Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File:                     pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier:          d23YP46NsQwjSEBe0wGONX+XC8aGBtvhLJiN8TickKs=
Subject key identifier:   0F:CE:79:F3:5A:BA:A2:72:4C:55:1C:D2:9B:C8:BF:F2:C6:95:7F:64
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer:       /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial:       018F87B658B788D0EFDFD30826EF2F309931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 18:00:25 +0000
Manifest this update:     Fri 17 May 2024 18:00:25 +0000
Manifest next update:     Sat 18 May 2024 18:00:25 +0000
Files and hashes:         1: Ur-Bu0RSJ3w6TE3scWrDMGsvWtw.roa (hash: N245WG48LKfdaN/l0SqPnZNQq5QFtRkgIFSMCbYF0w8=)
                          2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: 2RfYrbgMTyev1ubvBIAyCtW57ncCUqkQE/aVcrIO66s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:58:b7:88:d0:ef:df:d3:08:26:ef:2f:30:99:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
        Validity
            Not Before: May 17 18:00:25 2024 GMT
            Not After : May 18 18:00:25 2024 GMT
        Subject: CN=0fce79f35abaa2724c551cd29bc8bff2c6957f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:b4:08:71:df:86:db:9e:1a:07:c5:77:7e:
                    4f:1f:c6:07:ad:23:31:cb:50:b2:b7:74:73:6f:c2:
                    db:61:18:50:30:e5:43:cf:59:e1:34:c4:30:d0:65:
                    34:45:55:10:6f:31:4d:6d:6c:b7:fc:ac:71:cb:7e:
                    75:65:22:cc:32:68:30:a7:3e:1c:6d:ac:bd:65:f5:
                    43:0e:b0:bd:f4:e9:b8:57:e5:6d:4f:d7:25:0f:00:
                    23:b2:00:23:a6:d1:c3:43:40:dd:dd:79:f2:61:f8:
                    0f:c6:ff:b6:2a:7a:4d:a2:82:c5:18:32:cb:b7:59:
                    6c:1f:d6:52:93:63:a2:58:7a:46:6b:2e:79:b8:b9:
                    b9:b9:bc:12:b3:59:e3:d5:8e:ef:62:76:ed:49:cf:
                    61:4f:ac:06:1f:af:29:da:96:87:60:21:01:8e:4c:
                    09:d6:3e:49:a7:96:74:a3:fb:fc:8d:44:da:60:b9:
                    46:8a:f2:7c:69:75:b8:54:c6:7f:1d:59:8e:fb:1c:
                    d1:9b:71:f4:53:3c:49:b0:aa:87:b5:57:dd:c2:53:
                    42:09:2a:1d:91:01:ab:90:06:7f:ea:4c:42:6e:5f:
                    70:41:1c:74:07:e9:08:30:ec:af:9f:d7:41:19:c5:
                    22:1b:5f:29:06:9c:ea:82:fc:3e:59:6a:8f:de:f7:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CE:79:F3:5A:BA:A2:72:4C:55:1C:D2:9B:C8:BF:F2:C6:95:7F:64
            X509v3 Authority Key Identifier:
                keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:76:97:2f:fb:d3:0c:15:a4:6e:e6:a2:2a:35:65:a2:94:90:
         36:65:9c:59:32:3e:67:6f:a6:96:53:d5:16:5f:96:bf:70:e1:
         b8:df:6f:bb:e3:4e:ae:94:51:53:be:de:30:fd:29:c6:5f:8c:
         5a:a4:5b:39:1f:40:e0:8c:5b:02:e6:ef:f5:4d:83:ea:4f:bc:
         70:77:53:5a:00:99:35:71:07:3d:f3:0c:58:df:8e:1d:26:4b:
         1c:4b:0d:ff:9e:5e:af:c5:2a:3e:fc:a4:a2:ea:ad:c9:d1:af:
         e4:60:13:f4:c3:fc:22:cd:0a:11:d4:b6:5b:61:7f:45:32:ac:
         a3:8f:62:c7:89:81:cc:bd:34:b6:2e:7d:1d:f7:eb:86:76:35:
         62:b5:c3:e6:56:ab:ae:72:86:b8:43:a5:e9:57:80:7b:87:31:
         00:d3:24:d6:db:4d:5a:eb:1e:a3:e5:6c:dc:86:b9:22:5e:19:
         2b:dc:8b:ac:f9:b9:5c:78:4e:0a:a4:d3:fe:2e:f3:8b:bd:69:
         9c:75:0d:37:8e:b7:81:a7:b7:98:38:3b:34:9b:09:3c:4e:dd:
         36:b2:10:27:15:04:b6:5e:78:d1:2f:67:22:dc:f3:fc:b4:91:
         b6:37:63:67:32:7e:2d:ad:54:ac:72:c4:fb:ed:5c:90:8a:81:
         eb:70:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:43 2024 by rpki-client on console-fra.rpki-client.org