Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft
File:                     K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft (raw, json)
Hash identifier:          1l89L6j3Rk+j+PRQtPffakT5IMWYB+QWvbZF+CracM8=
Subject key identifier:   78:D0:A2:1D:84:25:69:2D:3C:45:63:71:F9:CB:54:48:A7:36:22:57
Authority key identifier: 2B:6B:82:2E:DD:CF:D1:21:9D:AA:94:FC:43:46:3C:A8:BA:AE:C7:80
Certificate issuer:       /CN=2b6b822eddcfd1219daa94fc43463ca8baaec780
Certificate serial:       018F87499ACA17F21DE770551D8076FD2DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:01:38 +0000
Manifest this update:     Fri 17 May 2024 16:01:38 +0000
Manifest next update:     Sat 18 May 2024 16:01:38 +0000
Files and hashes:         1: 9WRa97VmeqFMilJjJuQm8rbN_rU.roa (hash: 0A5T582BmWhmxor5G9MeG/m5nmlyqCbahKiIBWAlnhk=)
                          2: K2uCLt3P0SGdqpT8Q0Y8qLqux4A.crl (hash: yeNkdwR3GIo+zy4RoM/q2fkf6SqP2DEzjM2D7u6kUAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:9a:ca:17:f2:1d:e7:70:55:1d:80:76:fd:2d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6b822eddcfd1219daa94fc43463ca8baaec780
        Validity
            Not Before: May 17 16:01:38 2024 GMT
            Not After : May 18 16:01:38 2024 GMT
        Subject: CN=78d0a21d8425692d3c456371f9cb5448a7362257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:ff:5b:e6:5d:72:2e:02:2a:43:8d:85:9a:
                    48:45:92:c2:5f:d8:8c:0d:9f:19:24:a7:bc:f4:9e:
                    a5:90:5b:50:88:fc:51:44:6b:70:96:9a:0b:1c:7b:
                    85:e7:37:42:6d:f0:b1:34:13:69:02:52:7a:e2:92:
                    fc:63:ea:d6:c1:5c:b2:30:f1:46:cf:d6:52:37:25:
                    7f:b3:50:f9:1b:ec:68:82:0b:64:99:e8:48:5a:c1:
                    29:bd:a3:6e:0a:a3:20:67:78:9c:c5:0f:d5:73:b9:
                    bb:52:63:61:54:36:93:1f:3f:2f:f8:bb:0f:ae:68:
                    a8:95:5a:5f:79:a8:8b:d1:94:ef:9f:c6:ec:8b:ed:
                    0e:19:70:a7:8b:ae:9f:12:8e:8c:43:ad:9b:4d:24:
                    d6:aa:5a:03:e1:f5:3d:0d:3e:be:e2:7d:3c:ef:ba:
                    ee:e5:4d:fb:18:8e:46:96:ac:63:84:f9:10:96:cb:
                    d8:eb:38:c2:a2:82:d6:45:66:88:5a:e9:3a:2e:56:
                    ec:23:2d:b8:c1:4d:34:ab:28:49:5e:48:4f:6c:0c:
                    26:52:ae:27:01:9d:84:7a:21:34:d7:0a:38:84:1b:
                    85:9d:8c:48:55:bc:f9:95:64:59:49:7b:38:29:7b:
                    e3:8d:2e:92:eb:fb:46:ba:9a:f0:1c:9d:ba:3c:ee:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D0:A2:1D:84:25:69:2D:3C:45:63:71:F9:CB:54:48:A7:36:22:57
            X509v3 Authority Key Identifier:
                keyid:2B:6B:82:2E:DD:CF:D1:21:9D:AA:94:FC:43:46:3C:A8:BA:AE:C7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:85:ca:63:ca:f4:25:9f:cb:38:e7:82:bd:71:46:22:00:1f:
         19:37:8d:5c:71:90:6b:51:51:3f:72:af:5c:94:65:2b:12:d5:
         f1:0f:cc:14:a1:c6:1d:9e:6c:a6:36:23:c5:16:7c:23:10:c9:
         6d:0e:d7:65:a0:9d:1d:43:55:42:16:c1:71:53:42:7a:1e:b4:
         2b:36:e1:28:d9:ba:95:d4:07:a1:4d:a1:78:28:9f:39:ee:4d:
         04:ea:50:c3:c3:9c:26:07:b1:5e:c4:29:7c:b8:8b:48:b4:94:
         94:3f:73:83:1b:59:c6:ad:69:c6:f6:d7:b1:76:3a:e3:23:8e:
         e0:91:0f:36:0b:9c:7e:73:77:c9:29:c8:58:21:df:3f:1e:3b:
         3d:ea:43:cf:45:be:4e:31:b8:07:64:d9:1e:14:db:1d:7b:e7:
         4a:f4:72:47:15:c6:fa:cd:57:ab:31:cc:10:9e:98:cd:e0:65:
         48:2a:ab:14:43:99:74:ce:14:42:14:4b:0e:9f:90:e5:54:e0:
         0f:d8:07:c3:3f:5e:a3:94:99:6a:e7:fe:82:19:8d:78:98:ab:
         cb:22:91:6a:eb:9b:e1:1d:6f:1a:5b:e8:20:52:ac:31:46:d8:
         fa:d9:53:65:52:d7:21:07:50:9f:f7:39:4f:f7:d5:b6:2c:4c:
         14:ba:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:08 2024 by rpki-client on console-fra.rpki-client.org