Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File:                     Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier:          qUZdLcBI4zn8tIEi93SwMqciSCbzedBxAoGky4Mfv3A=
Subject key identifier:   98:3C:9F:9D:A9:7C:DD:72:13:70:F8:FB:03:69:25:C9:5E:C4:71:E5
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer:       /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial:       018F90F25607EC86930E803F1240639EF02A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number:          1181
Signing time:             Sun 19 May 2024 13:02:31 +0000
Manifest this update:     Sun 19 May 2024 13:02:31 +0000
Manifest next update:     Mon 20 May 2024 13:02:31 +0000
Files and hashes:         1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: 9SoFkrxVzh3co+MT0AJIqfki0/UWiiNaXUFeT8/t2DU=)
                          2: YEqHdJW_z13kdDDIGITxefq6R_g.roa (hash: 35jkPlKRlZX26qWM+NhHimMxYwOTA5rjAeBnPkgv03k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:90:f2:56:07:ec:86:93:0e:80:3f:12:40:63:9e:f0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
        Validity
            Not Before: May 19 13:02:31 2024 GMT
            Not After : May 20 13:02:31 2024 GMT
        Subject: CN=983c9f9da97cdd721370f8fb036925c95ec471e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:1e:db:c5:69:b5:63:f3:0f:24:69:8e:fb:
                    87:a9:3a:95:27:03:a4:41:0f:d0:00:8a:dc:cd:5d:
                    62:94:f6:3e:af:f5:6d:fe:88:04:6a:b1:d6:f3:71:
                    90:55:51:32:d9:15:3d:6a:e9:ff:87:61:9c:79:c2:
                    d2:2d:9f:ed:ff:57:fc:a4:c6:cd:54:77:53:59:f1:
                    70:52:26:40:cc:9f:55:83:e2:5b:96:7e:7e:95:3e:
                    b4:a0:83:24:64:08:39:c7:3b:bd:9f:5b:2c:40:bc:
                    b9:5a:d1:02:0b:83:03:5a:44:9f:57:9e:1a:a4:7f:
                    76:d4:32:81:66:19:0e:02:6a:e6:41:b0:3e:19:ec:
                    f8:12:78:e0:1f:c2:e4:3f:c8:16:d4:18:e6:a3:8f:
                    bb:16:d5:6b:13:65:10:c6:b5:12:eb:b5:cc:c1:64:
                    be:12:ef:11:09:ba:97:3d:12:f4:eb:54:49:7c:13:
                    3e:db:4a:87:40:68:35:1b:2f:9b:85:cc:8b:e8:38:
                    5f:6b:b0:c6:49:b4:b5:b1:06:03:97:00:65:f6:24:
                    fd:5b:6c:2c:ca:e3:31:73:57:88:be:13:da:d9:cf:
                    b1:0e:a9:e7:d4:8b:8e:6d:d0:7b:83:80:36:b8:9d:
                    f4:a7:29:e6:33:9c:f2:5c:83:71:85:fb:84:f1:20:
                    38:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3C:9F:9D:A9:7C:DD:72:13:70:F8:FB:03:69:25:C9:5E:C4:71:E5
            X509v3 Authority Key Identifier:
                keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:40:eb:95:83:5a:ff:62:2b:d4:e9:85:69:5a:c7:0a:df:
         e2:38:f0:07:e5:ea:e3:4b:30:e2:b3:cc:f7:50:38:b2:24:65:
         87:3c:22:1c:02:15:10:de:0e:8c:f1:46:63:90:0f:8a:ab:c6:
         fb:8d:19:0d:ab:a7:c8:53:a1:46:61:93:26:c6:3f:3c:66:68:
         f6:41:65:23:ad:db:54:bf:7c:da:6a:ff:85:3c:8f:84:cd:89:
         8c:3d:30:bf:82:50:b1:1c:a5:f2:92:cb:e8:9e:2f:2f:18:b8:
         07:e8:13:bc:ed:50:ab:92:43:e4:5c:25:71:30:80:3c:66:43:
         b6:2e:fd:f4:4f:21:5e:31:bf:27:0d:c6:cd:82:92:7a:87:8c:
         ed:cf:c9:e1:b0:fc:a9:c1:d4:c2:14:df:b2:f2:f3:6d:33:3d:
         ef:d3:6f:29:73:1c:5b:61:e1:20:1a:65:c2:30:93:c8:a7:d1:
         fb:ba:eb:5d:37:2a:da:fd:0c:c6:bf:07:3b:8a:6c:2d:a1:1a:
         ba:20:6c:43:79:7a:46:c1:71:cd:a1:9b:70:fc:d9:d0:f0:8c:
         57:ca:f4:ca:71:c4:d4:12:82:03:08:f9:a8:f2:2c:86:53:74:
         13:4b:4b:9d:84:96:44:7b:c6:91:92:76:a7:64:4f:9f:00:0f:
         c4:19:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:42:54 2024 by rpki-client on console-fra.rpki-client.org