Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File:                     s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier:          MAwS1iH3Zm6YUpGLR2nhXhi84fNECLbMV/2hXBVpZwQ=
Subject key identifier:   19:54:A9:ED:A4:4E:35:1C:FB:47:DD:F5:AD:F8:10:60:E6:4E:A4:71
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer:       /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial:       018F87B6B45436E22E9323EBC5284E818C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: ohuXq8V-bzSVNjcAhYl1lVxvthw.roa (hash: 4sM+tzmdZWrYKexDYCjufpHc/hooRAqxyo2PyEcf7A0=)
                          2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: x42Udec4P9XT3ZdQfTA7BqRzMN8+MJ0ArPBsWoh4VN0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b4:54:36:e2:2e:93:23:eb:c5:28:4e:81:8c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=1954a9eda44e351cfb47ddf5adf81060e64ea471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:73:68:94:3c:32:58:30:f1:c4:01:48:75:
                    24:22:bb:30:1e:c5:3d:02:b7:8f:79:79:c8:d8:cc:
                    ae:3c:9d:f9:e7:10:50:19:8c:21:7b:0b:43:31:d3:
                    9f:1c:fb:4a:71:e7:36:a0:3b:83:bc:3e:72:a6:4f:
                    5d:a7:39:b8:d3:33:49:32:bb:4d:92:fe:ff:f3:66:
                    11:14:bf:86:d3:20:d7:04:56:cc:4a:0e:9a:b2:2f:
                    21:92:a6:cd:17:91:c9:e5:ee:1d:b1:df:0e:58:af:
                    31:2c:11:2c:42:d4:7d:07:22:0e:ed:e4:5d:67:7b:
                    3f:d1:cb:29:6e:2f:c8:dc:36:df:2d:38:44:91:34:
                    e5:cd:98:26:5e:1e:60:a7:09:c5:1c:0e:5d:a3:8d:
                    68:d9:65:94:e4:5f:a9:e8:de:72:ca:e0:cc:1a:ec:
                    c8:55:ce:4e:65:5e:a8:f2:67:d0:22:30:3c:14:04:
                    5c:80:1a:f4:85:e5:d9:f4:7e:5e:8b:50:6f:c9:ff:
                    45:1e:c3:f5:11:8d:1e:68:e2:fd:3e:be:5a:6f:85:
                    c1:49:54:07:af:d4:30:89:40:74:4c:08:ea:8e:87:
                    3a:41:9d:5e:86:a8:93:05:1d:c3:c6:39:8b:fe:02:
                    4a:d5:ca:3c:cc:5b:35:db:b4:5c:b0:75:f2:ce:f6:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:54:A9:ED:A4:4E:35:1C:FB:47:DD:F5:AD:F8:10:60:E6:4E:A4:71
            X509v3 Authority Key Identifier:
                keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:49:f2:4b:45:a0:c4:f5:2b:9b:86:07:ae:25:cb:8b:e8:73:
         a3:94:e6:a2:6e:c0:04:e3:09:ee:c6:a5:10:99:bf:79:21:ae:
         56:89:47:b9:68:c9:51:43:79:c7:49:16:23:f6:8e:a5:2d:76:
         55:18:86:07:8d:22:ab:a9:6a:1c:cf:51:04:e0:bf:af:3e:02:
         12:10:dc:e5:da:49:af:a5:f4:04:82:9c:51:05:81:91:4b:3b:
         4f:95:8f:7d:d1:48:6c:ef:00:24:af:69:66:4c:49:79:e7:9f:
         34:06:c0:dd:12:9c:03:6b:c8:98:a5:99:ea:6f:e2:32:4f:36:
         fc:12:ad:08:71:33:20:d7:16:ff:cf:9d:31:53:3e:e2:99:a1:
         55:eb:22:f1:4d:a9:fe:02:e1:f2:6c:09:cc:60:7e:8e:ff:7d:
         20:98:93:51:b8:32:65:08:aa:00:da:f3:80:76:21:9c:0f:49:
         55:be:22:b3:d1:bd:93:09:c9:cf:9c:6d:aa:e3:f4:74:2d:10:
         51:53:8f:f4:c7:37:87:c5:ba:03:39:97:3a:05:cd:84:01:d7:
         84:9e:33:36:2d:06:da:d4:e3:d0:1b:28:8e:60:53:fc:a3:f3:
         17:3f:a3:c1:9b:15:c1:f1:b3:49:98:e3:83:26:75:e2:91:df:
         74:b4:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:16:29 2024 by rpki-client on console-fra.rpki-client.org