Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
File:                     AnTQhnltTXea0WTCTCI_JrMoTtQ.mft (raw, json)
Hash identifier:          E/9PugWp1cgPFceZ7NKLS5rKGr/sLzxcVTS+wpmEktk=
Subject key identifier:   0F:EB:62:EF:5C:C4:B4:C2:E8:AB:86:3A:8B:7C:74:CF:E0:EF:50:1F
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Certificate issuer:       /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial:       018F4A8FA10ED5C4AAF5B2A7443D16DCA9A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
Manifest number:          1159
Signing time:             Sun 05 May 2024 21:01:17 +0000
Manifest this update:     Sun 05 May 2024 21:01:17 +0000
Manifest next update:     Mon 06 May 2024 21:01:17 +0000
Files and hashes:         1: 9C3ttLb80AdC60c5ihyJY9pw98M.roa (hash: Y7k1CVw2EwXHJp7xtpbcardaI6KJ/pfUW2fC2o5c4tI=)
                          2: AnTQhnltTXea0WTCTCI_JrMoTtQ.crl (hash: +q4z8fAx3GB8lNlq++bPn47Qc7yP6YXuGWSpzB07N3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:8f:a1:0e:d5:c4:aa:f5:b2:a7:44:3d:16:dc:a9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
        Validity
            Not Before: May  5 21:01:17 2024 GMT
            Not After : May  6 21:01:17 2024 GMT
        Subject: CN=0feb62ef5cc4b4c2e8ab863a8b7c74cfe0ef501f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0c:76:41:48:99:ca:38:3b:86:b9:9e:55:75:
                    73:2c:69:6a:e0:81:86:15:d1:3d:87:87:c4:4f:08:
                    ec:c4:15:e9:9a:f6:0b:a8:66:0a:52:3b:45:88:a7:
                    41:a5:09:11:00:be:d1:e0:1c:00:96:72:a4:96:ee:
                    35:e5:67:4e:ff:59:06:cc:76:b6:c9:7a:53:01:d3:
                    54:5f:68:e2:6a:62:e5:fc:d6:37:96:61:11:4d:fc:
                    a3:d2:7d:9f:3b:e5:45:b9:1a:70:d7:36:4e:d4:4b:
                    8f:52:83:a9:96:44:1c:b8:ef:87:b0:10:09:ad:43:
                    b5:6a:2d:e8:26:57:86:42:6d:a5:d7:d2:c4:60:b7:
                    fe:ff:6d:74:6d:a7:b8:58:a8:f6:1f:8f:6c:01:7a:
                    34:90:2a:a8:ed:17:de:0d:fa:d8:b5:b9:66:e3:65:
                    5a:62:b1:09:b7:ac:02:3e:65:cd:38:45:74:78:ee:
                    bd:df:7c:1a:15:b6:f1:d1:3d:e3:ee:29:b6:bd:16:
                    d5:50:70:21:ea:94:d2:06:ed:da:07:03:4c:e6:31:
                    d6:b5:ed:bd:34:15:59:ba:33:84:b4:7d:1d:f3:d1:
                    04:3e:83:ee:ac:a3:f2:9b:fe:0c:60:12:4d:3c:34:
                    cd:f9:f7:70:8a:7c:34:0d:47:d1:f2:39:5b:07:f8:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EB:62:EF:5C:C4:B4:C2:E8:AB:86:3A:8B:7C:74:CF:E0:EF:50:1F
            X509v3 Authority Key Identifier:
                keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4c:60:0c:dd:be:b0:4f:77:11:21:14:ae:64:23:af:ec:1f:
         af:ff:6f:d4:77:5c:67:51:b8:c4:f3:00:dc:fa:77:1c:03:da:
         e1:2a:76:01:37:e4:f2:7f:61:72:55:4a:7e:83:bd:92:5c:04:
         2c:90:a9:b6:a6:ef:d1:59:18:af:dc:05:dd:ec:07:0a:9e:be:
         ce:2a:3d:0c:16:f0:50:55:36:c0:85:96:80:98:65:5e:65:13:
         27:fd:c6:d5:52:ea:32:33:94:a4:11:c5:82:07:4c:00:d6:43:
         65:62:00:38:e9:b6:60:ba:73:ae:d3:28:13:a0:8c:c7:13:82:
         35:45:c9:b4:5d:71:99:57:d8:4d:b7:42:96:37:8e:7a:20:cd:
         ff:89:24:15:23:17:86:95:c8:b7:75:b0:c2:3f:b4:66:5a:38:
         fb:eb:5d:20:43:4e:68:92:84:b3:96:80:ba:b7:f2:20:69:0e:
         51:e2:24:c2:b3:39:a0:bb:fc:bc:cc:0d:0e:fd:c8:dc:74:5c:
         8a:11:51:4e:ce:99:bd:26:b4:a7:96:c2:df:46:84:38:5a:f0:
         e2:5f:f3:04:6e:e1:d8:16:0e:92:da:6d:d3:6a:ff:b7:51:66:
         c7:04:dc:3c:0a:f5:3c:9b:b7:9f:64:4d:7f:da:5e:63:a8:66:
         0b:a1:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:43:44 2024 by rpki-client on console-ams.rpki-client.org