Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File:                     of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier:          H5koiLj+7/orXrw0jA/XEdSK1x30YI4/yQ/uA4zTfPg=
Subject key identifier:   F6:F2:C7:09:94:A0:31:0F:52:3B:46:01:3F:77:86:BC:1C:41:BE:9F
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer:       /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial:       018F8824572A0733F6208D9A12E6576D6576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:33 +0000
Manifest this update:     Fri 17 May 2024 20:00:33 +0000
Manifest next update:     Sat 18 May 2024 20:00:33 +0000
Files and hashes:         1: Dvj2m8pJW0FdLm2QTA4nYmu3FeE.roa (hash: TrrltUGypnjCsCQf0dR2BGvuHrHT0qIG9U2qMrgiSHo=)
                          2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: gx5iSB1F2jAfRWTgMllh1w0G534G1eP7oIsP5pZQLQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:57:2a:07:33:f6:20:8d:9a:12:e6:57:6d:65:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
        Validity
            Not Before: May 17 20:00:33 2024 GMT
            Not After : May 18 20:00:33 2024 GMT
        Subject: CN=f6f2c70994a0310f523b46013f7786bc1c41be9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:c7:bc:cb:f4:9f:2a:f6:9c:85:aa:85:cb:
                    67:35:0b:b5:b1:7e:bb:ac:ed:86:1e:ec:34:51:f7:
                    72:a4:b3:b0:82:cf:3d:1c:ac:27:76:f1:b8:ce:d3:
                    d2:5d:a2:75:d5:32:52:e6:6d:f3:28:db:c9:77:f9:
                    ba:5f:b8:9c:8a:a2:00:45:87:7f:0e:dd:10:6e:4d:
                    cc:be:96:66:7f:a8:01:78:0c:a3:a7:ee:31:70:7f:
                    3b:ee:f1:22:6f:21:3f:ba:32:3c:93:9f:78:5a:b9:
                    27:a9:6a:eb:28:b6:c0:5b:65:78:ac:0d:1c:4a:5f:
                    d2:03:25:3e:0d:6f:82:b1:87:3d:34:67:4e:00:b3:
                    c0:08:fa:dc:60:50:09:1d:15:e5:8d:8e:97:73:78:
                    c6:07:ac:b3:94:27:2c:bd:9d:dd:65:74:f1:a1:a6:
                    4b:70:36:a9:bf:89:49:94:65:1a:60:10:fe:f7:d1:
                    30:01:35:aa:b6:11:d1:60:5c:e0:0d:78:87:06:de:
                    39:0f:f7:4b:06:1d:dd:6c:a3:e7:61:da:9f:02:ef:
                    b4:38:3f:15:8e:8e:67:81:ff:b0:70:f2:9d:1e:6d:
                    3f:65:2f:06:e2:18:83:b3:b3:42:73:49:81:99:3f:
                    d3:b0:20:c7:81:d6:48:b6:d9:4d:71:2f:ed:78:c0:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:C7:09:94:A0:31:0F:52:3B:46:01:3F:77:86:BC:1C:41:BE:9F
            X509v3 Authority Key Identifier:
                keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:ee:a6:3e:ee:6c:1b:2e:57:c6:a4:19:c2:a0:a1:5e:6a:57:
         a8:78:72:41:6e:fa:20:df:1a:bd:da:13:47:83:19:01:20:45:
         44:1c:f8:6e:5a:0e:aa:30:59:8b:dc:db:36:67:7a:cf:a1:d7:
         50:f8:b2:17:27:09:95:d4:8d:4a:f2:5f:79:97:f9:ac:15:5a:
         35:c5:cd:1e:8e:1a:b6:8e:bd:77:11:f5:a2:db:36:72:3d:26:
         d9:cc:b1:77:d0:36:f6:70:af:fe:8e:9d:d3:a8:7e:14:7c:f0:
         60:d5:7e:d7:eb:e0:5c:dd:f0:8d:af:a0:79:11:66:84:db:e2:
         40:2a:91:02:57:c8:c7:9f:06:7d:5d:0a:1f:7e:eb:94:36:22:
         1d:01:5c:1f:36:a0:9e:a4:47:9d:6e:d9:c0:ab:4a:1a:d9:7e:
         6d:c6:e2:50:1d:1b:14:6d:2b:23:05:6c:03:38:17:6c:5d:ac:
         cc:0f:0a:d2:b4:14:69:0a:7b:6b:e0:33:b7:1d:ac:3e:51:fb:
         77:f2:92:17:96:ac:bc:a6:92:2f:83:fc:15:b5:fa:d3:0a:bf:
         4a:85:91:fe:ee:55:f2:b9:c4:5c:a4:6e:26:fa:d8:15:00:1d:
         f4:80:f9:88:d3:87:c3:b7:49:34:19:66:bc:fd:2c:7e:45:0f:
         e9:15:07:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:19:51 2024 by rpki-client on console-ams.rpki-client.org