Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
File:                     cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft (raw, json)
Hash identifier:          IVyouMJnRbjrD1zFcgYvu/Tp/1zCn5SXiomPD7v7ud0=
Subject key identifier:   79:9D:BF:F3:0E:3B:7A:BF:78:0B:51:E9:80:FD:85:AD:40:2D:C6:8D
Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
Certificate issuer:       /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Certificate serial:       018F885B6427CA1F44A7B05358E26FCED6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 21:00:41 +0000
Manifest this update:     Fri 17 May 2024 21:00:41 +0000
Manifest next update:     Sat 18 May 2024 21:00:41 +0000
Files and hashes:         1: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl (hash: /fGiSjKGi9j8vw00hkweUX7EEGkAXABgaYXsXGrRAMc=)
                          2: oDmUniGoNWpyyde7d_Dib0BgH8Y.roa (hash: ctv+haOcbfhD9S/hLDHh7x097RI6wstyMrk/f1HuhB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:64:27:ca:1f:44:a7:b0:53:58:e2:6f:ce:d6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
        Validity
            Not Before: May 17 21:00:41 2024 GMT
            Not After : May 18 21:00:41 2024 GMT
        Subject: CN=799dbff30e3b7abf780b51e980fd85ad402dc68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:7f:19:65:bf:93:6d:a8:42:12:0b:20:9e:
                    98:e6:36:5c:e5:84:6a:ba:b6:61:72:12:d8:e0:23:
                    d6:69:b1:0c:02:0d:93:09:a2:5b:da:c7:f9:16:f7:
                    0b:f5:41:f9:36:65:c1:76:cc:cf:17:db:de:7f:fb:
                    6b:3c:eb:b5:68:1a:92:06:dd:1a:34:b2:da:a9:15:
                    36:e3:78:02:26:28:91:cf:5e:62:2c:0b:82:d4:4e:
                    0b:dd:98:1c:3e:9f:d2:df:62:fe:98:d1:d3:b8:d3:
                    2e:05:bf:42:15:d9:2b:6a:51:29:11:df:3c:44:70:
                    4b:41:71:99:bd:ff:45:cf:b0:c3:3f:99:ab:5d:94:
                    0e:3c:37:8a:3b:bf:ad:64:c1:34:8a:7b:4e:b0:73:
                    96:0c:b5:6a:2c:03:59:5d:00:12:43:41:e0:63:ca:
                    14:68:be:39:2a:a5:9a:c7:0f:38:d9:d3:00:cb:61:
                    f8:4d:a2:04:a8:37:ed:6c:30:13:d0:68:e1:98:c3:
                    f0:46:c6:33:ee:99:ea:fe:95:8d:19:a8:5d:59:2a:
                    cf:2e:4e:b1:65:74:a5:6d:06:a4:f0:8a:94:9f:c7:
                    fa:64:de:51:84:ee:ff:3f:c4:65:d4:2c:6f:1e:06:
                    eb:cb:4a:78:25:6f:bf:6f:01:4f:c3:59:f4:13:d8:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9D:BF:F3:0E:3B:7A:BF:78:0B:51:E9:80:FD:85:AD:40:2D:C6:8D
            X509v3 Authority Key Identifier:
                keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b1:dc:8c:d6:9a:ae:26:ce:56:63:b4:e5:cf:75:27:5a:32:
         92:13:bf:65:d5:b2:52:d2:1a:fa:1f:22:92:4f:57:6f:cd:dc:
         52:a8:77:e5:d0:89:1a:b9:87:5b:fe:14:45:6a:2a:ef:79:b0:
         f7:cb:e9:59:19:12:23:37:fc:ee:d8:f9:3d:b4:3a:68:34:1c:
         61:f1:f5:55:90:3b:6c:5c:39:c4:62:24:33:d7:66:42:2e:68:
         85:26:57:98:5b:72:06:a0:81:ba:24:d3:bd:46:ac:f6:ee:99:
         87:d5:09:1a:74:c0:64:b1:55:8c:5c:d1:b8:39:e0:22:45:8f:
         14:2f:0c:be:ee:23:d2:df:8c:ab:94:cf:58:b4:50:6a:6e:63:
         e2:7c:94:0e:a1:a0:7b:28:3d:68:4b:bf:f0:77:a7:bd:0a:b4:
         78:28:a2:7d:41:ea:2b:fa:03:fd:e4:5c:68:d5:ff:b0:8b:42:
         74:aa:62:03:ad:36:de:c3:9f:7e:51:d8:a5:94:82:d4:75:4e:
         f4:26:18:19:df:83:60:74:ff:0a:27:69:56:fe:db:4e:29:73:
         4a:e3:d9:a6:c3:e4:fc:5a:e5:c4:0d:25:22:27:d3:ed:d0:70:
         da:10:13:10:62:0d:1a:36:b1:bb:77:fb:b2:59:ec:ec:f5:84:
         3c:e3:d0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:13:55 2024 by rpki-client on console-fra.rpki-client.org