Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File:                     rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier:          vzXxUpFQCe46n3wDqCgdu9BNf1pqSHgG+rSM8Duh908=
Subject key identifier:   F3:0D:06:B7:5B:00:70:B3:EB:10:D1:31:E4:92:C6:F9:2B:9D:36:CD
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer:       /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial:       018F88245FE9FD1A37BC6FD4EFB18540D449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 20:00:36 +0000
Manifest this update:     Fri 17 May 2024 20:00:36 +0000
Manifest next update:     Sat 18 May 2024 20:00:36 +0000
Files and hashes:         1: _LlOyF9iCXRa1Mnbvyec_jXLoWY.roa (hash: eQa6tS+SUeDUPatRSKQ3xB/SJKKff4xsCFak+hjNnAw=)
                          2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: UDefnC29CkMVkk386gQ3Vq+Dn1mcR8pcHouShW6MlGU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:5f:e9:fd:1a:37:bc:6f:d4:ef:b1:85:40:d4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
        Validity
            Not Before: May 17 20:00:36 2024 GMT
            Not After : May 18 20:00:36 2024 GMT
        Subject: CN=f30d06b75b0070b3eb10d131e492c6f92b9d36cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:8f:40:a5:bb:73:68:2c:20:11:0a:7b:43:
                    80:da:8e:3e:59:b1:dc:55:10:cd:1e:6b:bd:79:d1:
                    0c:b5:7c:b2:16:6d:77:15:68:7a:e2:8e:1a:b4:d8:
                    bd:40:04:52:45:e6:87:a7:6a:3a:ee:33:e6:61:05:
                    37:98:7b:f1:df:47:74:b1:b1:fd:1f:a9:69:74:db:
                    c5:48:3b:38:ed:68:31:85:2b:d4:bb:25:87:7e:7e:
                    0a:71:a0:d2:1a:93:ed:21:5a:d8:39:71:af:d9:e1:
                    96:70:34:7f:1f:1a:0d:ae:cc:ef:42:7b:09:5c:db:
                    a5:ea:4d:57:e9:fb:02:99:01:41:c9:9e:da:be:bd:
                    ff:7e:72:ac:3b:ac:d8:0a:fd:80:7d:33:a1:56:3f:
                    2e:fe:fa:98:c2:26:6f:1c:c8:4c:e2:b4:f2:d7:ba:
                    13:e3:dc:7e:fd:be:57:aa:99:53:d1:36:38:c5:0f:
                    e5:77:b8:b9:b5:6d:4d:2e:01:d3:25:c4:0b:01:39:
                    54:e4:7e:b1:b6:f9:72:4d:5c:80:50:71:b8:43:d1:
                    af:32:df:29:2b:f0:ff:26:45:25:a5:20:68:96:61:
                    c0:fc:b4:51:04:3a:56:56:19:24:ad:8c:6c:82:6c:
                    0c:bc:01:87:7c:ec:d2:01:89:f5:5c:a8:31:5a:4d:
                    b6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0D:06:B7:5B:00:70:B3:EB:10:D1:31:E4:92:C6:F9:2B:9D:36:CD
            X509v3 Authority Key Identifier:
                keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:96:dc:55:d9:ec:b2:29:b6:a4:11:ed:18:57:5b:43:b5:6c:
         56:c2:9d:df:95:f4:c7:89:04:94:5e:2f:5e:03:c5:d4:57:d6:
         64:26:70:07:fb:32:b3:bd:8b:e9:9e:c3:01:b4:4d:9f:12:f8:
         26:df:1a:36:fd:80:ee:81:80:82:06:e9:8d:ea:e0:60:ef:cf:
         9a:7a:15:3e:cb:ff:41:e9:fa:b2:12:33:d1:89:9f:25:44:90:
         46:3c:6f:a6:30:3b:a2:8e:41:25:61:ac:51:21:64:cb:65:ac:
         f7:b7:62:96:41:a0:bd:6f:02:4b:13:43:fb:96:76:ec:1f:34:
         97:8c:fc:60:be:70:31:e2:10:9e:31:88:3e:e9:06:49:f9:22:
         19:ae:3a:25:4d:37:17:7f:e3:7f:95:ab:88:42:44:4a:67:47:
         30:0a:9d:0d:89:4b:d4:a1:58:13:c1:86:49:58:2b:77:9b:ae:
         f9:81:56:bc:b7:25:35:df:de:3e:3c:a9:05:ec:e6:6e:38:2d:
         39:65:87:67:be:5b:d2:6b:18:e9:5f:45:f4:89:5b:3d:2d:b9:
         29:31:f2:72:6a:67:a0:8b:15:e9:20:9f:71:49:8d:31:55:f2:
         42:e9:fc:d4:13:12:b4:b2:c5:53:36:c3:d7:6a:9e:ee:7b:89:
         2f:03:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:05:56 2024 by rpki-client on console-ams.rpki-client.org