Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File:                     runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier:          DEVvN+rOzX/oYJDtklgMrD3GsvdcfvzGGb35XVXE7GI=
Subject key identifier:   E3:A5:63:4A:CA:A5:FC:58:E1:28:8B:6E:84:CF:71:86:88:DE:5B:46
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer:       /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial:       018F8748C63FA8A78C6A17F3D1F1C14252C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:44 +0000
Manifest this update:     Fri 17 May 2024 16:00:44 +0000
Manifest next update:     Sat 18 May 2024 16:00:44 +0000
Files and hashes:         1: fw5Ep7-Is_8oai0y4ONnoTf45X0.roa (hash: l4+yLIdJevceVCmvkOM4iAvyeJ/axuhvZ6UrHEnZLEY=)
                          2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: PRuLRR6ewogbUGm4S0xWmnBVz5SlTJ5g4qDYxB3fLJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:c6:3f:a8:a7:8c:6a:17:f3:d1:f1:c1:42:52:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
        Validity
            Not Before: May 17 16:00:44 2024 GMT
            Not After : May 18 16:00:44 2024 GMT
        Subject: CN=e3a5634acaa5fc58e1288b6e84cf718688de5b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:90:49:5e:6a:67:a3:60:01:aa:c1:0a:5e:
                    28:7e:31:dc:2e:f0:ff:2a:f7:48:dd:14:b8:ab:4d:
                    78:d8:30:f4:56:be:5e:ba:0c:69:79:59:04:18:76:
                    9f:74:d8:31:f8:be:c7:54:bb:35:dc:2b:7e:4d:f4:
                    4f:29:57:55:68:30:5d:c5:96:3a:5c:b8:db:93:a0:
                    58:77:53:d2:cd:dc:12:f0:17:03:2f:ee:8c:b7:cc:
                    15:ed:5e:4a:6e:ac:16:14:3f:b1:ab:4e:6e:e4:9d:
                    c2:4e:be:c3:58:6e:ae:f8:43:76:d0:84:53:96:bc:
                    18:50:73:d6:47:43:87:f7:93:78:06:4c:d3:98:88:
                    7d:20:7b:8b:a3:ee:32:df:b7:fa:75:04:94:14:70:
                    3e:d7:9d:2c:ff:1d:80:a0:21:44:75:5d:6a:3f:3c:
                    e6:3c:52:b6:5f:54:f0:b3:c1:3d:df:f1:a4:7c:69:
                    9f:78:58:db:df:1d:d6:94:5c:4e:36:f2:04:72:9c:
                    40:12:e0:d6:2e:e2:01:70:20:7b:dd:a8:ab:c8:9a:
                    ea:40:48:2a:e9:a0:1e:39:55:ed:4e:4b:df:d5:92:
                    7a:3e:f8:2d:19:c3:e5:5e:2b:cc:6c:49:af:a8:88:
                    b0:6b:49:df:a0:ed:b4:dd:4a:77:d3:27:25:5b:fb:
                    49:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A5:63:4A:CA:A5:FC:58:E1:28:8B:6E:84:CF:71:86:88:DE:5B:46
            X509v3 Authority Key Identifier:
                keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:48:e6:75:19:ac:4e:99:29:a5:b4:41:72:86:64:a6:1f:78:
         48:af:c5:92:9b:a5:17:16:4a:88:b2:ab:4f:67:94:c2:c3:d4:
         11:cb:05:5d:5c:00:32:fd:91:74:05:37:da:fa:0d:7b:0a:af:
         e2:e7:8c:d9:af:50:35:d7:67:c0:4b:70:8f:29:ce:eb:aa:4f:
         70:07:39:b8:ee:e3:10:49:b9:74:3a:5f:12:5a:98:b8:23:7d:
         98:e3:7f:29:88:1c:7c:4f:16:f1:f4:98:d5:b8:26:36:ce:b2:
         be:09:ba:af:61:5f:97:3b:fd:20:7c:0f:3d:e0:62:af:51:2a:
         f5:eb:ef:cb:ea:e7:d9:f7:c8:33:11:c8:78:af:e4:c8:81:e3:
         87:22:02:18:eb:e2:80:0c:ce:aa:13:f9:d8:c2:e1:a2:14:cb:
         d4:53:d2:57:f8:f4:70:7a:ea:c7:b0:81:af:9d:97:87:3c:04:
         2a:da:95:92:2d:b0:37:4e:12:0f:26:6f:92:a0:24:cc:ce:b8:
         c4:5e:41:b0:da:d8:71:7a:ac:de:0b:d1:f7:0a:96:dc:b7:45:
         f6:0d:7c:d9:7d:68:68:ac:48:89:93:52:bf:a2:23:39:c8:de:
         19:d6:37:de:eb:26:43:d5:f3:92:65:f2:6c:32:61:2a:74:18:
         48:d7:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:36:06 2024 by rpki-client on console-fra.rpki-client.org