Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File:                     U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier:          qhNfe5Cmt6KZN6QtruFhKJjjGSiUPftKpZDjTw8Wls8=
Subject key identifier:   7C:C5:65:E1:3B:97:A6:10:BC:BD:06:29:78:F7:DB:D0:49:90:2F:CB
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer:       /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial:       018F87ED450BCE1F8F68555F9B02D9775A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 19:00:24 +0000
Manifest this update:     Fri 17 May 2024 19:00:24 +0000
Manifest next update:     Sat 18 May 2024 19:00:24 +0000
Files and hashes:         1: NA0trVDP3IfIOrtlvb9lgC3R-yE.roa (hash: ESnKqvhcd8RRpPRGfijRBHm6LGBNOfvPLl3iN2vbV6I=)
                          2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: ueOmyDZwAUnH6DYdCWKYqpv9Ki9yAyJDrYxGy6ntSYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:45:0b:ce:1f:8f:68:55:5f:9b:02:d9:77:5a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
        Validity
            Not Before: May 17 19:00:24 2024 GMT
            Not After : May 18 19:00:24 2024 GMT
        Subject: CN=7cc565e13b97a610bcbd062978f7dbd049902fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:3d:64:95:4e:80:e3:0a:2c:78:fb:ec:aa:
                    99:56:c2:0c:02:e5:06:83:b0:4e:a2:04:32:1d:c6:
                    4c:57:cf:d4:a5:32:78:da:1f:db:58:d5:a8:f8:49:
                    0f:fe:d5:78:e9:81:d4:d6:48:66:53:95:23:48:72:
                    7d:88:76:f1:c5:87:60:77:fa:76:89:27:ed:a5:68:
                    bb:b1:8c:cf:ce:ff:37:74:2c:70:9b:31:29:5e:0c:
                    e3:8e:47:c4:9d:dc:b6:3e:8b:8d:8e:1a:89:10:56:
                    ab:f5:ce:c6:d1:dd:ad:be:44:6e:f3:df:97:01:8b:
                    c4:8a:12:7c:6b:27:36:fb:8a:f1:93:3b:72:7c:69:
                    9e:62:dd:a2:c6:12:26:ce:6a:71:07:3d:ee:10:14:
                    11:78:93:b4:da:a5:c7:ce:fa:a6:36:31:15:52:bd:
                    3e:a4:db:04:3e:3a:0b:f3:6e:b6:6d:9c:1f:43:5c:
                    ff:50:c0:91:13:82:5d:b9:70:6d:bb:e3:51:ef:d6:
                    dd:f3:83:71:de:1f:dd:14:36:f7:7f:7a:31:15:f2:
                    e4:32:1c:34:1b:04:a8:bb:39:73:ae:a9:e6:c3:e9:
                    aa:8e:54:0c:f3:47:3d:25:ff:e5:84:1b:af:8c:4b:
                    80:ba:93:34:d8:5f:6c:c2:2b:ce:2a:90:4f:9b:3f:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C5:65:E1:3B:97:A6:10:BC:BD:06:29:78:F7:DB:D0:49:90:2F:CB
            X509v3 Authority Key Identifier:
                keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:25:8a:53:9f:fe:8c:30:b0:52:ab:d2:75:e3:cd:7f:58:
         00:5e:10:14:56:d4:20:03:ba:de:fa:7a:36:e2:11:47:b6:6e:
         32:54:7c:52:4a:f6:8f:be:9b:fb:3f:5d:07:84:44:64:d6:38:
         42:a6:5d:ff:40:6f:e4:60:4f:b5:f0:f7:47:90:9a:37:8e:90:
         76:3f:0f:5a:df:18:a2:9f:b9:a2:01:75:0e:f8:d3:88:82:56:
         8b:b7:83:ab:e8:ef:3d:e4:ac:2d:25:d6:66:34:f8:e9:b5:5f:
         c0:bb:6f:22:7f:f4:c9:49:fa:dd:5f:14:a9:8e:c3:51:6e:3d:
         9d:9d:9e:cd:1e:a0:c6:f2:69:24:34:e0:73:7f:f7:cb:65:ed:
         39:aa:84:f5:59:0d:fc:a5:c3:ee:b5:1b:f6:0b:95:d1:b1:4b:
         c9:d0:bc:7b:ed:c8:b4:e0:54:c9:47:ad:98:39:1f:13:01:6e:
         ff:f7:48:91:01:29:60:3d:d6:9f:c4:af:57:69:e3:b5:f8:d2:
         d0:9d:a3:2c:59:b1:2b:2c:7f:79:a5:a1:66:ff:79:ed:9a:d2:
         27:01:61:8e:e4:2b:a8:ee:e3:4b:ed:7a:37:85:51:25:67:19:
         2c:d9:cb:73:f3:32:aa:f0:b1:8a:e5:b8:68:0c:55:4b:e3:95:
         28:5e:b3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:18:05 2024 by rpki-client on console-fra.rpki-client.org