Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File:                     F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier:          8wIdCdWvdGcxOtEYuuRFxKXVRD/NOTNGyIGqutTvjUM=
Subject key identifier:   9D:D5:95:24:71:7D:A4:C2:99:FB:02:D0:1D:27:FC:11:64:BB:AF:6A
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer:       /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial:       018F41C33A45648079E4B921CFB404BD62EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number:          1157
Signing time:             Sat 04 May 2024 04:01:04 +0000
Manifest this update:     Sat 04 May 2024 04:01:04 +0000
Manifest next update:     Sun 05 May 2024 04:01:04 +0000
Files and hashes:         1: 30ZlXdQUybIN4f0N66zknmOS35U.roa (hash: +n+3fKyAX4OyH68UeB00atNXSPDkJCOY26ZB7AkJBxo=)
                          2: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: xuwllieZrrd6nk4agwP4D9KPGQ2a/dDXrW6OtR5/tmA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:c3:3a:45:64:80:79:e4:b9:21:cf:b4:04:bd:62:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
        Validity
            Not Before: May  4 04:01:04 2024 GMT
            Not After : May  5 04:01:04 2024 GMT
        Subject: CN=9dd59524717da4c299fb02d01d27fc1164bbaf6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4d:c7:c2:31:52:4c:a4:7d:06:02:ee:4d:b3:
                    6b:aa:7d:0d:27:88:ee:ec:65:8c:71:0c:e1:2c:c8:
                    e8:72:aa:84:b2:af:4a:cc:3b:70:46:18:e2:1e:68:
                    42:65:be:95:88:6b:08:c6:11:ed:e3:bb:fe:c4:cc:
                    d7:c7:7e:c2:a0:de:8c:91:72:c5:ec:56:53:ef:16:
                    58:0a:ac:2f:dc:83:d0:db:dc:2b:74:69:f5:bd:1c:
                    6f:2f:e3:f9:71:80:90:b2:a1:db:f2:a7:9c:3d:75:
                    3a:96:36:d2:e3:df:16:b2:08:d6:a3:4e:15:16:81:
                    fc:70:0c:9a:bb:60:56:12:df:e4:15:db:3c:1e:dd:
                    18:61:b1:9e:f1:51:83:cc:8c:3b:44:b4:1a:4b:19:
                    9a:32:38:2b:d5:c2:cc:7f:85:70:f5:ae:dc:26:a3:
                    47:b7:5d:3a:42:19:61:fb:a2:bc:90:08:7d:5a:5e:
                    9b:a4:3e:0e:a2:2f:eb:17:b0:7a:7a:05:71:14:ee:
                    0d:07:4a:0e:62:a5:57:04:e8:d9:4a:b7:64:27:fd:
                    e3:31:8f:7a:a2:e0:b0:41:e2:d5:dc:1a:3f:78:64:
                    32:71:87:a8:6e:c6:82:b3:b9:f4:be:cc:d1:c6:dd:
                    26:2f:e7:08:8f:2f:c0:26:d1:17:a3:11:a6:47:52:
                    8a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D5:95:24:71:7D:A4:C2:99:FB:02:D0:1D:27:FC:11:64:BB:AF:6A
            X509v3 Authority Key Identifier:
                keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:4c:8d:ce:7d:d3:71:3b:4c:f3:27:52:44:da:74:c2:0e:
         77:22:ab:dd:6f:0c:38:42:36:fa:18:39:de:69:ac:2e:01:5d:
         6e:3d:0c:43:21:3e:ac:00:2c:cb:ae:2c:d1:49:0f:7b:2a:7c:
         07:0f:25:b6:2d:a9:4c:e7:e0:ae:be:81:6c:87:2a:22:e9:0d:
         01:da:2a:ad:76:d2:5b:f5:9e:ce:0c:a4:55:f7:f1:b7:c8:d9:
         47:7e:78:53:ee:48:d7:91:b9:b5:2a:e3:ed:7e:e7:19:e3:3f:
         09:ae:ea:a9:6c:e7:ed:f5:11:0d:ff:28:b7:b9:31:9c:1b:77:
         97:60:14:4f:c8:81:d0:87:18:23:2e:c2:92:59:34:31:9f:b1:
         83:92:12:ab:81:a5:fa:fe:bc:86:c8:3f:57:63:32:d5:db:66:
         7a:32:1a:a3:89:4e:2e:ec:3a:2c:17:3e:92:b8:d7:ac:1f:d2:
         e6:7f:6b:9f:57:0b:86:2f:89:c8:3e:9d:38:24:a0:fd:4a:0f:
         ea:12:ba:e2:f3:7a:08:05:13:ef:6d:24:8d:f6:10:ad:7d:93:
         35:f0:9c:a3:fe:01:90:b9:f5:3e:b2:77:42:50:35:ec:d0:8d:
         a2:e3:02:c5:8f:04:0d:cf:1e:00:c6:af:ff:a9:97:4a:78:6e:
         89:34:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:52:37 2024 by rpki-client on console-fra.rpki-client.org