Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File:                     NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier:          q0i0ALcJqF9oN+DN/OM/BcyRK8Dtu5AdUpas6qSp1L4=
Subject key identifier:   49:A7:77:9A:7A:66:89:A2:E3:F8:D2:E0:D0:CF:DD:8B:81:FE:35:D2
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer:       /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial:       018F89374538226B3E20B34AE3C86E375E3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number:          1177
Signing time:             Sat 18 May 2024 01:00:51 +0000
Manifest this update:     Sat 18 May 2024 01:00:51 +0000
Manifest next update:     Sun 19 May 2024 01:00:51 +0000
Files and hashes:         1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: QNGmxoBV3pv2uxes49wBFD5ORmRcQ+PRETCFM/Qr90Q=)
                          2: YqkpZDVrandNeXMUSjAZ91gKobo.roa (hash: 6KHX4dbge+PGC39OFbr1qxDLnX420dNH4CLgmnrPdvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:45:38:22:6b:3e:20:b3:4a:e3:c8:6e:37:5e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
        Validity
            Not Before: May 18 01:00:51 2024 GMT
            Not After : May 19 01:00:51 2024 GMT
        Subject: CN=49a7779a7a6689a2e3f8d2e0d0cfdd8b81fe35d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:b7:8b:37:f1:8a:8d:f1:97:77:cd:e5:43:
                    c5:a5:5d:3d:93:d3:2d:1e:13:e9:26:7c:fe:68:a9:
                    84:d2:a2:ea:32:30:23:46:c4:18:e9:2a:2a:d6:ad:
                    98:ea:6b:ec:02:de:ac:22:f7:38:80:5f:4c:49:5b:
                    38:2f:9a:3b:6d:91:07:10:f8:35:a2:3d:1f:d8:7a:
                    1e:32:92:8d:6a:65:0c:3a:c4:01:4f:af:ec:78:eb:
                    ff:a8:a5:d9:8c:66:d3:ce:4e:b6:b5:d8:cb:00:84:
                    1c:97:eb:7a:97:52:f4:89:11:8c:b5:4f:b6:51:a1:
                    e3:2c:ba:5d:74:26:16:cc:25:29:24:99:22:f3:b2:
                    d9:bd:ec:0f:77:85:9a:b1:21:aa:80:bc:4c:65:70:
                    71:e9:54:16:49:b6:5f:8d:54:c7:b4:65:cf:0e:a1:
                    a8:3e:90:b1:a0:b5:8c:4d:f6:00:7d:d3:20:d9:d4:
                    4d:22:72:4c:59:88:c4:d5:86:d6:71:74:69:db:8f:
                    4c:64:b4:3f:9e:7d:ba:48:a6:63:29:e9:08:5f:9b:
                    1c:40:48:e9:38:08:cc:1e:4f:a9:d3:57:31:74:6c:
                    bc:11:2a:fa:34:47:04:dd:e6:e4:c8:d6:3d:35:f9:
                    03:a6:bf:c8:8f:28:a0:93:b6:72:07:e9:a0:55:73:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A7:77:9A:7A:66:89:A2:E3:F8:D2:E0:D0:CF:DD:8B:81:FE:35:D2
            X509v3 Authority Key Identifier:
                keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:88:4c:ff:3a:e2:59:bd:d1:9e:9f:f2:d9:e8:a6:6f:01:2d:
         e2:cc:eb:c3:03:7a:dc:cf:57:61:c9:f3:cd:c6:4e:3b:a9:c3:
         18:ec:ae:51:e9:75:15:0a:01:1a:0f:8b:d7:4a:98:6e:14:b5:
         05:63:d9:a1:cd:db:03:39:7c:58:aa:04:6a:b9:63:4f:86:85:
         16:d8:fb:93:92:64:f8:47:b1:da:6f:64:f9:29:b8:15:cb:c4:
         2f:fd:c8:e1:54:b3:aa:6b:2c:3a:76:4b:b1:24:9f:ef:e1:fb:
         a4:47:05:16:b5:7c:ad:8a:04:3a:a4:91:b7:e3:08:b9:a9:d3:
         9a:03:52:f4:98:df:3f:f2:98:8c:5f:6b:5d:3e:61:9e:a2:e9:
         92:d9:02:64:aa:12:af:6b:4d:20:d1:32:d2:d1:48:2a:e2:3a:
         43:e0:2a:75:83:7e:e1:27:19:3f:16:aa:01:5b:5a:99:ec:3b:
         19:34:20:ba:b0:48:35:35:2c:69:60:65:9a:ab:04:60:f8:6a:
         b2:ca:0f:e8:76:bb:f9:74:2d:f4:22:12:b4:46:ef:fe:fd:42:
         73:4d:d2:17:19:1e:6c:d9:e0:dd:a9:af:6a:a9:c5:b3:31:03:
         24:1e:c1:1a:d5:94:51:68:bb:74:c8:9e:b1:55:77:9d:8e:ff:
         86:ba:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:13:35 2024 by rpki-client on console-fra.rpki-client.org