Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File:                     r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier:          2QQOYXV8ke+nIeEWQ/O23Kd5T1BUvnF17zffp8R+qxA=
Subject key identifier:   D2:82:7F:DB:C0:28:39:BC:5A:47:93:22:1D:3B:52:82:81:DD:A3:08
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer:       /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial:       018F8748ED1D3D49A9206FB57D7B5D2E6026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:54 +0000
Manifest this update:     Fri 17 May 2024 16:00:54 +0000
Manifest next update:     Sat 18 May 2024 16:00:54 +0000
Files and hashes:         1: PaTDdBw0p1PsCThng42hqoHoL9Y.roa (hash: xePkVeyvewRejQtvWsEvoBhoJFrEHQQb/TlP/Bm4RfA=)
                          2: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: dg7peFZfJz8ye/PrkpoPP17qfU9bxdVvybK+HDJ65Bg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:ed:1d:3d:49:a9:20:6f:b5:7d:7b:5d:2e:60:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
        Validity
            Not Before: May 17 16:00:54 2024 GMT
            Not After : May 18 16:00:54 2024 GMT
        Subject: CN=d2827fdbc02839bc5a4793221d3b528281dda308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:a9:b5:7d:bf:71:3c:d2:c5:06:08:64:5b:
                    13:11:bc:33:56:56:4d:e3:27:b0:61:4f:1a:c9:06:
                    9a:40:47:d5:fb:db:5a:0b:57:e6:77:1e:e5:8e:68:
                    80:b9:14:93:2b:fc:04:91:86:ec:8d:7c:84:e5:40:
                    ab:81:f1:fc:e2:40:e2:ae:64:33:c1:ef:9d:b7:8b:
                    1b:b2:f6:ce:a6:e7:5c:13:59:0b:6a:ad:cc:06:8c:
                    f5:b8:78:fb:f7:84:42:f6:19:1e:b2:f6:ba:36:de:
                    84:e7:65:28:56:72:d6:87:6a:03:c2:f1:88:d5:cc:
                    4c:b2:0a:f6:c1:43:6e:84:95:99:76:b9:e4:95:5e:
                    35:b0:e4:d0:a5:08:dd:17:ca:55:19:9f:cc:1c:7f:
                    63:da:ea:9c:44:ba:7e:ef:3b:2f:42:d2:e7:91:4a:
                    99:7e:3f:be:92:33:59:40:06:5c:18:f7:f4:fe:f3:
                    2b:57:ce:e3:32:24:ef:fd:b5:88:b7:fa:14:fa:ec:
                    6d:7e:3d:0a:73:98:76:8c:42:78:b5:1d:3a:79:d8:
                    66:d2:b3:46:c3:3e:91:ce:6a:0f:e4:3a:97:37:ac:
                    b3:3b:67:7e:50:40:55:51:38:ec:71:ee:e9:e5:12:
                    ed:6c:cf:db:36:40:10:91:36:35:f9:04:3a:11:51:
                    d8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:82:7F:DB:C0:28:39:BC:5A:47:93:22:1D:3B:52:82:81:DD:A3:08
            X509v3 Authority Key Identifier:
                keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:89:77:29:ba:df:5b:54:12:2f:40:36:d6:08:12:ae:71:a8:
         a9:bd:f2:6c:92:c6:3f:6d:26:61:71:f4:bd:0d:86:2b:d7:56:
         7f:fd:f9:36:78:f5:ab:ff:ee:bd:38:7b:8f:03:8f:13:51:a9:
         b4:06:f5:58:77:99:9d:a4:8f:a0:31:5c:75:c6:43:9f:15:23:
         e9:3c:cb:1c:9f:26:1e:1d:e9:40:a6:94:fb:99:dc:37:7a:44:
         6e:e7:10:3a:ab:ba:a4:09:9c:a1:7e:ca:64:47:9c:d9:bf:37:
         c4:ac:8c:43:63:e3:32:17:fa:9a:6e:d2:af:55:c9:e5:e7:7e:
         e2:83:9d:87:14:df:03:63:05:1f:31:4a:ae:a8:61:81:6f:bc:
         c8:95:ae:2a:f3:2d:14:14:79:48:15:31:8f:f9:02:57:b5:d0:
         d1:27:87:0d:62:7f:98:b2:29:88:fc:4c:95:2c:8f:a3:09:55:
         02:17:65:7d:4e:eb:1a:3c:8b:5d:e3:63:14:0c:b1:eb:89:44:
         6a:17:49:a8:1c:73:bf:4f:86:50:37:d3:90:35:a0:1c:69:85:
         62:8e:c7:04:f1:a3:77:e5:c1:35:84:29:2c:f0:0b:8e:34:05:
         54:b3:b0:f2:52:e4:0b:de:ae:e2:c8:d9:f4:6a:2a:74:e9:77:
         23:35:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:35:22 2024 by rpki-client on console-fra.rpki-client.org