Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File:                     IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier:          Fn91Tonc26TT1yWUbF/ZpGEOjcOzSqs0qUc8f0ovQ+I=
Subject key identifier:   B2:17:FD:8C:68:FE:57:EC:D1:F3:12:A9:D3:44:3D:21:A1:C2:E4:BD
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer:       /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial:       018F95A8ACBB748C32FE0ABF078774E0C2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number:          1180
Signing time:             Mon 20 May 2024 11:00:10 +0000
Manifest this update:     Mon 20 May 2024 11:00:10 +0000
Manifest next update:     Tue 21 May 2024 11:00:10 +0000
Files and hashes:         1: FaRj-V4oWOlf93S9t7S0WzB7jhQ.roa (hash: gIY589RAfar+ZG2xtwpsH1VB1SS20Vo8MPM1RIBSSh4=)
                          2: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: Utcc4YrmjFQbjIdKXgfYOijEd12PYeM7RsJ7y+wUsT0=)
                          3: lneGPI9lZ_HLOeoKtMHkMqU_t38.roa (hash: BQTmSBbaHAqnRG5h/LRbS3OW33lYQch+S3vjr74/IEo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:95:a8:ac:bb:74:8c:32:fe:0a:bf:07:87:74:e0:c2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
        Validity
            Not Before: May 20 11:00:10 2024 GMT
            Not After : May 21 11:00:10 2024 GMT
        Subject: CN=b217fd8c68fe57ecd1f312a9d3443d21a1c2e4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:0f:22:3f:30:f3:be:8d:ca:45:7d:97:64:
                    ba:59:90:60:62:6b:1b:0b:f9:4f:55:25:d4:92:ee:
                    35:1b:fd:b8:65:5a:f0:2d:3d:0f:8a:e0:98:b2:db:
                    38:7c:92:a2:a3:83:d9:92:c7:5a:7c:62:c5:36:ee:
                    60:4a:0b:f6:c4:28:29:18:e1:02:a4:2b:df:18:e5:
                    ec:95:1e:a8:3f:bb:ac:e5:55:3b:fa:a3:90:54:54:
                    a1:60:b9:5a:ff:5e:74:22:38:25:96:44:19:4f:d1:
                    b4:73:2e:e0:9b:03:84:3b:32:91:32:f2:76:a9:f0:
                    c4:4b:1a:37:45:b9:16:fd:4a:99:36:24:9a:c4:49:
                    84:1e:17:7d:42:2f:85:dc:6d:be:43:79:91:29:35:
                    69:c6:4c:ce:c8:cb:82:bc:c4:a4:59:47:4b:85:e0:
                    29:10:ee:50:0b:d2:0a:68:31:08:b7:92:c8:8f:19:
                    66:e1:5e:58:9e:ed:83:6c:5a:a1:ac:2e:6f:68:14:
                    71:89:8e:d4:c8:61:a5:1f:41:8c:65:9c:9d:dc:65:
                    f2:09:21:d0:e8:ce:1a:75:2f:18:85:ef:24:8e:7b:
                    64:52:37:b2:57:48:eb:35:3a:7e:89:80:38:73:04:
                    7d:8c:81:ad:10:32:7c:10:6b:fe:04:a5:f7:a6:3d:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:17:FD:8C:68:FE:57:EC:D1:F3:12:A9:D3:44:3D:21:A1:C2:E4:BD
            X509v3 Authority Key Identifier:
                keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e5:21:84:3a:05:cd:ef:70:d8:1a:9b:06:31:49:a6:d5:a9:
         f9:75:dc:24:e7:9c:3c:5b:26:9a:2c:d4:56:b3:db:1d:e2:56:
         80:86:5d:9c:93:13:64:9a:c1:6b:d8:06:cc:3f:f6:33:bf:63:
         27:f6:39:8b:9b:f1:f3:72:ea:48:c4:a6:39:68:98:b3:60:b5:
         b1:c2:ab:d2:f1:c3:40:b8:35:ae:6a:e4:b8:1d:03:08:69:f5:
         65:21:27:16:f8:a3:0e:de:b1:ab:b1:68:72:d6:61:e5:91:14:
         b5:af:5f:dc:d2:b5:c1:74:61:fa:14:c8:93:90:3a:64:3f:b6:
         69:c8:88:9f:ba:a6:0d:04:2d:d3:aa:82:9b:7d:07:6d:16:ab:
         06:74:65:c1:3a:0f:a8:10:d8:db:d6:72:87:4e:49:cb:a8:0c:
         46:37:d4:5a:a7:58:bb:4e:86:e1:e2:96:67:b0:e8:59:79:bb:
         61:d4:fc:15:2c:84:58:52:15:9e:30:81:5e:8e:5c:b7:fd:b5:
         46:95:3c:20:ba:b7:73:a1:8c:e3:e2:a5:be:ae:38:d1:cd:72:
         e5:9b:5e:6b:2a:e4:4b:e1:60:47:62:3e:d3:c8:06:31:f1:92:
         cb:ae:ba:b5:8d:30:2f:c4:8c:0e:b4:99:f8:3a:35:eb:0e:39:
         be:14:1c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:52:41 2024 by rpki-client on console-ams.rpki-client.org