Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File:                     ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier:          byPkKHEXc4IfPqXgAXbHezuP33xKfiLTtxpOxvN6b/g=
Subject key identifier:   1E:99:4A:E1:E6:C8:A0:0A:CE:54:AC:80:BE:83:AF:8A:7C:35:40:63
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer:       /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial:       018F8748D3286A05939554B3CF6943BB8C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:00:47 +0000
Manifest this update:     Fri 17 May 2024 16:00:47 +0000
Manifest next update:     Sat 18 May 2024 16:00:47 +0000
Files and hashes:         1: XCy-gio8z1L5MtBLt0AWGBpeLRk.roa (hash: wQbBgN2zJaz6LR5rQxJU0iceJrtAte313oabxitZ774=)
                          2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: EYSCXD3z1qAIN/OrmEBwcAVIYK0bfxvV/fdtX7EYb4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:d3:28:6a:05:93:95:54:b3:cf:69:43:bb:8c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
        Validity
            Not Before: May 17 16:00:47 2024 GMT
            Not After : May 18 16:00:47 2024 GMT
        Subject: CN=1e994ae1e6c8a00ace54ac80be83af8a7c354063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:55:c4:65:1e:01:1d:77:83:a1:97:c9:9a:
                    08:57:f7:cc:2f:1a:d9:dd:4d:bf:ed:e0:7f:cb:f0:
                    9a:48:45:03:6f:09:39:b6:f3:da:56:a7:b0:a4:43:
                    da:f4:b1:99:be:d3:2d:9e:e3:3d:2e:d7:11:43:98:
                    f0:37:70:2c:93:81:9c:99:1c:79:05:c7:df:9c:27:
                    f8:80:6c:d2:38:fc:a6:7c:63:70:1a:41:f3:f5:0b:
                    d1:45:2f:48:d6:d6:24:65:69:25:25:eb:0c:eb:15:
                    3b:3a:70:1c:aa:ec:08:44:bb:e3:ae:19:bb:7e:d0:
                    3b:04:b4:bc:a0:93:a6:89:a9:25:3f:50:e8:44:4a:
                    b0:fe:a5:6e:37:6e:0e:b5:eb:ff:20:93:ec:bc:86:
                    a5:36:4a:4a:9d:7b:66:ba:63:5c:b3:73:52:51:74:
                    94:8e:4f:e2:32:cc:44:85:96:6a:50:db:a3:d2:0f:
                    76:30:8a:8d:b7:27:fb:15:02:c1:3d:1b:87:f2:67:
                    8e:31:dd:46:e5:14:4d:88:5d:fc:b7:d4:96:92:5d:
                    74:99:85:d4:7c:04:72:8a:0b:a3:41:05:32:76:5f:
                    ba:d7:b6:d7:96:cd:54:c7:f3:b7:0f:4d:d9:c5:aa:
                    46:a5:e8:d3:d0:40:34:e5:98:c1:5b:7f:65:9e:9c:
                    c2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:99:4A:E1:E6:C8:A0:0A:CE:54:AC:80:BE:83:AF:8A:7C:35:40:63
            X509v3 Authority Key Identifier:
                keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:9d:3a:45:39:2a:ea:64:e0:28:03:f8:c4:df:1c:5c:26:37:
         24:36:bd:36:e0:0a:8b:96:e8:8b:30:fa:7f:33:ac:9d:8c:79:
         03:42:fb:b6:86:a1:16:ae:64:7f:db:5e:f1:11:59:20:b3:51:
         bc:3a:86:62:e1:e9:86:eb:47:9a:fe:80:48:cd:68:a3:f0:45:
         8a:f4:d0:d5:d6:e2:24:1f:8e:e9:ff:be:49:45:3c:25:54:cb:
         3e:49:3f:6e:72:67:85:92:87:69:e3:6a:d5:3a:12:de:3d:a3:
         42:11:13:2c:1b:43:d3:06:b7:4c:4c:d5:65:9b:79:34:b3:11:
         5e:d5:41:a7:20:06:ad:cb:ae:06:c5:88:2c:45:59:ae:ae:95:
         46:6e:04:81:64:99:33:08:53:a6:92:03:8f:36:da:2c:ef:d7:
         c8:98:8a:e0:99:a8:7a:4d:a5:49:9e:f4:6e:fd:59:08:f3:3e:
         e2:f1:4c:62:3d:a6:81:26:66:20:23:04:28:a4:5d:51:24:ec:
         f7:a2:6b:27:44:5e:56:84:d9:dd:b5:54:dd:ce:98:11:c8:f5:
         46:77:a2:8d:bc:7b:33:b9:f8:4f:69:7c:8c:3f:c0:05:e7:c9:
         e9:e8:6f:b7:b0:10:84:cb:79:5f:9f:bb:6e:d8:36:c7:49:50:
         32:94:dd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:28:21 2024 by rpki-client on console-ams.rpki-client.org