Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft
File:                     Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft (raw, json)
Hash identifier:          7qM4FewPUTMmObquiKDceoCzvuBd3sjRzmvYBBnMyak=
Subject key identifier:   EF:A9:BB:E2:5E:6B:0B:41:19:7A:D9:E6:B3:1E:D4:8F:46:06:72:25
Authority key identifier: 46:5E:78:A5:EC:57:23:1C:69:3D:65:45:44:61:8C:67:82:D6:19:0A
Certificate issuer:       /CN=465e78a5ec57231c693d654544618c6782d6190a
Certificate serial:       018F874917531274810AA1483D7E0072BC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl54pexXIxxpPWVFRGGMZ4LWGQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:05 +0000
Manifest this update:     Fri 17 May 2024 16:01:05 +0000
Manifest next update:     Sat 18 May 2024 16:01:05 +0000
Files and hashes:         1: 4uY6lMAh_e52EUp62SENplOwcmA.roa (hash: xDQpk1WwxqQIUcd7x3MrZNbpR1nDBdFaNKGUejzB//4=)
                          2: Rl54pexXIxxpPWVFRGGMZ4LWGQo.crl (hash: MctL9WPuLWfHK9nE5eZyeGjUzgEVDd4c435aZ+oat/8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rl54pexXIxxpPWVFRGGMZ4LWGQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:17:53:12:74:81:0a:a1:48:3d:7e:00:72:bc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465e78a5ec57231c693d654544618c6782d6190a
        Validity
            Not Before: May 17 16:01:05 2024 GMT
            Not After : May 18 16:01:05 2024 GMT
        Subject: CN=efa9bbe25e6b0b41197ad9e6b31ed48f46067225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:91:a1:af:34:e9:0f:13:d7:01:b4:67:1f:
                    90:fa:a5:1e:a0:b7:0a:c6:8b:67:a5:80:15:8d:12:
                    8b:bc:75:57:f4:fc:17:d5:91:e2:fb:da:de:1e:85:
                    6d:11:3f:d2:78:68:74:08:a3:ab:be:53:8e:d2:5c:
                    da:84:5a:70:a0:07:da:34:47:15:3e:6e:43:b6:c3:
                    28:87:50:6e:6b:e8:72:39:4a:49:5f:d4:4f:42:2e:
                    15:8d:b4:be:d7:6c:49:08:e7:ad:42:c6:08:8c:df:
                    48:ae:ad:19:43:22:80:09:22:49:a5:12:c0:4e:3b:
                    a3:6b:84:c4:fa:20:9a:42:3b:f5:74:e4:8a:95:96:
                    a7:96:35:2d:5b:8f:aa:22:3a:cc:1c:bb:a7:bb:9a:
                    cc:bf:0d:6b:c4:52:ad:d3:3c:5c:9b:7d:70:a4:ea:
                    42:1e:f0:5a:60:5c:8a:4e:6c:d4:85:c4:c5:eb:5d:
                    3d:0a:53:1f:30:c5:43:18:a3:fc:47:89:e6:3d:72:
                    43:f2:02:a9:b3:7a:ed:4a:10:5e:e9:3d:de:12:53:
                    d3:c0:2b:e1:23:89:11:ea:cb:a3:74:ea:f0:6c:ec:
                    1d:f7:4e:1a:d8:06:3d:dc:2e:3d:e9:a3:8b:0a:44:
                    c9:cf:ed:93:60:91:1b:61:17:88:e6:79:5a:a1:20:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A9:BB:E2:5E:6B:0B:41:19:7A:D9:E6:B3:1E:D4:8F:46:06:72:25
            X509v3 Authority Key Identifier:
                keyid:46:5E:78:A5:EC:57:23:1C:69:3D:65:45:44:61:8C:67:82:D6:19:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl54pexXIxxpPWVFRGGMZ4LWGQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b2:f8:e8:94:7a:65:1f:4a:85:6e:a9:9f:48:b9:05:0c:49:
         48:e1:78:db:cb:ae:39:51:24:0d:3e:60:81:20:6d:7d:00:c6:
         b7:c3:2b:ff:0e:b5:03:70:28:75:e6:7d:57:d5:65:15:57:f5:
         07:92:a0:2c:48:53:c8:cf:dd:7e:50:3d:ea:bf:95:a6:1c:f4:
         10:b3:f4:b9:70:a9:91:7d:a7:52:24:1c:cb:b8:de:67:25:01:
         d8:c5:e8:f6:15:d9:9e:f7:b0:ac:e7:0b:a2:df:f2:57:07:df:
         86:16:78:91:bb:83:d6:80:c2:7a:30:75:22:70:d4:ca:c8:6b:
         3f:75:55:ef:19:7b:3a:54:98:7c:68:fa:cd:63:18:31:b0:bd:
         72:44:a9:7b:ad:dd:2a:45:55:0b:f7:73:09:66:74:e1:36:cf:
         e4:fd:4d:34:0d:77:c0:40:0b:31:80:7a:2d:f4:b8:59:a0:fe:
         da:e7:95:e6:76:92:9e:19:d5:48:c7:fc:80:2e:60:c7:ef:ae:
         c3:51:81:33:97:90:03:85:93:e7:40:50:2c:db:77:67:c8:09:
         34:ce:b2:cd:f2:28:d6:e7:dd:ea:4d:31:6f:dd:08:ff:de:bc:
         18:08:cb:ee:02:2c:e0:87:03:08:8d:27:2a:64:46:83:3b:5e:
         24:bf:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:18:47 2024 by rpki-client on console-ams.rpki-client.org