Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File:                     bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier:          eNYLHGjRT/lESJXD1cqG97DrSIvg8MOh7EEuj/nHeQk=
Subject key identifier:   5A:75:00:66:52:34:35:33:67:85:48:16:4F:36:0C:BD:8F:84:F8:7A
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer:       /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial:       018F87487AEF82FBB39304F6C4A9682CEA0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:00:25 +0000
Manifest this update:     Fri 17 May 2024 16:00:25 +0000
Manifest next update:     Sat 18 May 2024 16:00:25 +0000
Files and hashes:         1: P7Stq8axPaCJnPn9Iw7gt7fT8D0.roa (hash: 201uvW25zFb5pa+ncKr3m83sc87fazP73y7ZBlJ6V9U=)
                          2: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: vC8FF5I9lRgtQeScBSLCH++K75dqhPwglHc8kqeUB1o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:7a:ef:82:fb:b3:93:04:f6:c4:a9:68:2c:ea:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
        Validity
            Not Before: May 17 16:00:25 2024 GMT
            Not After : May 18 16:00:25 2024 GMT
        Subject: CN=5a75006652343533678548164f360cbd8f84f87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:34:f6:7a:4d:73:72:26:34:73:66:0a:e6:
                    a6:c8:73:0b:64:e4:d4:ba:cc:87:a3:7d:f6:f3:4d:
                    5d:92:b4:c6:6a:47:9b:85:fe:09:d9:30:8a:50:0e:
                    ba:ca:c3:55:8b:d7:a4:96:cc:db:fb:cc:f1:a9:54:
                    0d:98:a1:4f:c4:b1:0e:87:64:ad:62:2a:20:ce:d9:
                    54:af:7e:d8:c4:7c:9b:e5:4e:b3:50:a3:a9:62:72:
                    2d:b6:d9:b0:0d:ed:62:4c:23:5a:6e:30:56:f4:eb:
                    02:55:54:80:54:61:87:3e:aa:73:fa:fc:9e:60:de:
                    c1:4e:64:80:3e:b6:1e:dc:2e:61:2a:64:49:d5:69:
                    e9:a1:bb:1f:1c:cd:46:c4:fb:0b:ec:89:43:81:d4:
                    35:56:28:0d:e3:93:35:5b:7d:a6:3c:81:9c:43:f4:
                    f9:7d:46:c7:05:56:2a:1f:0b:ad:cb:58:64:54:b3:
                    42:ae:4a:77:c9:7a:e1:7d:e9:74:b9:51:38:8a:dd:
                    02:bb:a2:a2:47:e7:a7:5a:b8:59:28:8d:4e:b9:a9:
                    6d:00:f4:a7:a8:45:c3:ec:bc:c5:2c:47:3a:32:64:
                    82:a4:92:af:ba:b2:39:e7:98:3a:79:78:2a:41:ad:
                    5b:6d:c3:4c:5f:6a:9a:f8:17:6d:10:23:fc:bb:db:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:75:00:66:52:34:35:33:67:85:48:16:4F:36:0C:BD:8F:84:F8:7A
            X509v3 Authority Key Identifier:
                keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c5:3b:09:86:d9:36:d1:93:83:fb:bc:8f:28:a1:0c:7b:1a:
         d5:eb:db:dd:5e:cb:7f:d6:58:82:7c:f2:79:32:10:7f:e8:48:
         c6:fc:ea:c2:f3:7b:58:6c:bd:58:8c:a9:18:36:40:6d:59:76:
         d0:6d:f6:e9:cc:44:8a:55:a9:53:a2:a0:43:e5:27:1c:06:e2:
         02:a5:4a:f7:a8:c8:85:f2:8a:ae:90:a9:ee:84:cc:8d:47:53:
         e4:e0:04:a1:42:47:92:14:73:51:b2:d0:19:2b:68:be:08:9b:
         5c:b6:dc:a9:f3:48:9c:fd:03:76:69:b1:83:b5:19:39:4d:e6:
         c5:04:ea:4f:32:84:c2:c2:f3:7c:03:c9:04:6f:01:f9:4e:ca:
         38:d8:d2:6c:fc:fa:39:92:41:3f:5c:ad:60:a6:74:b8:8e:68:
         7c:58:b7:31:b3:b3:a5:b2:9f:a8:ba:5b:d5:8e:25:8a:56:de:
         ed:ef:88:1c:e5:72:0c:63:97:93:56:78:4b:1d:bd:44:4c:92:
         b9:53:4f:e1:28:1e:9b:bf:64:aa:07:9e:ea:e8:39:43:3a:c9:
         69:c2:de:28:29:be:bd:86:ce:80:13:65:db:d1:2e:c9:64:97:
         d6:fc:57:e7:6b:cb:81:dd:c0:85:42:ce:a1:ba:4b:2c:41:b6:
         98:f2:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:09 2024 by rpki-client on console-fra.rpki-client.org