Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File:                     b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier:          mc+5GMFe3gkfy4i5cByjmPmqTEkZB/UPpnDFlw9nZuY=
Subject key identifier:   12:2C:AD:EC:51:6A:58:2F:4A:B6:BD:21:82:F8:9F:3C:AC:64:05:7B
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer:       /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial:       018F87487266C6A200D95E18F937D3FA80E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:00:23 +0000
Manifest this update:     Fri 17 May 2024 16:00:23 +0000
Manifest next update:     Sat 18 May 2024 16:00:23 +0000
Files and hashes:         1: 1sN9NJr6jFiLgy-flef0MMfpVGk.roa (hash: YWtu1BHHKIc2uZ93DaV7obKvggTL3q0GRsdFPCtp9/M=)
                          2: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: 8lPgK5F9NUIamneY9xTZJ9t8kg2D1ubR3mZPxyVyHZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:72:66:c6:a2:00:d9:5e:18:f9:37:d3:fa:80:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
        Validity
            Not Before: May 17 16:00:23 2024 GMT
            Not After : May 18 16:00:23 2024 GMT
        Subject: CN=122cadec516a582f4ab6bd2182f89f3cac64057b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:ee:1e:89:d1:46:e3:60:10:51:f3:a5:1d:
                    c9:04:fb:6b:a9:39:8b:bb:38:cd:b8:bd:23:ed:20:
                    9f:26:5d:71:f3:ae:a6:20:06:af:30:b7:02:14:19:
                    e1:7a:61:5a:d5:f5:24:7f:b9:b8:00:ca:8d:ba:57:
                    2e:9e:19:e5:6c:9c:cd:75:f6:34:4d:c5:bd:22:06:
                    55:69:5a:11:0b:2d:be:59:67:a9:fd:25:4c:e7:16:
                    0c:8c:70:82:61:e1:3d:8f:b8:d4:f7:a3:a9:8d:f6:
                    ae:99:e2:a7:13:3c:f0:b6:0d:74:b4:3d:f2:32:b1:
                    dd:a4:b3:dd:1b:f8:65:3e:ac:71:82:40:98:8f:71:
                    b4:7f:a7:00:0d:d8:7d:67:a6:e8:dc:31:e0:99:31:
                    e1:1d:98:a0:08:93:bb:82:85:54:9b:91:44:39:2c:
                    dc:49:23:e4:c0:86:b0:88:a8:c5:57:af:ad:f7:04:
                    5b:8e:d4:0c:24:a5:16:86:04:8a:ff:57:1a:0e:28:
                    d9:87:44:29:34:e1:37:7c:74:65:93:7d:fc:87:be:
                    e3:f0:73:9e:bb:60:66:9c:f7:fc:a2:c4:24:c1:f7:
                    d7:c8:5c:c2:be:36:4b:45:f2:12:2b:00:fb:a8:06:
                    94:c0:d9:0a:df:34:67:d1:09:6f:bc:0b:64:cd:d3:
                    d8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2C:AD:EC:51:6A:58:2F:4A:B6:BD:21:82:F8:9F:3C:AC:64:05:7B
            X509v3 Authority Key Identifier:
                keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c1:2b:18:67:44:5d:41:ef:f5:4d:55:63:58:be:45:26:a7:
         17:0d:f7:29:ea:59:8f:6e:d8:91:0a:dd:96:2f:07:fe:1e:b1:
         7f:9c:2b:7f:32:54:d7:9c:7c:9c:2e:8d:ce:e2:86:e1:cb:fb:
         40:00:25:d4:81:89:8e:15:3e:98:e4:1e:31:07:1c:c9:b5:bc:
         8a:ab:7f:9b:53:15:eb:b2:26:b0:17:5c:eb:02:d6:ca:37:1c:
         7e:9a:f3:df:68:d4:94:ae:7a:86:92:11:ca:6e:ee:43:fa:89:
         51:b0:37:75:fb:42:df:98:af:8f:86:63:4d:40:55:52:23:57:
         06:29:8e:d3:4e:0e:39:a1:14:b9:8c:56:66:14:e7:a4:c2:b0:
         41:78:2e:82:34:42:0b:33:7b:88:a7:37:30:2b:c7:5a:61:ec:
         6b:96:39:9e:75:02:c7:7b:10:0e:7c:6c:99:59:2f:d0:8e:71:
         5d:7d:30:e0:25:c8:a6:09:ba:d1:c3:37:ec:10:37:31:b5:da:
         07:72:5f:67:ff:02:ba:41:8a:09:49:3c:b1:f8:e6:6a:7b:68:
         ee:8b:49:a0:08:82:69:66:23:bf:81:81:9f:50:be:32:e8:e2:
         4e:a6:66:f5:23:8b:e7:1e:9e:e8:22:92:a3:83:1d:b1:d2:d7:
         47:6a:0b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:06:42 2024 by rpki-client on console-ams.rpki-client.org