Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
File:                     dhrP1knI7q2FUZQngfoW9o29EPM.mft (raw, json)
Hash identifier:          SQ2e3SBfS+Nfy7jribxrKNBy08N6SaCovC9ifWZ1pNI=
Subject key identifier:   59:F4:B8:0C:B6:44:D8:F6:FB:44:B3:57:4A:21:DA:04:04:3B:46:68
Authority key identifier: 76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3
Certificate issuer:       /CN=761acfd649c8eead8551942781fa16f68dbd10f3
Certificate serial:       018F87ED0B91DAF75E35593AC29CE35EDEB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:10 +0000
Manifest this update:     Fri 17 May 2024 19:00:10 +0000
Manifest next update:     Sat 18 May 2024 19:00:10 +0000
Files and hashes:         1: JfS0hqQ95p7fELV58H3e75LRK78.roa (hash: JoOQWrhx92IYoh9YHEJ4KEyoZ6vG9vQIJ+MnQ0fkZxY=)
                          2: dhrP1knI7q2FUZQngfoW9o29EPM.crl (hash: eUIsmHL21qPueZuQxECBtUJqujRrbopE9CDK7+329rk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:0b:91:da:f7:5e:35:59:3a:c2:9c:e3:5e:de:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761acfd649c8eead8551942781fa16f68dbd10f3
        Validity
            Not Before: May 17 19:00:10 2024 GMT
            Not After : May 18 19:00:10 2024 GMT
        Subject: CN=59f4b80cb644d8f6fb44b3574a21da04043b4668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:14:82:c9:74:04:75:7a:d0:fb:69:06:57:
                    7b:5e:0d:d8:32:08:f8:77:d5:3c:41:8a:4a:a6:c5:
                    a3:2d:29:91:75:78:9c:1c:41:f4:39:f1:8c:f7:51:
                    8b:c0:ff:7a:63:81:cf:22:58:38:15:46:c4:be:b0:
                    67:a4:b5:a9:b9:89:9f:38:2e:18:ed:64:36:71:b3:
                    52:ba:68:e2:0f:c6:9a:ea:69:d9:4e:b7:ad:87:a7:
                    f1:bf:a6:61:80:51:d9:4f:e6:9a:02:02:f1:a4:2f:
                    40:45:85:9f:80:30:79:da:ff:6a:4e:bb:87:4c:96:
                    06:0a:73:57:82:ed:c1:90:62:a6:53:41:87:21:05:
                    b2:e0:96:90:60:52:1a:23:f9:96:62:94:b9:c9:29:
                    26:7b:ca:6c:1c:ae:cf:2c:2f:a6:e3:e4:73:0e:01:
                    51:df:38:d3:a3:15:41:e5:81:88:6f:d8:f2:fe:ca:
                    59:75:e5:28:82:88:08:1a:3b:c4:1d:22:06:8b:08:
                    1e:67:14:cc:9f:2d:5c:bf:d7:25:91:e2:4a:29:9a:
                    fc:f1:84:b0:9b:b5:83:67:41:eb:35:de:ea:bc:34:
                    29:a5:22:7b:59:47:ff:b0:d7:cf:66:81:34:32:41:
                    d6:02:b1:98:db:38:94:2b:a4:aa:97:97:0f:6c:6d:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F4:B8:0C:B6:44:D8:F6:FB:44:B3:57:4A:21:DA:04:04:3B:46:68
            X509v3 Authority Key Identifier:
                keyid:76:1A:CF:D6:49:C8:EE:AD:85:51:94:27:81:FA:16:F6:8D:BD:10:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhrP1knI7q2FUZQngfoW9o29EPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6f9283-b4d4-44cd-a69b-c73201df9995/1/dhrP1knI7q2FUZQngfoW9o29EPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:56:b8:ed:58:83:71:b0:d1:7e:f6:0e:fc:a2:dd:e7:1e:7c:
         cb:b1:51:90:13:3f:74:78:0f:aa:10:0b:30:9c:32:d9:a4:41:
         b6:f3:25:93:cc:65:f7:23:8c:35:dd:e2:3c:75:37:c4:28:59:
         63:d2:23:fe:39:b2:32:4d:e2:31:32:6d:1a:b8:4d:03:26:19:
         1c:5f:0e:1f:41:86:eb:d0:e2:6f:d7:a5:cf:3d:57:06:f4:3a:
         60:e2:de:3c:5d:b3:9e:84:6a:97:76:28:f7:48:b2:b8:7b:62:
         d8:67:70:1e:80:8f:e8:c7:73:76:83:95:1a:1d:91:59:30:27:
         74:bd:65:fd:f9:13:d4:41:a0:df:52:d6:3c:5b:5f:6c:4d:47:
         f8:5c:e7:43:1c:ba:c6:02:d8:c7:18:63:b7:32:39:19:2f:9f:
         bb:b4:df:1c:f7:5c:7c:d5:b4:70:37:ba:28:02:20:7e:2c:25:
         05:5b:ca:17:9c:45:43:8e:cc:23:0f:c3:bb:98:54:66:d8:dc:
         4c:01:7b:8b:0c:ea:d5:42:f2:fd:ec:89:fe:df:9c:13:10:66:
         ce:d4:b7:41:01:56:54:db:dd:22:82:30:e3:06:c0:08:57:b0:
         e5:8d:c8:3c:4e:52:7c:d2:1a:3d:5d:21:d2:81:1d:60:97:50:
         6e:cb:dc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:52 2024 by rpki-client on console-ams.rpki-client.org