Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File:                     mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier:          y2zl81n68ozGtdJelE9zNCAYKngPCkacUGzto4oB2Ec=
Subject key identifier:   03:27:CF:D9:ED:2E:3C:24:EC:F2:18:9B:9B:CB:BF:50:B8:5F:D1:29
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer:       /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial:       018F874957D353C31E596908939BD3938120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:21 +0000
Manifest this update:     Fri 17 May 2024 16:01:21 +0000
Manifest next update:     Sat 18 May 2024 16:01:21 +0000
Files and hashes:         1: 815sabZ5eBKX704ZQ1fj0E7D0QQ.roa (hash: V7N85SSuN5Tg9loMUPuX7jnrrDGJmNECvUDjlRSsVIA=)
                          2: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: jD/xYAsuM0IZaAYCliV0aWlhVC8YokVHeNwt2T76ELk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:57:d3:53:c3:1e:59:69:08:93:9b:d3:93:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
        Validity
            Not Before: May 17 16:01:21 2024 GMT
            Not After : May 18 16:01:21 2024 GMT
        Subject: CN=0327cfd9ed2e3c24ecf2189b9bcbbf50b85fd129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:4b:7f:c1:43:dd:dc:aa:e7:9c:41:b9:16:
                    e2:1c:06:54:af:b4:b7:b9:63:c4:6f:d5:c1:cc:e5:
                    61:17:73:14:39:d6:b6:7c:6b:0e:88:93:4b:3b:db:
                    a8:ea:7a:ef:a0:e8:8a:70:ea:f7:8f:5f:92:64:fc:
                    63:2e:ec:36:a1:c8:88:53:58:63:b4:b2:4c:eb:5d:
                    d6:91:7b:24:7e:8a:00:26:96:16:84:23:bc:ce:e8:
                    9a:98:ec:11:20:08:23:c9:23:81:a1:54:44:47:aa:
                    5b:7d:12:77:35:1a:09:c0:52:43:32:bc:6f:1b:77:
                    f7:16:b0:ea:25:fb:18:cb:35:4c:bf:c0:61:54:e9:
                    41:bc:14:7f:96:27:4e:ea:8e:24:9c:dc:9c:2f:73:
                    0b:0f:ed:42:2d:02:13:af:d7:dd:db:fd:2d:b5:2f:
                    c3:ed:f2:f4:03:27:73:0d:3d:04:f0:03:18:25:75:
                    a8:fb:71:7a:d0:c3:0a:72:e4:3a:98:8e:64:5c:d8:
                    ee:54:41:ca:3e:62:47:52:36:fe:4f:0d:2f:52:bd:
                    ec:ec:17:ed:20:78:79:ff:95:e4:bb:89:b0:cd:cf:
                    bb:bc:1d:1b:a3:c4:c2:81:36:79:77:91:6b:97:bc:
                    dc:70:73:6a:73:90:03:81:18:b8:65:58:40:7c:6b:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:27:CF:D9:ED:2E:3C:24:EC:F2:18:9B:9B:CB:BF:50:B8:5F:D1:29
            X509v3 Authority Key Identifier:
                keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:34:74:5c:53:3f:15:28:6b:be:bf:6e:1a:f9:03:ab:9a:
         2d:3a:00:9e:f3:84:28:9a:b1:af:d5:49:57:97:54:ef:a7:93:
         4b:67:d9:32:7f:77:53:70:d0:53:7e:94:6a:e0:2b:57:46:82:
         f3:10:44:6b:7d:1f:36:13:12:b4:58:f5:ce:7e:ab:20:bf:1b:
         e7:75:f3:20:aa:1d:f6:48:d8:5f:63:59:f7:a1:46:72:0d:2f:
         41:28:0d:30:95:e5:29:1e:33:7e:af:4e:90:8d:88:aa:3e:8b:
         fc:6a:15:49:08:e8:44:d2:44:4f:56:08:c4:6c:9b:77:65:bc:
         6d:b5:27:2b:34:a6:2c:7d:36:81:4f:46:d9:6e:d0:84:62:b5:
         c1:88:08:a3:db:0e:f5:a0:44:54:a9:e3:0c:d6:cf:e4:ce:7c:
         d1:05:f6:91:75:08:b3:1a:a3:05:0a:5d:65:69:00:69:92:ba:
         f5:e8:c4:27:cf:31:5c:05:e1:ed:6a:01:9d:fc:7e:99:b8:2c:
         38:d9:79:e1:89:bd:da:70:0e:43:83:20:d4:be:3a:b6:ae:32:
         da:ef:e5:a7:af:ef:20:b4:04:57:ee:10:06:87:71:fb:fc:ff:
         f0:43:c2:89:cb:b0:0f:59:3a:49:46:bc:da:3c:e4:e9:71:c2:
         34:f8:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:01:53 2024 by rpki-client on console-ams.rpki-client.org