Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File:                     xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier:          Kdn53txSWJBEDxWVuRjPLA9KMJCWgmWuFJmrq+i/GQA=
Subject key identifier:   09:4D:2F:EE:60:8A:B2:6E:89:1A:97:47:C5:B4:19:60:FA:17:1C:0A
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer:       /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial:       018F87497015BCB19BC9D9C1FEBDFFA734E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:01:27 +0000
Manifest this update:     Fri 17 May 2024 16:01:27 +0000
Manifest next update:     Sat 18 May 2024 16:01:27 +0000
Files and hashes:         1: XgDrXBRwfW9iVRtHalmiD5Aj_w8.roa (hash: P/1yMcOK3MhYVQM6RBJG7LQDfbGajswCbA/1CTB3YmI=)
                          2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: pExJk1EMU6oqxmTzwDGzVcEGp3CIlfPnUy5SrpTkV3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:70:15:bc:b1:9b:c9:d9:c1:fe:bd:ff:a7:34:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
        Validity
            Not Before: May 17 16:01:27 2024 GMT
            Not After : May 18 16:01:27 2024 GMT
        Subject: CN=094d2fee608ab26e891a9747c5b41960fa171c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:f2:ce:15:a3:fe:d1:57:50:b7:6a:0c:77:
                    37:c8:3c:15:cc:ba:60:8e:d9:82:7e:5d:36:4b:a7:
                    78:65:f1:fd:2b:dc:2e:14:60:18:e7:4a:d7:f5:16:
                    a9:7f:f3:5b:44:57:c6:90:a4:91:1a:cc:a2:b6:f9:
                    9e:97:c3:3a:71:0a:45:fb:df:a7:56:b3:cc:c8:65:
                    9d:49:a7:24:6b:57:3e:67:2d:f3:1e:5b:1c:42:92:
                    6a:40:c2:b7:3c:64:b7:40:13:b4:e8:43:52:9a:6d:
                    ac:1e:9b:59:f0:81:24:17:a7:5f:04:bf:3f:68:b8:
                    39:b9:25:4f:6a:d1:94:21:bd:68:78:a1:b7:ac:90:
                    d2:a0:f5:29:e4:e1:ed:45:aa:2a:80:42:50:db:36:
                    f0:d9:d1:fb:21:08:31:c4:af:fb:9c:55:27:15:eb:
                    64:40:a1:ac:b8:80:77:97:23:08:93:1b:80:81:ca:
                    fd:22:f3:a0:cf:40:27:61:c8:2b:2d:b2:23:4c:91:
                    6d:8d:49:21:3c:69:ff:04:fd:ff:5f:12:62:10:f8:
                    b6:64:79:fe:e9:4d:ad:44:61:7f:30:b3:24:73:01:
                    2f:d3:ce:ce:aa:a2:2d:20:5b:2c:66:b1:84:77:47:
                    cc:85:88:ec:49:62:f6:fe:8f:1c:15:73:b0:b9:76:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4D:2F:EE:60:8A:B2:6E:89:1A:97:47:C5:B4:19:60:FA:17:1C:0A
            X509v3 Authority Key Identifier:
                keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c8:1c:a1:61:84:4d:5e:78:49:c2:73:04:64:61:46:ee:a2:
         65:a4:c3:8d:e6:90:8c:fc:dc:c6:f0:d5:81:44:fa:52:7b:19:
         b2:06:13:a8:f0:d2:46:49:97:63:be:49:36:06:c0:60:22:eb:
         19:04:7f:b2:09:4d:f1:1e:5a:50:2a:75:3f:ff:b1:26:4a:41:
         3b:ca:b0:34:84:2b:ab:60:56:16:52:2a:3b:f2:a9:b6:57:c8:
         5b:81:07:9c:24:ef:20:a3:1a:81:28:ce:b0:bf:6e:02:cb:c6:
         83:15:e0:bf:14:31:9b:c6:5a:d0:7a:8c:65:ff:02:67:30:73:
         2e:73:54:f5:63:1b:84:43:31:79:94:52:ae:1f:ca:93:25:f6:
         99:14:8b:b6:f0:37:77:4e:c6:dd:ef:e8:b7:df:da:af:b2:3f:
         e6:1e:e5:6c:19:4f:cb:2e:e5:b6:55:bd:96:a9:e3:6e:da:a4:
         18:94:04:62:c1:67:93:07:13:84:23:5f:88:1d:11:50:e5:be:
         19:24:71:b8:72:2f:09:a5:92:83:37:19:5e:33:2f:05:98:3b:
         bb:d6:b0:ac:fe:7d:93:c9:f4:72:65:e1:67:db:93:47:80:a0:
         24:aa:8b:59:60:6d:0b:78:a8:3a:4c:b0:37:e9:50:d4:a7:1b:
         44:41:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:22 2024 by rpki-client on console-fra.rpki-client.org