Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File:                     cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier:          hNLMHqmbQV80KYK56A6wyLWl3aE568tfW1xQojesb9Q=
Subject key identifier:   97:B3:E1:EA:6F:75:F4:08:8D:61:5C:58:69:95:6D:70:0D:8E:7C:9D
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer:       /CN=709d69957d333432accac810231e289388e302e2
Certificate serial:       018F87B65506027D9A89C2D3EF044BA0A24A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:24 +0000
Manifest this update:     Fri 17 May 2024 18:00:24 +0000
Manifest next update:     Sat 18 May 2024 18:00:24 +0000
Files and hashes:         1: bWHKgCmcMYLntSLKZbrE6RObN7I.roa (hash: bAG5MeySUmSx1wWq4wvyULspP0dnGhiSl213COS0RnE=)
                          2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: kATAjEDHBnVMrzdNPMKouOKyJwheomyVgrGrWx/srlU=)
                          3: mISpu_n-YL9vYFzSE14Tk2a1rNU.roa (hash: WZhc0IAPvclblTG7bYl2mtS/VFQmUVl/Lx1k/Xr9M6w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:55:06:02:7d:9a:89:c2:d3:ef:04:4b:a0:a2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709d69957d333432accac810231e289388e302e2
        Validity
            Not Before: May 17 18:00:24 2024 GMT
            Not After : May 18 18:00:24 2024 GMT
        Subject: CN=97b3e1ea6f75f4088d615c5869956d700d8e7c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2b:95:c3:9a:47:22:6b:b6:12:0b:68:eb:35:
                    32:b0:cc:e3:ea:c8:f1:40:3c:47:a6:9a:50:5f:87:
                    52:dd:f4:71:99:63:06:c1:3c:7b:07:27:d2:f5:d5:
                    c2:c9:7b:f8:3a:47:b9:e3:98:82:c4:21:50:1e:91:
                    13:59:23:a1:48:49:e1:d6:d2:da:34:f3:a8:55:fb:
                    2a:6a:6e:99:eb:11:81:5e:94:47:c2:4c:e9:dd:f1:
                    b4:14:c5:2b:51:7d:9a:20:29:5d:6d:32:88:bf:b1:
                    de:a7:76:0a:8c:c5:45:07:8b:43:97:5b:cf:37:90:
                    ac:6a:5d:6a:5d:56:47:b6:94:78:3b:54:c9:04:4b:
                    7c:c8:2f:ff:d3:70:d7:18:f2:12:3a:f3:51:51:61:
                    26:67:bb:0b:42:67:d2:61:d6:d5:ec:be:78:3a:f9:
                    6e:34:e9:1b:34:68:ea:4c:d7:e4:4b:2a:4f:11:b6:
                    41:f3:70:f3:76:b6:b3:b1:83:a5:c6:d0:02:03:47:
                    bc:f8:9a:0c:d0:4a:91:bc:bd:4b:d0:c7:f9:47:bb:
                    f7:f4:45:6c:7d:b2:08:ed:f9:8a:3d:93:59:0d:f9:
                    0a:02:c4:8e:91:74:d6:47:63:44:fc:1a:ae:69:23:
                    d0:11:ac:f8:5d:62:69:35:69:cc:75:d6:00:b1:5f:
                    d8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B3:E1:EA:6F:75:F4:08:8D:61:5C:58:69:95:6D:70:0D:8E:7C:9D
            X509v3 Authority Key Identifier:
                keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:54:a1:7c:00:2a:fa:ae:a2:f6:54:c0:85:cc:e5:5d:7f:00:
         d5:b8:e5:9e:06:74:48:e7:6a:ff:9f:9d:6e:14:e8:f7:1d:c7:
         7e:af:c2:3e:e8:e1:c4:a9:3a:59:47:5f:6c:d5:26:94:28:97:
         8a:91:e3:88:31:9e:83:b5:42:15:02:dc:16:28:9c:a2:44:71:
         69:ea:a4:b9:45:4e:cd:19:b7:0d:fc:1b:c4:90:7d:49:ab:7e:
         ad:c6:48:2f:f0:c8:60:57:b5:55:a2:9f:ee:3c:d7:05:fd:44:
         48:db:65:ef:b9:1c:c1:44:a6:56:7c:35:72:1c:09:f4:31:22:
         4c:46:1a:ca:88:f6:c6:26:48:46:a3:11:a1:dd:71:88:97:bb:
         3f:11:24:74:b8:89:85:25:61:c3:57:d0:ab:b8:7f:81:38:1c:
         51:4d:57:4d:ca:6b:95:6d:62:f8:0c:ce:3e:93:60:e7:d5:b3:
         98:72:41:de:30:9c:be:d9:bd:5c:65:ae:f0:97:ca:e3:04:42:
         75:fc:53:60:53:0b:45:68:15:ae:74:0e:3c:7f:24:8f:d6:6d:
         e4:41:65:b7:94:92:98:72:dd:8f:61:24:67:4e:e0:18:52:e4:
         8f:d3:41:47:ae:c8:07:c6:be:e5:44:60:7c:f8:8d:09:40:c0:
         a2:5e:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:52 2024 by rpki-client on console-fra.rpki-client.org