Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
File:                     ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft (raw, json)
Hash identifier:          Im5/+d3jsGXzRPFJx+ch9nQ9vIHBnQeWW+ao3TcH/9o=
Subject key identifier:   6E:95:81:02:08:14:C1:4A:A7:E7:08:3F:B0:28:FA:CF:F2:9D:8E:00
Authority key identifier: 95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90
Certificate issuer:       /CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
Certificate serial:       018F874A5DCA1E1F8E9E886E669246753EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 16:02:28 +0000
Manifest this update:     Fri 17 May 2024 16:02:28 +0000
Manifest next update:     Sat 18 May 2024 16:02:28 +0000
Files and hashes:         1: RfPDqVQQTn9AP-r-gR4nTbhLcyU.roa (hash: cjf2e72ipmRfxniEZiNvLJqf5Ta8HlIhuQCuB/Kj9XA=)
                          2: ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl (hash: aF2aP9Vm5kzbJMS/ynCNAkJ23UqCnYHs7zbH+FxGsqw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:5d:ca:1e:1f:8e:9e:88:6e:66:92:46:75:3e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d61ae8472c5c8fcd813756c164c2f1864d3c90
        Validity
            Not Before: May 17 16:02:28 2024 GMT
            Not After : May 18 16:02:28 2024 GMT
        Subject: CN=6e9581020814c14aa7e7083fb028facff29d8e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:d4:09:85:16:a3:af:9f:1a:84:c0:ce:29:
                    25:d2:30:7b:9a:a7:1c:7b:85:9e:ce:23:b4:e3:25:
                    f9:5a:59:a7:36:22:57:ac:d3:20:16:7e:af:08:ad:
                    02:5b:6d:ad:eb:0e:d0:0c:96:38:d1:5e:b9:bc:b4:
                    46:ee:37:1f:db:42:be:b5:b9:cf:56:30:72:75:25:
                    e2:ea:7c:69:a5:53:b5:78:68:fd:17:2a:86:1e:37:
                    1a:29:f3:da:a4:40:96:8d:f3:b0:bf:63:ab:5f:65:
                    83:06:3e:01:44:22:44:c9:0a:89:14:7e:80:22:92:
                    86:85:10:e2:ca:eb:52:2c:b3:d5:6a:fe:98:73:5c:
                    22:7c:5a:28:69:0b:a0:a5:9f:10:1f:f3:f8:99:b7:
                    a7:f8:07:58:c1:02:f7:ef:e9:dc:db:d4:fb:16:5e:
                    8b:ab:ab:65:c2:27:13:e6:00:4c:ac:55:46:26:5c:
                    7b:b3:20:e4:92:d4:0b:02:44:df:e9:26:b4:f5:91:
                    7b:2d:6d:eb:3f:9d:22:46:2a:60:b6:c8:d3:c3:b5:
                    16:57:8a:86:56:50:15:3c:29:06:a5:7b:b5:95:4d:
                    99:f8:50:8c:62:08:6f:0d:61:a2:57:a7:50:9a:e1:
                    4b:ed:e5:95:f4:18:29:93:10:92:bd:09:a0:84:81:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:81:02:08:14:C1:4A:A7:E7:08:3F:B0:28:FA:CF:F2:9D:8E:00
            X509v3 Authority Key Identifier:
                keyid:95:D6:1A:E8:47:2C:5C:8F:CD:81:37:56:C1:64:C2:F1:86:4D:3C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldYa6EcsXI_NgTdWwWTC8YZNPJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee4748-4eab-4e55-b64a-2c7a11c1fbaf/1/ldYa6EcsXI_NgTdWwWTC8YZNPJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:aa:28:72:97:1d:2b:3c:a9:b8:b6:b5:0c:5d:74:88:29:
         75:62:c4:82:0b:8a:84:e1:e4:4d:1e:e1:e9:ad:4b:fb:27:4a:
         d3:6f:1e:f6:ed:44:9b:6c:d8:fb:7c:04:13:64:60:9b:d8:6e:
         be:16:3b:b1:a8:25:3e:bb:6d:94:a2:f0:56:61:ae:f6:ce:71:
         32:94:64:73:18:c3:6b:b2:e1:05:b3:e6:d7:32:aa:6b:88:2c:
         07:01:15:97:d8:b6:57:f5:b8:bd:b3:d2:14:a9:a2:4f:5d:b6:
         d9:19:18:4c:ce:a6:10:fc:7d:2e:cf:2c:1a:51:a1:cf:fd:51:
         a0:eb:98:f1:b4:09:ac:ee:c0:b8:0a:6d:2b:69:cf:60:44:6d:
         29:d6:d8:1c:12:4e:90:87:9b:1d:72:54:b6:8a:3b:51:30:94:
         a2:56:3b:62:a1:79:f6:cc:ea:9a:0a:59:f8:fb:e0:79:eb:5f:
         47:be:e4:9e:13:7e:de:61:fa:01:31:fd:8c:e5:40:ad:c8:7c:
         82:f0:c5:10:45:e5:52:70:a2:04:bf:5f:2a:5b:e6:fe:1b:a7:
         0c:20:8e:81:3a:6e:3c:42:b5:57:a3:f1:bc:66:7d:f0:60:95:
         67:63:f8:d4:fd:0f:68:83:b3:35:18:d5:e5:1e:ef:26:5f:89:
         ed:10:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:45 2024 by rpki-client on console-fra.rpki-client.org