Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File:                     m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier:          xKCyGWQ1/n/OVx+z3eOyIUzXtd+EJNJx3n7FZPtHIvs=
Subject key identifier:   29:CD:D6:0D:9C:B3:6B:11:0C:AB:D0:83:32:CF:90:E7:4D:D8:41:9D
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer:       /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial:       018F8636140D26C6941F9D9B3C51AC7BBB32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 11:00:41 +0000
Manifest this update:     Fri 17 May 2024 11:00:41 +0000
Manifest next update:     Sat 18 May 2024 11:00:41 +0000
Files and hashes:         1: 4WTvs_8bYDSBDPj8ncqO29xACfs.roa (hash: mONYxnMrU3qxDwE8ivYfYsRiVU3o5o5mnjxiWZ5+3xE=)
                          2: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: SVLG34xG/8PMkIN+7W/9aiXu5oELhd9r89Mgnbhsj0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:36:14:0d:26:c6:94:1f:9d:9b:3c:51:ac:7b:bb:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
        Validity
            Not Before: May 17 11:00:41 2024 GMT
            Not After : May 18 11:00:41 2024 GMT
        Subject: CN=29cdd60d9cb36b110cabd08332cf90e74dd8419d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:a1:5f:9e:be:f4:b4:d1:4e:e2:da:27:d2:
                    01:a3:5d:6b:f3:33:87:56:cd:4a:e7:b4:cb:3c:76:
                    35:0f:42:bf:96:ec:29:8f:f6:d4:33:0c:63:58:5a:
                    3d:ec:c6:05:67:60:81:6f:7d:ff:45:1c:9a:50:49:
                    e2:da:1c:3e:94:9e:5d:e0:96:9f:4a:5d:b1:12:4b:
                    0a:f1:88:9a:0b:82:ce:36:56:a9:a4:f6:75:5a:c3:
                    87:b0:7d:43:8c:c9:f7:5a:93:fe:3d:47:04:8c:94:
                    f4:59:fe:38:5a:0d:ea:c8:a3:d8:0c:8d:22:65:9f:
                    92:0b:2e:8d:3c:38:92:f7:c7:10:a6:03:e3:e8:44:
                    97:78:63:ef:f9:19:52:07:fa:58:00:39:56:04:a7:
                    4c:67:e1:53:83:dc:11:41:74:f5:6c:0e:a6:20:b0:
                    9e:ca:f9:46:30:d4:1f:6b:05:f6:90:c0:7c:40:57:
                    af:c9:fe:2e:03:b5:61:a6:cc:c9:4a:af:47:12:36:
                    63:e9:e0:8c:c0:f7:9c:21:44:9f:6b:9b:80:24:92:
                    f9:bb:61:44:67:4d:2d:10:ac:11:e6:46:64:6a:7c:
                    f2:0c:c5:32:e3:22:d8:73:e1:fb:c9:3a:ee:38:c3:
                    0a:4c:e0:cc:25:8e:49:e6:3a:24:cb:cc:c5:2c:0c:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CD:D6:0D:9C:B3:6B:11:0C:AB:D0:83:32:CF:90:E7:4D:D8:41:9D
            X509v3 Authority Key Identifier:
                keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:56:ec:31:73:18:f6:cf:bf:f6:95:a5:cf:70:73:0c:32:
         c3:cf:3c:03:65:8b:fd:ea:57:b9:ac:3c:d5:06:35:00:b6:3d:
         fe:50:4c:ba:8f:b9:5e:b4:39:30:ce:bd:ab:b3:cf:2f:1b:0d:
         bf:b6:7f:87:c4:65:a2:fe:a7:0f:b5:5d:29:20:ea:bb:bc:46:
         21:c6:76:ed:1f:a3:eb:3a:54:f4:66:7d:b8:07:2a:b7:ba:ec:
         c3:ae:ce:5d:c8:93:88:d9:e2:8e:94:f9:94:8a:6d:1b:dc:3a:
         ef:8e:d6:aa:ed:c4:7d:ae:4f:19:42:8c:f1:55:1d:b6:33:d1:
         e4:d0:5f:3b:37:5a:89:6d:69:21:f1:8f:32:71:66:9e:17:68:
         0b:62:f6:8e:25:11:53:c0:3f:6a:f0:85:da:96:46:83:9d:3d:
         69:c7:6e:a5:7c:0f:2f:a2:f0:71:03:7f:d7:f7:ad:28:d8:26:
         1f:15:ef:ec:7d:04:d9:de:ce:78:ed:1a:5c:6c:04:44:37:72:
         e0:ca:fa:55:24:55:81:fc:5d:26:18:31:d8:e3:85:22:e9:92:
         5a:fd:7b:82:a5:b4:22:06:ad:57:54:35:1d:74:f7:e1:55:e5:
         f9:42:b6:90:4b:71:a0:ec:6b:d1:bc:46:29:cf:bf:ea:79:90:
         8a:fc:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:38 2024 by rpki-client on console-ams.rpki-client.org