Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File:                     rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier:          nXG3YNDKH4QY7lVCHx6ieIkXUPTHpaRHchIm/ahYURg=
Subject key identifier:   62:B3:EB:AC:6B:81:A4:1E:0D:59:D4:4F:C5:DE:35:DD:11:95:82:55
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer:       /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial:       018F874842A57498C432E5060F843542B499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:10 +0000
Manifest this update:     Fri 17 May 2024 16:00:10 +0000
Manifest next update:     Sat 18 May 2024 16:00:10 +0000
Files and hashes:         1: 7PIP1FWXYDN1Eo6TpaT8Kz61Oe8.roa (hash: N4ORB3w7i0PmLXtF0Zpga/yxQAOvg4Gw0jXb4k2m+0s=)
                          2: cMdj0P88JQ_n0sb97lOA61ny7JY.roa (hash: ozBMQKtipt9ETXeR2bLNBJ5Byygr7vHSkCp4wVTZw/Q=)
                          3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: /xuUg4Y16ZiVcPFBsEZJHVgwIsc3/x5Y7MMOLH+3JM8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:42:a5:74:98:c4:32:e5:06:0f:84:35:42:b4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
        Validity
            Not Before: May 17 16:00:10 2024 GMT
            Not After : May 18 16:00:10 2024 GMT
        Subject: CN=62b3ebac6b81a41e0d59d44fc5de35dd11958255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:85:48:cc:de:bd:fc:23:50:ba:76:6c:59:
                    8e:c3:a2:5d:7e:55:b8:f6:fd:3f:fc:3a:52:de:20:
                    01:16:e3:b2:67:54:37:e2:b5:9d:69:6a:78:57:80:
                    40:dc:f6:43:5a:15:d4:21:d3:81:4f:23:d2:e5:6e:
                    c2:20:36:ac:f3:45:c4:95:25:02:eb:33:3a:17:d9:
                    f1:22:59:62:73:d4:2a:34:58:f2:a8:b4:d9:5c:0d:
                    09:82:ab:69:4c:2b:9c:51:8f:e6:71:36:fe:20:27:
                    c9:be:c3:d8:6c:01:91:d8:d0:40:c0:cf:ae:33:33:
                    b9:45:9d:e1:0a:04:59:cb:ea:5c:14:ef:cc:09:7f:
                    90:0d:12:31:05:97:43:f0:f5:51:98:ef:ff:a2:b0:
                    7d:1a:47:78:0e:00:f8:b1:a3:cd:52:01:bd:0c:5a:
                    e7:5a:48:c1:d5:95:a9:fd:91:63:5c:ab:ef:e7:a6:
                    9e:f3:af:32:b8:2f:66:d9:08:a2:3d:59:71:8d:95:
                    a7:59:2b:3c:ba:39:0b:4c:8d:dc:f1:92:1c:a2:46:
                    bf:b7:1b:d8:6b:61:2d:74:e2:47:19:da:94:ed:2f:
                    f0:bc:c8:79:33:71:2a:f8:8b:84:af:5f:d1:ba:90:
                    a0:ea:50:c0:f0:7c:19:80:4a:32:b5:b9:0a:df:1f:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B3:EB:AC:6B:81:A4:1E:0D:59:D4:4F:C5:DE:35:DD:11:95:82:55
            X509v3 Authority Key Identifier:
                keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:af:64:d9:73:5f:e5:f8:a6:52:04:49:d0:1a:ee:d9:71:a6:
         48:79:53:67:bb:5e:da:4d:50:51:67:ef:14:26:ed:fb:4e:ba:
         b6:90:18:5e:71:77:e5:ec:65:b3:09:36:50:02:ca:a3:ea:39:
         b5:fb:bd:27:fa:68:ed:be:4d:3d:4c:fc:9f:47:50:9d:6f:eb:
         96:82:75:d2:fc:83:f1:c9:65:d3:77:79:5f:aa:23:2a:f6:c1:
         7d:cb:1c:bc:6a:f9:3d:f5:b7:95:6c:75:cd:a3:07:e3:24:cb:
         55:9a:1f:ce:54:87:97:e1:36:36:20:1b:1f:7b:64:a0:4c:9b:
         c3:da:3a:1b:2c:57:c5:96:aa:4b:77:f4:b9:31:9d:f4:ca:83:
         0d:19:56:c8:e9:3e:d5:93:ca:f9:61:4e:2b:30:99:bd:5d:24:
         52:de:60:75:a3:c5:85:0a:af:2e:6a:08:a4:e6:3f:1d:1b:4f:
         80:e4:c8:c7:9f:f6:22:c5:ac:df:d5:fb:2b:72:b7:df:a5:0f:
         52:6f:f2:f9:c2:9d:fb:f3:05:b6:0f:7c:bb:ae:9d:4a:a5:71:
         50:04:78:b9:b2:b1:9b:33:0f:15:ba:ea:71:6a:ce:c0:f5:cd:
         58:53:51:fa:c8:2c:90:5a:11:34:7c:03:08:4b:c8:67:4a:af:
         4e:df:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:40:32 2024 by rpki-client on console-ams.rpki-client.org