Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.mft
File:                     wq6rUi8EO4jAUH8F-GSzvV7ELFc.mft (raw, json)
Hash identifier:          71XzhCI8a35Mb1KrQalNPIRCBDxFWHOTVeHsliOuFjM=
Subject key identifier:   E0:26:74:88:78:B6:E4:89:AE:51:CA:6B:AD:3F:A6:E7:EC:57:13:45
Authority key identifier: C2:AE:AB:52:2F:04:3B:88:C0:50:7F:05:F8:64:B3:BD:5E:C4:2C:57
Certificate issuer:       /CN=c2aeab522f043b88c0507f05f864b3bd5ec42c57
Certificate serial:       018F8937C91B80EBA29F39A22602D2EDDAA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq6rUi8EO4jAUH8F-GSzvV7ELFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.mft
Manifest number:          1178
Signing time:             Sat 18 May 2024 01:01:25 +0000
Manifest this update:     Sat 18 May 2024 01:01:25 +0000
Manifest next update:     Sun 19 May 2024 01:01:25 +0000
Files and hashes:         1: RaJeMyJ17K-0c8bz6_IAt-TCq9k.roa (hash: tX4sWvDL6tqhr+9xX2ZviaShC2Yq0Ho5olzZwI02zKA=)
                          2: wq6rUi8EO4jAUH8F-GSzvV7ELFc.crl (hash: 1FMYJvaDTh0sGrZ5iDti8UKDjjh8k+A4JgOuVyvYms4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wq6rUi8EO4jAUH8F-GSzvV7ELFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:c9:1b:80:eb:a2:9f:39:a2:26:02:d2:ed:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2aeab522f043b88c0507f05f864b3bd5ec42c57
        Validity
            Not Before: May 18 01:01:25 2024 GMT
            Not After : May 19 01:01:25 2024 GMT
        Subject: CN=e026748878b6e489ae51ca6bad3fa6e7ec571345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9a:c4:df:a3:68:bc:93:4c:67:e8:e0:bd:20:
                    4f:bb:c8:67:3d:51:66:2b:24:6e:30:0e:eb:c4:d3:
                    38:47:3b:87:64:07:8d:fc:b6:58:8c:fb:cb:93:b3:
                    45:86:2e:01:3e:a2:59:65:98:e0:23:40:47:f1:a2:
                    d2:b6:5c:a8:e0:b1:57:22:e8:9a:6e:7e:df:27:ee:
                    a4:1a:55:fc:32:33:b9:b6:1c:6d:a7:ab:04:ee:0a:
                    aa:f5:2b:59:b1:c6:a1:38:23:1f:bb:94:0c:f5:66:
                    a6:63:0f:e5:62:ae:ef:76:f9:69:49:a1:5f:a9:e4:
                    85:70:36:ad:59:97:73:25:3f:3c:40:d7:35:32:bc:
                    9b:c9:af:9f:77:1a:ba:a8:ef:ee:74:18:ce:77:1f:
                    3f:52:ff:e2:92:a8:14:9b:f5:e7:93:01:37:41:c0:
                    f2:47:d1:ba:ae:31:4c:48:e9:0e:11:9f:1b:67:14:
                    c1:f3:6a:f3:6c:8a:e7:19:fc:e6:dc:4f:91:3a:85:
                    01:35:35:a7:06:11:0f:a6:02:5a:38:5b:ec:64:c5:
                    b7:6e:44:a1:dd:60:5e:26:a3:e8:ec:4a:55:b6:ff:
                    49:39:57:36:49:44:d1:3d:52:8b:6b:05:49:60:68:
                    8f:76:ff:1e:10:2f:b6:dc:fa:30:3e:19:4b:68:b8:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:26:74:88:78:B6:E4:89:AE:51:CA:6B:AD:3F:A6:E7:EC:57:13:45
            X509v3 Authority Key Identifier:
                keyid:C2:AE:AB:52:2F:04:3B:88:C0:50:7F:05:F8:64:B3:BD:5E:C4:2C:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq6rUi8EO4jAUH8F-GSzvV7ELFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/bfc4e2-d7f4-4cf7-92f4-31f2742af2de/1/wq6rUi8EO4jAUH8F-GSzvV7ELFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6a:29:9e:64:f6:e8:b2:3a:3f:ba:88:e8:c3:4f:91:51:9e:
         45:eb:f2:d8:9e:fd:4b:6a:c4:98:6e:c4:0c:a7:c9:8f:5d:a9:
         8f:b0:63:b7:fb:4c:49:d7:a5:26:86:60:39:61:5c:ed:65:c1:
         ed:47:5c:7d:3d:53:6a:ba:23:78:9c:50:07:09:7a:d8:0c:fb:
         0a:36:99:a0:74:55:3b:b5:a5:63:3e:e1:40:31:56:8f:f4:a2:
         f5:50:7c:b6:28:86:90:4a:a5:f4:28:55:2d:63:6e:4f:c0:88:
         00:e6:1e:70:fd:c2:fe:c1:fc:68:f7:3f:65:02:ff:88:19:3e:
         06:b4:3a:df:e7:51:90:0a:4d:3c:41:83:df:16:e6:2c:e5:9e:
         7f:b0:ec:60:32:61:87:8f:cb:44:4a:a5:50:ec:62:b8:b1:5b:
         6b:d2:21:ee:77:e5:d5:1d:ce:9f:6a:e7:f8:9f:c4:40:2d:03:
         43:bf:0c:2d:b7:20:ff:76:a0:5b:f5:f3:a6:ae:c4:cb:99:34:
         6c:92:56:1f:b4:9b:c7:fb:2b:1f:31:e9:3c:98:1b:4c:c0:81:
         29:c9:f5:6a:4a:cb:4f:b1:d4:47:47:d8:83:d5:14:b1:be:d7:
         b6:98:11:75:bd:f7:01:39:75:43:7e:2a:3f:7b:ce:7c:42:32:
         f7:76:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:35:06 2024 by rpki-client on console-fra.rpki-client.org