Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File:                     xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier:          8MuyhWNqEqOrcwabGf/J7oiEtgwEi0FO1ZXyQjo89Zc=
Subject key identifier:   84:18:8B:7D:79:FC:8A:5A:E4:2F:CA:8F:C2:22:F8:9A:06:F2:E9:23
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer:       /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial:       018F88247115688BC6CAFA03091203C2EAB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:40 +0000
Manifest this update:     Fri 17 May 2024 20:00:40 +0000
Manifest next update:     Sat 18 May 2024 20:00:40 +0000
Files and hashes:         1: 8kXKPLfqNX8t_Kg3Y6knQgG6R80.roa (hash: eBCjC0ABs0DwXSn6ajWZZEpDFipQaUudKldv5EtFv5o=)
                          2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: brSWI+8uK2v4/HSWj29yJMiOpEMLuNSh2jvC23yaOeI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:71:15:68:8b:c6:ca:fa:03:09:12:03:c2:ea:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
        Validity
            Not Before: May 17 20:00:40 2024 GMT
            Not After : May 18 20:00:40 2024 GMT
        Subject: CN=84188b7d79fc8a5ae42fca8fc222f89a06f2e923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8d:1f:7b:f1:b1:bf:1a:82:2e:27:24:6b:5c:
                    fa:3c:5c:92:31:6a:41:bd:80:3d:13:dd:f4:0d:47:
                    74:1a:8a:48:93:3b:b8:be:f7:c1:b1:72:19:a8:2c:
                    37:8b:32:e9:f1:46:e4:e0:98:f9:f9:d7:23:59:ce:
                    d5:0c:4a:e6:54:08:0f:d5:89:51:5c:68:9a:78:85:
                    b5:8b:a2:d7:41:34:d4:33:85:d3:4f:df:56:16:66:
                    e1:fc:d7:eb:a2:83:8f:66:d5:9b:ee:45:31:ee:6d:
                    a7:e6:c8:19:d2:16:ac:22:db:e6:e6:5a:9b:47:79:
                    1a:b6:9d:f4:8b:16:72:19:6a:08:d1:40:64:2e:96:
                    94:ac:0a:18:dc:9a:5d:a4:68:27:3d:69:05:98:c0:
                    88:5a:04:bc:74:3b:c8:2d:c0:e4:c0:f5:83:d0:eb:
                    ff:98:06:ff:66:64:25:98:53:76:28:b2:94:c1:66:
                    b8:e8:ad:24:0b:da:44:d6:2e:2b:9d:7c:64:3a:a8:
                    2a:f0:b6:34:de:16:1c:44:30:7d:17:04:fb:92:31:
                    bd:77:f3:ac:66:45:1f:f0:31:5f:96:18:69:7a:27:
                    ce:a3:cb:e4:b1:0e:60:0c:25:c5:13:a1:6b:06:cc:
                    03:53:09:61:3d:b2:a6:d7:84:c5:15:49:92:c4:a5:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:18:8B:7D:79:FC:8A:5A:E4:2F:CA:8F:C2:22:F8:9A:06:F2:E9:23
            X509v3 Authority Key Identifier:
                keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:7f:b2:00:1a:61:94:d8:54:71:f0:2c:3e:36:0f:03:47:
         d4:d5:3e:53:d9:98:d3:45:6c:a7:4a:d2:48:d7:7c:41:0c:9e:
         5a:5f:e7:ab:40:10:41:59:4d:66:dc:5c:43:d4:65:3b:1d:19:
         4a:c0:eb:13:ae:3a:6a:a9:96:1d:70:98:34:37:96:e9:6c:68:
         ab:a5:08:c3:f3:73:ea:b3:21:5a:b6:bd:1a:31:64:bd:40:73:
         33:84:43:8c:8e:49:94:74:08:d2:da:29:64:35:f1:5c:f8:13:
         57:e7:36:d3:91:b4:21:e2:97:0d:00:7f:8e:20:2d:c4:d7:41:
         e7:5e:ad:eb:6d:63:5a:9f:b0:be:47:a3:e4:34:d5:90:1d:7c:
         c4:21:ac:87:c5:90:33:0a:48:75:01:d2:da:10:6f:38:1f:0f:
         4e:5b:dc:e2:74:53:e0:81:9e:8a:73:ff:bf:7f:81:31:36:15:
         5d:e2:05:34:bb:1e:f9:34:06:e5:16:31:e0:82:23:ff:7f:19:
         de:3e:ed:71:94:fe:c5:8f:6d:48:5b:0a:0b:84:c9:01:b4:c1:
         ff:c2:95:6f:6c:30:9d:11:ab:31:38:92:7a:80:03:d4:e7:4c:
         dc:fe:e9:90:15:ac:98:76:c6:57:65:d9:0f:6a:42:77:60:a7:
         19:77:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:13 2024 by rpki-client on console-fra.rpki-client.org