Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.mft
File:                     b2uJUEhLnvQ_v5jTn-n4rF6De3g.mft (raw, json)
Hash identifier:          yaajmsP4ujZ3VTc84QNaRG5qNyvUrBAdr3r1oCAhBQw=
Subject key identifier:   22:5C:F4:36:A8:37:01:B3:C1:D9:56:55:2B:75:97:B0:54:5F:39:E3
Authority key identifier: 6F:6B:89:50:48:4B:9E:F4:3F:BF:98:D3:9F:E9:F8:AC:5E:83:7B:78
Certificate issuer:       /CN=6f6b8950484b9ef43fbf98d39fe9f8ac5e837b78
Certificate serial:       018F87ED58F65816DDB28441D87613E673B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2uJUEhLnvQ_v5jTn-n4rF6De3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 19:00:29 +0000
Manifest this update:     Fri 17 May 2024 19:00:29 +0000
Manifest next update:     Sat 18 May 2024 19:00:29 +0000
Files and hashes:         1: KvIrK-yiTycFjhVnWB5WI3zYDpw.roa (hash: KwBIc1BMzxQ+cAE4JsfD//IbMPActQH0uPth6ibpw4w=)
                          2: b2uJUEhLnvQ_v5jTn-n4rF6De3g.crl (hash: 3lbN4Dz2l6MBo4aGbitUmsn4SQTs/f3+VIfXyJGeiME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b2uJUEhLnvQ_v5jTn-n4rF6De3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:58:f6:58:16:dd:b2:84:41:d8:76:13:e6:73:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6b8950484b9ef43fbf98d39fe9f8ac5e837b78
        Validity
            Not Before: May 17 19:00:29 2024 GMT
            Not After : May 18 19:00:29 2024 GMT
        Subject: CN=225cf436a83701b3c1d956552b7597b0545f39e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:90:db:17:fc:7a:46:5d:41:b1:60:6f:4c:
                    db:65:14:a8:cc:8e:1f:6b:be:a8:64:43:f8:d5:cb:
                    ba:03:78:c6:89:35:39:21:86:b0:f3:0b:9f:e7:31:
                    25:14:aa:48:a9:91:cb:a0:b4:12:a2:73:ef:13:68:
                    26:ad:a6:7c:03:c7:77:f3:cf:dd:00:9d:57:87:1b:
                    a5:86:9b:0b:23:ec:c7:0b:8b:88:5d:c6:98:a7:14:
                    37:38:13:a7:be:8f:59:7f:0e:c4:dd:47:17:43:2d:
                    96:b4:bb:07:6f:33:6b:45:05:19:d7:a2:94:ff:15:
                    2c:5c:47:51:ef:23:eb:1a:4e:b9:83:80:ac:6f:6c:
                    8e:50:15:fb:3c:4d:96:b2:65:0c:1b:e7:b2:17:c0:
                    cd:f9:71:8f:cf:9e:88:b1:ee:61:3b:e1:6e:d0:3e:
                    59:41:bf:ee:a0:28:9d:07:72:62:f5:11:38:af:36:
                    ce:ba:79:16:a5:c1:4a:27:c3:6d:9c:ac:dc:70:5a:
                    37:99:3a:ba:1a:7d:69:08:ee:1a:eb:04:2f:f1:46:
                    cc:58:3f:bc:e1:19:52:f5:55:94:6b:ef:87:bf:6c:
                    11:7e:94:fb:03:96:d8:38:53:5d:10:de:99:10:68:
                    d3:d2:c3:21:cf:9c:13:93:f0:a5:28:be:e4:06:ab:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5C:F4:36:A8:37:01:B3:C1:D9:56:55:2B:75:97:B0:54:5F:39:E3
            X509v3 Authority Key Identifier:
                keyid:6F:6B:89:50:48:4B:9E:F4:3F:BF:98:D3:9F:E9:F8:AC:5E:83:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2uJUEhLnvQ_v5jTn-n4rF6De3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/65f882-ca21-4b73-b8e9-f09209b478cf/1/b2uJUEhLnvQ_v5jTn-n4rF6De3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:01:6b:b1:5b:62:ca:4e:86:df:3f:e1:1e:91:18:19:be:ca:
         c3:5b:c3:63:f9:e6:fc:4f:5c:0f:a6:f4:e6:e7:cc:da:00:e1:
         49:3e:84:63:d9:61:48:b0:25:3e:7d:ee:97:ce:2c:fd:93:88:
         00:3d:72:68:d4:09:e9:82:1a:03:a2:89:2a:c2:1f:8f:9c:24:
         84:39:6b:96:eb:b3:c4:a3:c5:72:10:02:f4:1f:61:9e:1a:b1:
         b3:57:92:b8:6d:a5:a3:9e:82:ae:2a:e6:05:b5:f8:fa:11:a1:
         4e:17:03:2d:03:d6:12:fb:8b:39:e9:e2:a7:8e:34:3e:85:5b:
         72:b4:8f:16:f7:6d:75:76:e0:4b:33:6d:4a:97:53:6c:78:91:
         98:10:b4:97:0b:a3:a7:76:c5:06:8d:73:58:3f:46:ee:f4:7e:
         3e:e6:d8:dd:dd:7d:38:f0:cc:9e:50:fa:a1:b0:d5:59:66:e8:
         42:ad:14:bc:9e:b8:e4:b6:fd:b8:80:ca:88:bc:d5:bf:3d:b2:
         37:7c:7b:ee:88:ae:c4:68:8a:e1:b1:98:47:31:72:ab:cf:4e:
         d6:2d:e8:31:98:8f:8c:73:67:be:43:21:49:f0:17:f1:48:6e:
         93:cf:ce:1a:66:af:ff:5f:dc:40:bd:fa:a5:28:68:77:f3:ba:
         54:f4:19:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:28 2024 by rpki-client on console-ams.rpki-client.org