Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File:                     XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier:          STYIz+rjx6LSMIqth0vgtQgmb64XfwbpEFT3pLphF8g=
Subject key identifier:   58:7D:00:F5:F7:78:D0:BD:9E:D8:35:52:C7:D3:5A:8D:E7:0F:33:6A
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer:       /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial:       018F8749B04C8B200DDF4F08A39293963E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:44 +0000
Manifest this update:     Fri 17 May 2024 16:01:44 +0000
Manifest next update:     Sat 18 May 2024 16:01:44 +0000
Files and hashes:         1: RwVCxXAbrlCe47Q8cByTTlucwBQ.roa (hash: 7W0p5qHus5woM1i5wJ9yfYu2c2JuOJdA3qdPAIYD8rA=)
                          2: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: qtU4YoUINOZgr+5+chwX/mMAn/KKxRqA8VDx85eAmuo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:b0:4c:8b:20:0d:df:4f:08:a3:92:93:96:3e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
        Validity
            Not Before: May 17 16:01:44 2024 GMT
            Not After : May 18 16:01:44 2024 GMT
        Subject: CN=587d00f5f778d0bd9ed83552c7d35a8de70f336a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:5c:e1:be:44:96:1e:ff:0e:4a:25:ce:79:
                    57:c5:f3:74:f8:a9:b2:e4:9e:d1:46:fe:51:26:23:
                    d9:e0:d6:b5:94:cd:e1:7c:f3:dd:7e:d8:9f:f2:3b:
                    d0:ab:d2:0b:c1:b0:24:89:7b:1d:c0:6b:f7:ef:07:
                    e6:7c:29:ab:75:d3:b8:75:c1:3f:11:0e:2c:94:b7:
                    62:ae:8f:29:a6:f5:da:71:31:50:05:7b:ae:d1:d5:
                    0c:79:7b:da:2a:2f:be:91:71:28:79:7c:15:0e:a6:
                    5b:c9:27:0a:6a:3f:b0:8a:04:b8:45:95:c7:25:33:
                    f5:54:eb:f2:80:d8:b1:a2:0f:54:56:23:e8:40:82:
                    89:9c:3b:47:8d:95:69:cc:b0:06:b1:0f:11:da:f7:
                    96:ce:a4:9b:5b:01:45:91:a5:55:e0:d8:9f:45:23:
                    fa:01:81:a2:31:f3:e8:76:85:54:a9:2d:44:63:0d:
                    52:08:b0:07:ac:08:f7:a5:7e:5a:8d:83:11:57:af:
                    75:9b:8b:99:20:1b:e8:5f:c4:d9:88:7a:04:8c:02:
                    68:9e:dc:8a:59:40:79:ee:69:f7:1d:4a:57:ca:ff:
                    a7:92:03:29:1f:d0:e4:3d:e5:5e:6b:1e:d4:e8:3b:
                    80:a9:45:a2:69:6d:a3:d9:94:b8:0d:ed:aa:4f:cd:
                    9a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7D:00:F5:F7:78:D0:BD:9E:D8:35:52:C7:D3:5A:8D:E7:0F:33:6A
            X509v3 Authority Key Identifier:
                keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:00:a7:28:c3:4a:1b:15:ec:26:ef:30:6c:7c:7e:6f:c7:6d:
         e3:e5:b7:1f:7c:ff:90:00:e6:a7:77:2a:bd:73:9b:cf:b7:29:
         94:31:dc:2f:36:db:aa:df:42:88:2a:48:b1:95:2d:85:04:9a:
         d9:3e:e7:b5:37:9c:9d:9e:7e:66:53:66:3a:9e:e3:0f:64:9d:
         45:ae:05:7e:91:f6:7d:47:fc:cd:eb:4d:44:cd:d9:54:0d:b3:
         48:4b:65:b9:26:e4:ab:66:b9:96:1f:ab:2d:f3:2d:11:24:2c:
         69:18:6d:5c:72:1f:95:6c:28:d4:70:0d:2a:e7:83:9d:89:18:
         d5:fa:5b:13:42:87:7b:75:e5:cb:54:5b:e0:6c:82:5a:4e:98:
         61:89:1c:7a:52:18:7a:a2:01:1a:fa:8a:41:09:48:cf:c4:41:
         a2:78:71:ed:7d:34:7b:e8:55:80:cb:0c:e0:8e:bf:29:73:26:
         81:e8:a0:30:65:e8:52:ff:80:d3:d5:19:40:b9:ba:c5:ee:2a:
         e3:ab:5f:d3:bc:27:65:a9:74:9e:da:df:73:2d:a1:a0:b8:04:
         2a:33:1a:c4:a3:16:c5:5f:ba:fe:5f:fd:29:59:fa:21:23:4e:
         28:7c:51:88:3c:f7:41:e9:4f:07:51:a7:58:f4:55:87:39:92:
         6a:70:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:59 2024 by rpki-client on console-ams.rpki-client.org