Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File:                     urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier:          0POVaZU5MdOmj8oWapuSwAOYZ6BRiXUYt1u0aWmpj6k=
Subject key identifier:   52:A3:AD:86:C5:68:73:D7:6E:F4:95:F2:07:13:A5:B5:6D:75:8D:C0
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer:       /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial:       018F86A3A0B717B8A80C58134A113ADA90BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 13:00:21 +0000
Manifest this update:     Fri 17 May 2024 13:00:21 +0000
Manifest next update:     Sat 18 May 2024 13:00:21 +0000
Files and hashes:         1: Xps4R_BgEeQO_md8ngXbg9W4Dyc.roa (hash: CktoOIqzyqBqLLiHP+wN+Jh45pUmZPk8eVEnmc1oLR8=)
                          2: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: tVkgslGGMXYVRflnZc18d3y/gAoqPJjui5R851yyNBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:a0:b7:17:b8:a8:0c:58:13:4a:11:3a:da:90:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
        Validity
            Not Before: May 17 13:00:21 2024 GMT
            Not After : May 18 13:00:21 2024 GMT
        Subject: CN=52a3ad86c56873d76ef495f20713a5b56d758dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:ec:66:da:18:4c:b9:30:13:d7:b8:f7:28:
                    51:55:ad:f4:8b:8a:87:af:a1:5d:b3:9b:e1:b8:19:
                    e5:0b:a4:f2:da:93:9d:02:b1:cd:32:f6:37:ec:8c:
                    56:e9:41:85:c5:67:e9:bf:2f:ac:bf:48:49:6a:e5:
                    f3:87:70:be:23:db:e6:08:26:8a:2e:55:c7:58:0e:
                    81:52:e4:7a:7c:b9:2c:f0:32:6f:80:36:82:e3:ab:
                    60:e0:5c:4b:ab:31:7b:7f:76:bb:78:75:f2:12:3b:
                    c0:ba:ff:44:c6:d6:17:90:2a:4e:5b:a3:e1:e0:18:
                    fd:e4:f1:7d:ee:79:3c:87:00:c6:4b:b8:23:15:98:
                    bb:a2:b5:cc:19:64:5d:3f:a8:5e:f6:a5:9f:62:64:
                    4d:f6:c6:9c:15:7c:5c:27:f9:3a:c5:d3:87:2f:0b:
                    9c:27:8d:f1:5c:ad:52:e5:3c:f5:f2:b9:a8:f9:0f:
                    b5:64:1e:fc:63:67:af:02:70:da:e5:49:23:c9:cf:
                    a5:4a:da:0e:d9:e3:3a:b9:d8:0c:bc:28:44:e4:ff:
                    4a:1b:48:bb:e7:57:85:18:95:3f:22:68:59:56:55:
                    e6:2f:ee:99:88:30:8f:dc:1b:73:35:59:63:fd:16:
                    5f:ff:2a:58:f8:2f:e5:a4:d7:87:12:03:95:35:88:
                    61:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A3:AD:86:C5:68:73:D7:6E:F4:95:F2:07:13:A5:B5:6D:75:8D:C0
            X509v3 Authority Key Identifier:
                keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:b2:0f:ce:ff:27:17:41:f7:3d:63:e8:14:03:0b:d8:2e:
         91:8e:6e:d2:2e:2f:45:af:bf:8d:ca:f0:54:66:64:67:a9:85:
         4f:05:84:26:a5:e8:60:ad:e8:e7:ed:a7:69:96:c9:54:9d:33:
         45:5f:41:77:65:8b:bb:f9:cb:8d:0b:12:f2:1b:86:d4:4d:7a:
         1a:12:37:57:46:e5:4d:8e:43:cc:d6:20:8a:bb:a0:f0:de:cb:
         01:c0:4b:11:b8:33:69:9f:52:51:41:d9:88:0a:24:0b:cf:25:
         28:47:76:a9:29:24:03:ee:db:0a:3c:ff:88:ea:9f:4c:c2:9a:
         e1:3e:07:94:88:c3:32:6b:4c:53:6a:18:03:a2:21:f6:b1:ed:
         b5:07:34:83:a1:19:00:cc:e5:1a:09:64:cd:1f:73:ec:ae:e3:
         1b:85:5b:2f:5e:92:db:3c:cc:17:87:f1:29:04:11:4a:f7:95:
         3b:73:d7:1b:e3:15:aa:69:b6:87:81:95:fe:b0:0e:1a:d6:e2:
         01:a3:a1:61:5a:73:8f:0b:cb:06:b1:99:04:05:35:35:c4:ba:
         63:b2:eb:92:57:3d:23:ca:c1:00:64:9e:23:fb:ec:51:a7:99:
         99:c5:c4:f7:e1:dc:18:cb:d6:c2:46:e9:7f:29:7f:84:0a:c3:
         f3:81:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:38:25 2024 by rpki-client on console-fra.rpki-client.org