-fra.rpki-client.org