Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File:                     rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier:          bCJtpS/SoO570a0xvjf0wI57/22GuUCqdrc02FdKSw8=
Subject key identifier:   C0:D1:BF:BB:C1:05:52:FA:A0:D0:90:56:03:51:5D:BE:D4:A2:BE:A4
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer:       /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial:       018F8824202DA09C6E62CCC81B05F4465CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:19 +0000
Manifest this update:     Fri 17 May 2024 20:00:19 +0000
Manifest next update:     Sat 18 May 2024 20:00:19 +0000
Files and hashes:         1: 0wHpflQI31kShgib9usWCa7OqTc.roa (hash: ygVcjqDZInZ09D1qOVG6xH2HYLeP60g26d7nIWj8JtI=)
                          2: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: HNKrOmE8d2cA5dT7VJoJp8/Z95BfBuWhBeRNgNvg8ZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:20:2d:a0:9c:6e:62:cc:c8:1b:05:f4:46:5c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
        Validity
            Not Before: May 17 20:00:19 2024 GMT
            Not After : May 18 20:00:19 2024 GMT
        Subject: CN=c0d1bfbbc10552faa0d0905603515dbed4a2bea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:f1:a6:ee:3b:61:35:8a:49:de:2b:bd:a1:
                    80:0b:23:62:3c:4e:a5:96:97:7d:ac:33:08:21:fe:
                    a2:21:51:f6:26:4c:b8:3b:87:59:42:0c:5b:c4:8d:
                    9e:33:b0:78:9a:b7:4e:97:a9:a2:23:75:bd:ec:78:
                    e7:04:a0:9b:fa:2d:6b:6b:a9:02:98:6f:98:78:89:
                    ce:17:78:b9:df:68:3e:d1:e8:aa:57:25:eb:8b:b6:
                    1b:f2:09:85:ac:22:a2:67:cf:43:55:24:b2:85:1b:
                    24:45:16:bd:ff:74:a0:ff:c0:6b:9c:31:83:38:8a:
                    42:18:fa:fd:85:8c:bd:c1:a6:56:ff:6a:a4:fa:0a:
                    18:ee:91:cb:15:b2:49:60:fb:74:2a:97:a1:56:9c:
                    2a:35:5c:45:2b:2d:64:74:ac:ae:1f:01:a2:3e:c3:
                    ca:8b:c2:87:20:7b:f2:9c:88:43:e8:a3:e1:1a:e1:
                    d0:36:dd:99:b7:1e:ff:45:6f:d2:4a:0b:e9:11:25:
                    be:d7:09:f7:5c:ef:24:a5:2e:b4:ad:e3:27:4a:70:
                    b6:30:ce:ea:8a:a0:92:ce:35:54:f8:ba:f0:9b:56:
                    bc:fe:05:ab:25:eb:8f:cb:88:a2:a8:9d:38:3d:92:
                    a9:2b:26:27:a7:9c:37:ca:81:16:ef:8d:a9:a2:1f:
                    ed:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D1:BF:BB:C1:05:52:FA:A0:D0:90:56:03:51:5D:BE:D4:A2:BE:A4
            X509v3 Authority Key Identifier:
                keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:0e:3c:eb:10:b2:64:a1:b8:90:f7:27:ba:06:80:e8:cb:8c:
         ae:9d:b1:bf:7e:3a:9a:56:4f:a6:bb:e8:09:3d:d0:44:68:b5:
         a0:17:fb:e4:4b:01:e6:64:d6:4c:2a:43:4d:b1:3e:bd:9c:52:
         64:f6:c4:c6:60:60:4d:07:5e:66:97:50:e7:da:0d:7b:c9:01:
         49:f7:0e:56:d5:1f:d3:3d:7f:4d:6c:6b:52:64:40:40:b5:4c:
         5f:09:b2:74:34:8c:01:a2:82:49:64:af:70:ec:70:d6:a9:6c:
         87:51:13:5c:c1:bd:4e:1f:11:72:08:8f:02:e0:2a:48:6c:f4:
         5f:41:7c:17:77:34:43:eb:71:2b:43:ab:5d:10:c7:38:92:9d:
         1f:33:3d:08:cc:78:c6:fd:7b:d8:d6:f4:70:83:71:92:17:43:
         49:ff:66:ce:f8:28:64:44:23:ae:49:59:80:c9:c2:f0:e1:f5:
         fe:2a:74:b3:dc:c3:f9:2f:8e:2e:05:03:1d:95:10:fe:7d:13:
         d7:80:93:ea:97:ac:55:aa:fd:55:11:8d:e7:ce:80:40:39:41:
         cb:bf:f8:e3:7c:50:f2:a2:34:a0:32:b1:77:1b:03:49:52:1f:
         aa:6d:c2:fe:9f:be:b3:51:87:95:bb:5f:85:ab:af:7f:4a:a9:
         cc:3e:78:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:44 2024 by rpki-client on console-ams.rpki-client.org