Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File:                     iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier:          YeSk8XE0ltlpXzbcOvpCjH2aeo4PmFJGZn7cvoYQ4OY=
Subject key identifier:   E1:3A:32:A0:82:AF:63:EB:7F:74:CA:78:75:70:C3:CB:A8:19:D0:2E
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer:       /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial:       018F874B1E9D493D8AAD5870CDD5DDF950FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:03:18 +0000
Manifest this update:     Fri 17 May 2024 16:03:18 +0000
Manifest next update:     Sat 18 May 2024 16:03:18 +0000
Files and hashes:         1: L5V2OadTxfY_FNcI0967EGfq2_g.roa (hash: EoMPFZImvfe7Q3FXRguMb7lutK5CndKBOIhUNmmr7qA=)
                          2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: m45f7yBnyTZsozQMAif6fQnKlSSTy0wKa6gi/NfisFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4b:1e:9d:49:3d:8a:ad:58:70:cd:d5:dd:f9:50:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
        Validity
            Not Before: May 17 16:03:18 2024 GMT
            Not After : May 18 16:03:18 2024 GMT
        Subject: CN=e13a32a082af63eb7f74ca787570c3cba819d02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:d6:48:6e:b5:2a:07:5a:e4:2e:65:15:79:
                    11:d7:ce:ad:12:42:f0:c3:3b:32:2f:e3:6d:a8:e3:
                    d7:c9:63:f8:61:66:c6:24:02:21:79:9a:fc:ae:30:
                    19:4f:26:ec:f1:ca:0e:9d:41:24:40:97:8a:52:24:
                    e3:ae:ad:99:4f:b9:82:17:ec:f5:ee:5c:17:9f:00:
                    60:d1:2a:80:95:d3:cd:47:3f:a4:79:29:8e:3b:cd:
                    4c:0d:2e:3c:75:59:66:95:2b:ee:49:cd:27:1d:a4:
                    47:27:82:d7:e3:c9:62:76:d7:7d:4b:96:b7:d1:cf:
                    d7:86:15:21:8d:56:29:3f:83:fc:2d:95:82:55:56:
                    d7:5b:88:f0:44:af:ca:97:d0:1b:31:98:63:c0:87:
                    cc:d5:70:ea:69:78:1f:0f:c0:d8:8e:19:1d:15:b3:
                    58:af:d5:83:5b:cc:86:61:8c:2a:4f:9c:fd:bc:47:
                    82:f9:a9:05:0c:99:32:a8:87:ba:80:85:42:ba:32:
                    43:58:ba:b4:ba:70:e3:9f:9a:46:31:0c:fd:48:a5:
                    00:e7:4e:1f:03:0e:fe:3a:eb:9d:6c:80:59:93:b5:
                    ab:7e:cd:3e:43:b8:f5:1c:bf:1a:ee:ec:f9:72:a7:
                    92:88:2b:c4:2b:10:9d:8f:ce:af:ec:ec:da:af:3b:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3A:32:A0:82:AF:63:EB:7F:74:CA:78:75:70:C3:CB:A8:19:D0:2E
            X509v3 Authority Key Identifier:
                keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:45:21:ce:12:2a:36:b5:54:71:09:2f:58:fe:17:29:28:
         df:86:30:05:3b:a6:52:3c:04:bc:7e:6e:87:7c:c2:3d:fb:db:
         dd:33:4d:52:f7:cd:ad:19:84:12:21:27:0c:15:97:05:59:cf:
         5d:52:49:fd:64:89:15:a0:84:c8:80:a8:7b:03:ce:f1:6f:db:
         dd:0b:67:e3:c2:6e:b8:43:df:0e:0a:cc:76:12:a2:26:33:f3:
         3e:ae:10:83:c9:56:74:18:e2:20:87:9b:2c:b7:52:79:64:09:
         a7:91:94:46:1a:fe:6b:aa:10:1c:02:5f:3e:b7:b1:a5:09:9a:
         72:12:64:c0:dd:59:18:b7:22:6d:38:0c:50:47:2e:3b:ee:3d:
         02:df:82:c9:dd:ef:25:1f:3a:ec:81:32:d9:2f:5f:08:6c:bb:
         b4:df:14:e5:3c:e0:a8:f7:02:6c:1d:77:c6:57:db:77:3b:f7:
         19:77:4e:52:50:c0:97:69:ec:47:73:77:f5:c6:b6:3d:ae:8b:
         6d:02:bf:99:07:2c:ec:dc:7c:e6:55:59:8d:c1:be:69:07:70:
         2d:eb:73:d0:f2:60:18:95:31:19:cd:f1:7e:e9:0a:ec:84:8f:
         7a:99:3b:3c:0d:19:bc:c1:8d:01:d2:84:51:13:9c:2d:9c:6f:
         7a:5f:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:15:18 2024 by rpki-client on console-ams.rpki-client.org