Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File:                     iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier:          KpdSS6u0+YxdMAjIZrdkUouy+k+2h9VnCK6ouNkKXfU=
Subject key identifier:   04:1E:2A:91:3C:AC:AA:50:A5:74:BA:41:7C:BC:BE:25:57:3A:C9:B8
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer:       /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial:       018F87B6166B7ECE02C63D7DDFF7B7EBE03F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 18:00:08 +0000
Manifest this update:     Fri 17 May 2024 18:00:08 +0000
Manifest next update:     Sat 18 May 2024 18:00:08 +0000
Files and hashes:         1: Qh6IfNNXYuQApptQvtGhingRs5o.roa (hash: tSYNomvgnaP2JvI3uOIiCeg2OHXB/BVGD8DkwHscgPo=)
                          2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: hClZGinxRT3eNtJq4erwv8kJE1l0+v0BZWCdP++mkyw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:16:6b:7e:ce:02:c6:3d:7d:df:f7:b7:eb:e0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
        Validity
            Not Before: May 17 18:00:08 2024 GMT
            Not After : May 18 18:00:08 2024 GMT
        Subject: CN=041e2a913cacaa50a574ba417cbcbe25573ac9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:06:7c:c4:63:07:33:a8:90:7e:b9:7e:f0:
                    27:a7:3b:d1:85:7c:66:96:b2:fe:31:1b:17:4e:f7:
                    92:e5:30:37:bc:dc:f4:95:fe:ad:b0:ff:43:c1:a8:
                    0f:57:cf:8b:a6:bd:bd:db:6c:92:2e:09:4f:be:60:
                    34:6c:55:85:b3:a0:4a:72:dd:bd:d8:d6:dc:fc:2a:
                    44:6a:bc:86:49:62:1f:c5:ed:f3:70:a4:9a:ae:9c:
                    ab:ad:b5:3c:3f:2a:cb:ab:8e:54:53:b6:64:4d:a2:
                    ea:7a:0f:33:d1:1f:b4:93:76:81:4d:8c:67:d2:98:
                    9b:92:dd:1b:75:95:78:ba:80:d2:cd:19:eb:5b:e6:
                    72:cd:7e:6a:68:3a:c0:78:f0:75:c9:d8:67:a0:0e:
                    e8:5f:b0:57:1f:9f:37:a7:9c:46:0f:32:6c:ca:2d:
                    04:8a:c8:a8:9d:d8:fa:2f:cc:12:c3:21:86:8f:17:
                    16:e7:38:d9:99:9a:95:9c:82:52:d3:cb:a4:94:97:
                    e6:ce:57:e6:27:02:40:f6:da:c3:1d:aa:11:17:50:
                    69:95:f1:f0:6a:47:43:2a:49:50:f5:cf:d6:2a:35:
                    cf:70:e3:fc:4d:8f:9d:9b:82:70:c0:8e:da:96:dc:
                    c5:79:ba:14:81:7b:6c:97:fb:27:ab:cc:63:ee:21:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:2A:91:3C:AC:AA:50:A5:74:BA:41:7C:BC:BE:25:57:3A:C9:B8
            X509v3 Authority Key Identifier:
                keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4a:73:74:c7:f0:fc:19:1a:ba:86:70:d3:58:d5:e0:cb:a6:
         8e:ee:24:22:2f:da:c4:71:4e:94:55:1c:71:70:aa:76:a8:bc:
         22:cb:ec:8c:bb:76:a2:b3:f8:dd:e9:29:42:43:a2:fb:8a:51:
         b8:94:00:10:b1:88:18:6c:41:ec:4f:7f:58:27:26:c7:d9:fe:
         53:1f:69:b9:a3:9d:71:9a:3e:83:8d:34:84:47:da:cf:22:1e:
         5a:da:17:aa:03:09:87:ba:c5:6a:80:2e:0a:7a:8d:d5:07:5e:
         85:7a:f0:2f:8b:42:6b:ec:d7:f5:a6:24:f6:c8:bb:06:b5:1d:
         df:b6:5d:27:37:88:b5:b2:cf:39:69:0a:81:fd:5a:84:d4:25:
         f6:7a:67:93:21:11:86:7c:ba:4a:6b:25:6e:26:9a:29:7d:50:
         71:ea:4e:02:1c:77:9f:61:25:63:b8:a0:83:45:46:e4:3d:5f:
         00:fa:3a:06:e4:17:75:44:e7:5f:e7:6b:a8:46:ef:eb:0b:50:
         d0:b9:55:74:a6:90:ff:6a:f2:ce:11:d5:ba:19:7f:27:2b:13:
         81:5c:1f:87:c6:57:00:92:b5:e0:0f:74:fa:a3:9b:d5:4b:46:
         03:53:5c:11:7c:af:1f:7e:d0:72:1f:a7:61:ff:97:69:e3:04:
         d5:ed:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:35 2024 by rpki-client on console-fra.rpki-client.org