Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File:                     L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier:          zHW+2HRkoYCctyZZfKqK4VHzTDQB4e/RHf7tFv/QHRs=
Subject key identifier:   96:4C:05:6E:98:60:02:0B:7D:74:37:09:2B:0E:9D:54:FD:A3:1C:0F
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer:       /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial:       018F87493FD8FFE83ABB5546F820E5A5FB63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: 6tpawiKIz5Jyebw47ohk8ilCaCeHj66kryNBD1YZRxc=)
                          2: q0S2JKhPWU0nKYQYQ4aLM1sQrQI.roa (hash: PNBzPS9/9e99UCzcF1j/kcGteP3girm7x054QUNP620=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3f:d8:ff:e8:3a:bb:55:46:f8:20:e5:a5:fb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=964c056e9860020b7d7437092b0e9d54fda31c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:92:08:c3:a5:11:3b:bb:ed:54:0a:c6:c5:
                    13:d5:4e:fb:14:7a:67:68:2f:21:bf:31:f9:94:0d:
                    8b:19:b7:61:ea:0e:44:75:d1:d5:0a:14:cd:66:71:
                    6e:41:56:3d:1a:7d:37:95:a0:86:75:d5:e2:65:37:
                    3c:ce:3f:90:24:2a:89:c0:a7:66:10:bd:90:43:da:
                    c5:53:35:2d:7a:ab:21:bf:c7:5d:37:5d:db:ad:25:
                    ba:c2:e4:24:d7:a9:12:34:b7:5a:3a:77:23:c1:15:
                    c7:a1:85:fd:89:67:2e:88:2a:98:c5:36:bf:42:7b:
                    ac:f2:69:bf:64:aa:b1:25:8c:42:55:9f:0d:43:4e:
                    9c:f1:bf:17:79:0d:63:fb:96:16:0e:93:2f:fa:b1:
                    4b:b0:8c:50:33:10:d3:7a:10:fa:e9:b2:73:08:48:
                    96:19:83:81:65:73:e6:d3:6f:21:78:33:6b:81:e5:
                    85:ba:d0:14:e1:c1:32:bd:53:5a:2e:5b:fd:af:2b:
                    e1:a4:89:83:49:99:55:07:ee:57:24:3b:ef:3b:22:
                    70:e0:6c:a6:c5:c3:39:8a:71:cd:31:51:5b:aa:bd:
                    1f:80:1f:0a:52:b8:8c:fc:7e:f6:24:88:b0:23:58:
                    e2:b5:4e:71:38:43:d7:81:75:57:df:cc:6e:3d:5b:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4C:05:6E:98:60:02:0B:7D:74:37:09:2B:0E:9D:54:FD:A3:1C:0F
            X509v3 Authority Key Identifier:
                keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:56:b6:87:b0:b5:6a:bf:68:91:f4:9e:c4:80:aa:4e:d1:80:
         d3:b6:53:f0:da:23:26:b8:74:92:0b:71:e4:d4:b3:ec:96:56:
         a0:e2:e1:30:54:a7:fa:f4:40:02:1d:28:f3:8b:9c:80:8a:c4:
         41:5c:72:f7:8c:e7:d5:7d:5a:bd:17:4b:e7:22:b7:cb:6e:99:
         ea:0b:10:a9:9a:a8:11:54:3c:e5:7d:de:76:57:85:3a:b5:38:
         d8:6f:26:29:e0:4b:ca:4e:b4:09:5a:e7:0e:1b:b5:90:55:85:
         01:ef:9a:63:61:db:8d:61:5b:e9:13:22:da:61:59:f3:6f:2b:
         e7:a4:ee:5a:23:0a:03:de:2b:6d:ed:fb:69:cc:cf:45:bc:80:
         ee:d0:62:8c:ca:68:93:d3:09:9a:fd:66:be:34:37:f1:cc:2b:
         74:b2:5b:41:c5:d1:5f:11:b6:6b:09:3f:c2:ba:57:0d:6d:65:
         ae:8e:2a:6c:67:09:ef:61:51:6c:64:01:28:5e:79:53:18:3a:
         54:b2:38:bb:04:d8:aa:c5:82:35:f0:ca:e0:6f:72:13:ea:07:
         33:34:df:2f:99:f2:55:1a:a6:f6:23:69:05:58:7b:3d:c5:cd:
         7e:28:76:2d:37:2a:5c:fa:41:ca:d6:92:2e:d5:46:25:cd:d4:
         2f:2a:7d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:35 2024 by rpki-client on console-fra.rpki-client.org