Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File:                     M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier:          CGXAFkaDbEGpYWGRK5PVN11/T7o3n3C5JBabfuRE5RY=
Subject key identifier:   ED:CA:13:1F:BF:3D:B2:45:AA:1E:D9:22:75:7D:39:3A:6D:84:1E:55
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer:       /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial:       018F8891C923C8039B5A9EE6411BDEB5BAFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number:          1179
Signing time:             Fri 17 May 2024 22:00:06 +0000
Manifest this update:     Fri 17 May 2024 22:00:06 +0000
Manifest next update:     Sat 18 May 2024 22:00:06 +0000
Files and hashes:         1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: I+z3KBxfDxWTFpRw+T8oeOy6fECrvNYP6gz9xnCevlk=)
                          2: mevJRdOZ166MQUr_uRI7fI7Kruk.roa (hash: mak6S+xAs84BGBMmnKemSmK7J9U3dvKD3pVC9QlL9dU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:c9:23:c8:03:9b:5a:9e:e6:41:1b:de:b5:ba:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
        Validity
            Not Before: May 17 22:00:06 2024 GMT
            Not After : May 18 22:00:06 2024 GMT
        Subject: CN=edca131fbf3db245aa1ed922757d393a6d841e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:ff:d3:e8:1f:cc:c8:fd:56:e0:10:ad:4d:
                    2c:ed:35:0a:52:c0:fb:c0:53:61:43:ec:86:b8:1c:
                    71:51:44:10:f2:92:36:f1:96:c0:78:bc:55:80:e0:
                    af:b0:27:b4:e7:86:e9:f6:54:ab:5c:93:5e:03:64:
                    17:04:b0:5a:e8:52:8a:ac:a2:a2:c2:c6:8c:d7:a5:
                    5f:ee:3f:9c:0d:b5:a0:5e:f4:06:2a:d9:32:70:e4:
                    3d:98:e4:b0:56:18:1b:2d:f6:bb:e9:3a:f6:f6:d2:
                    5b:26:f3:ff:2f:88:88:86:ab:d3:86:93:88:66:d5:
                    34:af:ed:4d:a0:9f:8e:fa:ab:db:e5:33:ea:87:58:
                    a3:1f:d4:aa:3a:4e:18:61:b7:15:0d:f9:d5:3f:73:
                    ed:32:1d:31:92:bb:7b:e8:ea:9f:05:d8:a1:35:4e:
                    7b:21:5d:c5:9e:21:ac:3a:5a:56:24:b3:7f:e1:e1:
                    23:4c:bc:3a:e6:f1:27:e9:32:bc:2b:a2:56:58:6d:
                    2a:18:0f:ac:9b:9d:0f:46:8a:7e:69:0c:6f:35:9f:
                    d5:87:87:6f:b5:09:4e:93:68:69:83:5d:27:4c:01:
                    65:82:d5:d9:70:c6:7d:8a:f5:6d:f7:86:cd:a7:5e:
                    3c:49:32:1d:04:c3:b1:d6:57:0c:79:f7:75:c1:f4:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:13:1F:BF:3D:B2:45:AA:1E:D9:22:75:7D:39:3A:6D:84:1E:55
            X509v3 Authority Key Identifier:
                keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:28:1d:b8:53:41:0f:49:15:3e:71:dd:42:77:79:37:ce:6b:
         6c:b5:ef:8d:24:1d:25:29:21:6b:fd:f4:ad:cd:31:de:ac:01:
         29:09:5a:ea:ed:ac:94:90:af:62:41:40:75:0e:df:53:90:97:
         24:19:7d:d5:d4:00:c0:c3:7c:d1:42:66:73:4a:59:c6:04:51:
         45:90:54:40:8c:f5:dd:e6:d9:87:ff:53:86:47:7c:d9:0e:02:
         27:bb:c4:98:ad:47:fa:40:f8:df:a4:95:31:4d:0a:18:e1:2d:
         f6:59:2f:6d:d3:bc:c3:5c:fc:dc:74:18:36:90:86:ae:8d:4f:
         f4:b9:0b:e9:cf:13:03:79:31:11:59:81:7d:73:14:4e:be:9f:
         27:07:50:b9:7a:10:60:ae:cd:61:71:c6:b0:47:e7:25:28:06:
         bf:c1:2e:52:5e:9e:72:24:04:a4:43:4a:57:7f:67:5e:23:20:
         8b:96:72:20:19:ae:c8:dc:4b:98:83:5e:77:30:5f:8f:7c:4e:
         dd:b8:cc:71:7a:e5:39:89:fb:4c:6e:57:6b:8d:91:ef:15:c7:
         60:1b:14:4a:00:7b:0e:24:8f:c8:28:dc:8e:dc:f6:ff:b1:d0:
         dd:aa:3e:a3:ff:02:8e:58:cc:db:8d:5f:39:87:2c:35:4d:ea:
         1e:9d:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:27:27 2024 by rpki-client on console-ams.rpki-client.org